Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
File: a4d_CC_1_vSwfPj3wPcTNLyLhII.mft (raw, json)
Hash identifier: FKyKjf2NZ7SYdQ8iFXur0qN2AtGrasb+9NFW3ovPxtA=
Subject key identifier: B5:3C:B0:E8:5B:10:32:C9:63:D0:7A:30:7D:3E:D4:25:B6:A7:95:6B
Authority key identifier: 6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82
Certificate issuer: /CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
Certificate serial: 019D389BD0DF6C0BD0CF197884DA1BB3FD60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
Manifest number: 0EDF
Signing time: Sun 29 Mar 2026 08:00:28 +0000
Manifest this update: Sun 29 Mar 2026 08:00:28 +0000
Manifest next update: Mon 30 Mar 2026 08:00:28 +0000
Files and hashes: 1: S3FXkXzy3Kk8Jk2j1HLvioIgDlc.roa (hash: K3q9EwbqCBABfYJ1V/CSD4YCx9VoXbubpukbuCyy8vI=)
2: a4d_CC_1_vSwfPj3wPcTNLyLhII.crl (hash: X/DW7n1z1SsctDSMhujSxn1z4bTbCvZvQ1sLVNIx2tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d0:df:6c:0b:d0:cf:19:78:84:da:1b:b3:fd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b877f082ff5fef4b07cf8f7c0f71334bc8b8482
Validity
Not Before: Mar 29 08:00:28 2026 GMT
Not After : Mar 30 08:00:28 2026 GMT
Subject: CN=b53cb0e85b1032c963d07a307d3ed425b6a7956b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:3d:4b:61:e3:9b:51:d2:e1:91:be:36:d9:
c0:3c:8a:33:4c:eb:34:10:8d:08:2d:f2:84:f2:08:
45:69:11:7f:80:2f:90:61:47:8c:fb:f6:1e:3d:e7:
16:46:05:23:bc:e5:46:26:4a:12:af:2c:d4:74:47:
68:64:93:f8:97:d1:da:02:7d:27:30:03:97:64:57:
54:8f:c1:80:b5:95:d2:c8:61:a6:c2:b4:92:83:dc:
d7:94:76:fc:e0:4e:5f:78:c5:48:cb:16:fd:1a:1e:
4b:d9:0b:04:8f:b2:02:68:24:4d:60:6e:9d:02:b9:
eb:f2:04:1e:4d:fd:33:a3:af:72:68:83:93:16:4f:
63:da:e0:23:ee:67:30:1e:8f:7d:e5:be:bb:f0:c1:
27:05:15:6a:2f:fa:c0:ce:40:7f:42:9b:0c:87:d9:
42:4b:42:19:f7:e7:be:75:7b:79:d9:42:e4:d8:7f:
a3:6e:ee:29:a3:12:5a:ea:be:94:a4:72:9a:c0:c7:
9b:53:13:5d:56:12:7c:04:ee:3c:f5:5f:3a:a3:8e:
59:7e:e6:fc:4a:77:78:ba:f3:a9:b8:e2:28:b6:a5:
4e:6f:20:d2:59:20:a5:a6:5e:20:8c:ac:e3:1b:87:
28:b3:3b:1d:d7:af:07:5d:ee:b6:39:76:7f:cf:c4:
ee:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3C:B0:E8:5B:10:32:C9:63:D0:7A:30:7D:3E:D4:25:B6:A7:95:6B
X509v3 Authority Key Identifier:
keyid:6B:87:7F:08:2F:F5:FE:F4:B0:7C:F8:F7:C0:F7:13:34:BC:8B:84:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4d_CC_1_vSwfPj3wPcTNLyLhII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/11cf4e-60a3-4622-b212-7314e694bac9/1/a4d_CC_1_vSwfPj3wPcTNLyLhII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1a:e1:9a:c9:18:f3:76:fe:e7:03:b9:52:c7:01:f6:5e:d6:
