Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
File: 4fLKlRgjMUpfTRCmangiOY-4iWs.mft (raw, json)
Hash identifier: oxlpWJ97z9H5j2hCJc49OdD610H1FDuGEjOULpB7oQM=
Subject key identifier: 43:54:F0:4B:A8:2F:F8:88:9E:A7:65:0F:06:72:C0:28:55:A1:EC:31
Authority key identifier: E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
Certificate issuer: /CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
Certificate serial: 019D3865E882ADDC7E5E7099F90DDC847304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: 4fLKlRgjMUpfTRCmangiOY-4iWs.crl (hash: E2bEvW3dII0Op51iMdOUA6xuF0ioltV2RFT3pRGoIak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e8:82:ad:dc:7e:5e:70:99:f9:0d:dc:84:73:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=4354f04ba82ff8889ea7650f0672c02855a1ec31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:f3:62:c8:f5:8c:75:f1:75:7d:e9:f1:92:
f2:08:59:91:46:ce:f5:6d:98:22:8d:a9:18:84:00:
5e:14:53:b7:54:70:74:57:5d:20:bd:a8:99:44:50:
ee:fa:28:5e:7b:7c:9e:d3:fc:44:b9:6d:76:9e:51:
5f:8e:0c:24:b4:a3:3d:93:38:42:29:55:48:69:f1:
38:d1:4b:f2:35:64:63:80:69:d3:97:d5:b6:14:6d:
1d:c2:97:60:46:87:78:74:e4:38:67:16:e8:2e:42:
fe:b4:62:fe:08:56:30:c8:95:53:61:d1:cd:3e:35:
10:ce:be:8b:96:08:69:da:38:ee:51:d8:5f:db:b3:
89:62:98:d5:93:9d:73:04:51:47:50:a6:02:f5:c3:
f1:c6:cd:a3:56:bc:25:86:7c:82:1a:e6:74:4a:c6:
0d:c1:67:ed:bd:66:1c:b1:64:0a:d8:6b:99:02:c7:
1c:e4:bc:18:09:d1:c6:86:5c:45:7f:62:49:7b:b2:
19:9a:e8:d4:6b:5e:ee:40:43:87:b3:6d:cd:7e:ff:
0d:6c:cb:0b:12:0f:41:57:5f:e1:92:2b:a6:98:0e:
44:88:7b:04:46:29:7e:92:6f:42:3d:0d:b3:75:81:
03:13:35:28:e3:40:7c:bf:5a:31:58:aa:a9:40:f3:
84:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:54:F0:4B:A8:2F:F8:88:9E:A7:65:0F:06:72:C0:28:55:A1:EC:31
X509v3 Authority Key Identifier:
keyid:E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e0:a2:c6:a7:c3:8d:b3:b9:0a:ff:a3:f1:f7:29:b0:14:8d:
77:42:c7:1b:ea:2b:f6:d9:6f:b3:f0:42:e5:99:a8:ae:0f:06:
58:5f:c2:79:46:b2:c6:bf:76:9e:bf:dd:9a:1c:be:cc:95:4d:
72:8c:1b:61:5f:ae:55:c8:2f:c8:00:16:67:29:fa:c8:21:4c:
0a:b7:b6:8c:6e:52:1a:72:0b:f4:40:43:20:61:2f:90:4d:bc:
c8:ce:17:4f:cf:92:47:d7:ff:a9:6c:59:9e:a3:25:8e:39:fb:
75:da:08:30:af:d5:02:a3:b2:9e:2a:7f:ed:15:1f:a4:07:6b:
9c:4e:7a:5d:6f:1e:ba:49:35:93:84:7f:92:22:67:94:89:5a:
ca:eb:04:f7:27:a7:83:b0:11:de:a7:eb:9d:e2:b3:db:73:22:
03:a9:c3:e4:99:5e:99:23:ae:40:38:7c:dc:f6:b1:b6:75:a4:
1a:33:b3:f9:4c:d5:eb:3e:66:ee:b2:9e:8c:88:3a:31:82:ec:
cd:14:c7:0c:16:be:c4:38:71:d9:1c:e0:98:04:e1:2b:36:ee:
e0:4d:f4:19:f8:d0:af:d7:7c:f8:bf:c0:ac:b7:6a:be:8f:ed:
93:64:69:f0:45:be:75:c1:ad:bc:1b:9f:0e:c1:86:55:e2:9f:
71:5e:14:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZeiCrdx+XnCZ+Q3chHMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjJjYTk1MTgyMzMxNGE1ZjRkMTBhNjZhNzgyMjM5OGZi
ODg5NmIwHhcNMjYwMzI5MDcwMTM1WhcNMjYwMzMwMDcwMTM1WjAzMTEwLwYDVQQD
Eyg0MzU0ZjA0YmE4MmZmODg4OWVhNzY1MGYwNjcyYzAyODU1YTFlYzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBrzYsj1jHXxdX3p8ZLyCFmRRs71
bZgijakYhABeFFO3VHB0V10gvaiZRFDu+ihee3ye0/xEuW12nlFfjgwktKM9kzhC
KVVIafE40UvyNWRjgGnTl9W2FG0dwpdgRod4dOQ4ZxboLkL+tGL+CFYwyJVTYdHN
PjUQzr6Llghp2jjuUdhf27OJYpjVk51zBFFHUKYC9cPxxs2jVrwlhnyCGuZ0SsYN
wWftvWYcsWQK2GuZAscc5LwYCdHGhlxFf2JJe7IZmujUa17uQEOHs23Nfv8NbMsL
Eg9BV1/hkiummA5EiHsERil+km9CPQ2zdYEDEzUo40B8v1oxWKqpQPOE1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENU8EuoL/iInqdlDwZywChVoewxMB8GA1UdIwQY
MBaAFOHyypUYIzFKX00Qpmp4IjmPuIlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZMS2xSZ2pNVXBmVFJDbWFuZ2lPWS00aVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC80ZjY5YWEtMjEzYS00OTdiLWIwNTkt
ZDI4ODRhMTliZTBhLzEvNGZMS2xSZ2pNVXBmVFJDbWFuZ2lPWS00aVdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC80ZjY5YWEtMjEzYS00OTdiLWIwNTktZDI4ODRhMTliZTBh
LzEvNGZMS2xSZ2pNVXBmVFJDbWFuZ2lPWS00aVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOCixqfD
jbO5Cv+j8fcpsBSNd0LHG+or9tlvs/BC5Zmorg8GWF/CeUayxr92nr/dmhy+zJVN
cowbYV+uVcgvyAAWZyn6yCFMCre2jG5SGnIL9EBDIGEvkE28yM4XT8+SR9f/qWxZ
nqMljjn7ddoIMK/VAqOynip/7RUfpAdrnE56XW8eukk1k4R/kiJnlIlayusE9yen
g7AR3qfrneKz23MiA6nD5JlemSOuQDh83PaxtnWkGjOz+UzV6z5m7rKejIg6MYLs
zRTHDBa+xDhx2RzgmAThKzbu4E30GfjQr9d8+L/ArLdqvo/tk2Rp8EW+dcGtvBuf
DsGGVeKfcV4U6Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:00 2026 by rpki-client