97:9f:5a:26:bc:0c:1f:9a:c9:bf:1b:e8:59:0b:52:41:67:d0:
8b:89:58:e0:3f:d2:ee:a3:7a:0c:61:0f:4e:04:99:59:0b:a6:
06:a7:e4:39:46:25:a9:c5:2d:c3:75:24:4f:20:87:ad:c3:88:
a5:b6:e0:9d:62:f0:32:9f:44:c4:97:02:3b:c0:dd:c4:87:9d:
3e:fa:fe:e6:45:4c:ec:32:c1:7d:96:f7:11:b8:b5:22:93:da:
f0:9a:0f:40:3c:03:d4:b5:cc:ca:74:c5:0e:e8:04:86:6e:aa:
27:8d:3c:de:8b:8a:8c:c3:4d:75:79:c2:32:73:11:a3:e3:36:
c9:53:5b:e1:2e:29:b9:cd:54:61:ba:9f:1c:bb:16:d4:a9:c1:
21:56:c8:c7:d2:38:9d:08:b7:25:f0:9c:48:6c:58:ac:b6:dd:
1f:13:fe:9f:82:6c:a7:00:f2:42:3d:5f:6a:70:93:48:7f:ed:
ed:66:fe:34:d4:18:42:a3:22:ad:af:0e:4f:61:01:4d:5f:ac:
b3:55:da:28:60:67:80:35:03:34:51:08:0f:93:c2:ba:96:b5:
0d:89:15:dd:c7:c2:73:b6:68:94:3d:48:85:5b:77:e7:36:0f:
9d:5e:0c:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m9DfbAvQzxl4hNobs/1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiODc3ZjA4MmZmNWZlZjRiMDdjZjhmN2MwZjcxMzM0YmM4
Yjg0ODIwHhcNMjYwMzI5MDgwMDI4WhcNMjYwMzMwMDgwMDI4WjAzMTEwLwYDVQQD
EyhiNTNjYjBlODViMTAzMmM5NjNkMDdhMzA3ZDNlZDQyNWI2YTc5NTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqus9S2Hjm1HS4ZG+NtnAPIozTOs0
EI0ILfKE8ghFaRF/gC+QYUeM+/YePecWRgUjvOVGJkoSryzUdEdoZJP4l9HaAn0n
MAOXZFdUj8GAtZXSyGGmwrSSg9zXlHb84E5feMVIyxb9Gh5L2QsEj7ICaCRNYG6d
Arnr8gQeTf0zo69yaIOTFk9j2uAj7mcwHo995b678MEnBRVqL/rAzkB/QpsMh9lC
S0IZ9+e+dXt52ULk2H+jbu4poxJa6r6UpHKawMebUxNdVhJ8BO489V86o45Zfub8
Snd4uvOpuOIotqVObyDSWSClpl4gjKzjG4coszsd168HXe62OXZ/z8TuCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLU8sOhbEDLJY9B6MH0+1CW2p5VrMB8GA1UdIwQY
MBaAFGuHfwgv9f70sHz498D3EzS8i4SCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTRkX0NDXzFfdlN3ZlBqM3dQY1ROTHlMaElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xMWNmNGUtNjBhMy00NjIyLWIyMTIt
NzMxNGU2OTRiYWM5LzEvYTRkX0NDXzFfdlN3ZlBqM3dQY1ROTHlMaElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8xMWNmNGUtNjBhMy00NjIyLWIyMTItNzMxNGU2OTRiYWM5
LzEvYTRkX0NDXzFfdlN3ZlBqM3dQY1ROTHlMaElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRrhmskY
83b+5wO5UscB9l7Wl59aJrwMH5rJvxvoWQtSQWfQi4lY4D/S7qN6DGEPTgSZWQum
BqfkOUYlqcUtw3UkTyCHrcOIpbbgnWLwMp9ExJcCO8DdxIedPvr+5kVM7DLBfZb3
Ebi1IpPa8JoPQDwD1LXMynTFDugEhm6qJ4083ouKjMNNdXnCMnMRo+M2yVNb4S4p
uc1UYbqfHLsW1KnBIVbIx9I4nQi3JfCcSGxYrLbdHxP+n4JspwDyQj1fanCTSH/t
7Wb+NNQYQqMira8OT2EBTV+ss1XaKGBngDUDNFEID5PCupa1DYkV3cfCc7ZolD1I
hVt35zYPnV4Mig==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:29 2026 by rpki-client