Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.mft
File: 4DcKtxTbCPR405PRKCdIkbeTKVI.mft (raw, json)
Hash identifier: RyC54xO2CweDW8X/4+xKbRSNIkj4CrHkL7yQNB8jQQQ=
Subject key identifier: 4A:2D:AC:73:0F:77:C4:FC:A2:DF:2A:52:AB:73:CB:2B:3F:AA:3F:EE
Authority key identifier: E0:37:0A:B7:14:DB:08:F4:78:D3:93:D1:28:27:48:91:B7:93:29:52
Certificate issuer: /CN=e0370ab714db08f478d393d128274891b7932952
Certificate serial: 019D3A1D09E354D9480243F2C7C6BA370F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DcKtxTbCPR405PRKCdIkbeTKVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.mft
Manifest number: 52
Signing time: Sun 29 Mar 2026 15:01:14 +0000
Manifest this update: Sun 29 Mar 2026 15:01:14 +0000
Manifest next update: Mon 30 Mar 2026 15:01:14 +0000
Files and hashes: 1: 4DcKtxTbCPR405PRKCdIkbeTKVI.crl (hash: mSZpWKUxPQs34DACx/HcK4L+EO9g3fFJxgf0cSu2+aA=)
2: PF6_QJj8YRzBUWzRDIQ4t1IPmnA.roa (hash: h6piPoUmp38AjHoQiX6p9iBQOr+oUtxb1p4/tf2CUQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DcKtxTbCPR405PRKCdIkbeTKVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:09:e3:54:d9:48:02:43:f2:c7:c6:ba:37:0f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0370ab714db08f478d393d128274891b7932952
Validity
Not Before: Mar 29 15:01:14 2026 GMT
Not After : Mar 30 15:01:14 2026 GMT
Subject: CN=4a2dac730f77c4fca2df2a52ab73cb2b3faa3fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:b7:33:ed:b2:a8:60:7b:63:71:a1:d7:ac:
45:1e:d1:9c:14:6b:bd:a5:13:cd:93:4e:32:38:48:
c6:9b:90:e4:0e:d0:e1:47:15:c6:6c:3d:2f:a2:13:
94:33:16:d3:dd:60:35:c8:3b:30:0e:97:a7:75:9d:
5d:e6:f5:6b:a4:57:f2:ee:b4:1c:d7:15:5b:35:9e:
f0:22:08:88:fd:9a:94:75:a8:33:22:65:57:ec:76:
f0:02:ee:59:b0:16:85:23:e6:b9:7a:a4:db:ca:5a:
c2:2f:30:c7:81:6f:6b:3d:5c:07:1e:85:a4:0e:a5:
8e:a3:68:f8:35:4f:2c:1e:81:b9:b9:ac:fa:3b:79:
08:89:32:27:30:03:d3:60:05:d8:a8:94:dd:a3:3a:
58:08:6d:5a:3e:80:f4:92:d2:5d:2d:c7:94:f4:00:
a2:1e:00:5c:af:17:10:a0:62:4a:71:08:18:61:89:
ce:42:24:94:e4:95:52:6f:9e:c0:c6:25:c3:a5:f6:
64:7e:19:a4:bf:b5:42:86:f0:d4:e7:2c:59:5f:8f:
21:f9:42:73:67:e4:2c:96:4f:33:6d:e0:7d:23:42:
4b:ef:2a:78:84:fa:ab:ca:dd:f1:8c:2d:dc:0b:03:
ba:36:6e:d1:7a:6e:6d:e7:22:2b:4f:de:6a:d9:13:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2D:AC:73:0F:77:C4:FC:A2:DF:2A:52:AB:73:CB:2B:3F:AA:3F:EE
X509v3 Authority Key Identifier:
keyid:E0:37:0A:B7:14:DB:08:F4:78:D3:93:D1:28:27:48:91:B7:93:29:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DcKtxTbCPR405PRKCdIkbeTKVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:11:e5:b7:bd:28:ae:88:bd:3a:4f:88:76:a9:af:81:18:38:
c7:b7:3d:b3:2a:0a:99:36:c0:24:aa:19:f1:ae:e1:2c:60:5b:
a6:10:17:a9:42:51:68:7a:af:fc:27:c9:72:dc:11:91:a9:e1:
ff:3d:ee:d3:90:81:07:cf:c3:1f:c4:3e:05:a4:be:7f:b3:e9:
9a:4e:78:54:29:18:72:68:a1:aa:22:21:8c:42:ea:b4:89:28:
f9:cb:95:74:78:17:1a:11:4e:19:3d:f0:bf:0f:d6:e1:4c:da:
03:fb:46:75:f9:0c:09:92:0a:20:4d:0f:6d:72:7d:49:f2:55:
af:03:01:5e:2b:5f:e8:52:b4:25:fc:d0:77:9d:41:03:51:1f:
46:80:4c:a6:d8:98:a5:24:5a:44:e2:90:ad:63:80:f7:00:01:
f5:3a:17:b4:ce:6d:65:18:13:33:d4:c7:4d:30:d8:21:d0:41:
72:4c:5f:7e:6b:61:b6:1c:01:23:68:fe:08:81:95:cf:db:47:
f5:72:2f:a8:57:ee:a8:8d:69:79:28:60:c0:db:85:d3:ce:64:
a5:de:3d:11:b4:09:22:04:67:09:6b:23:28:23:e0:5c:ac:43:
33:51:fa:5d:21:62:d7:cd:fd:0e:52:2b:f6:fb:8f:67:81:d9:
37:11:58:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HQnjVNlIAkPyx8a6Nw8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMzcwYWI3MTRkYjA4ZjQ3OGQzOTNkMTI4Mjc0ODkxYjc5
MzI5NTIwHhcNMjYwMzI5MTUwMTE0WhcNMjYwMzMwMTUwMTE0WjAzMTEwLwYDVQQD
Eyg0YTJkYWM3MzBmNzdjNGZjYTJkZjJhNTJhYjczY2IyYjNmYWEzZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzG3M+2yqGB7Y3Gh16xFHtGcFGu9
pRPNk04yOEjGm5DkDtDhRxXGbD0vohOUMxbT3WA1yDswDpendZ1d5vVrpFfy7rQc
1xVbNZ7wIgiI/ZqUdagzImVX7HbwAu5ZsBaFI+a5eqTbylrCLzDHgW9rPVwHHoWk
DqWOo2j4NU8sHoG5uaz6O3kIiTInMAPTYAXYqJTdozpYCG1aPoD0ktJdLceU9ACi
HgBcrxcQoGJKcQgYYYnOQiSU5JVSb57AxiXDpfZkfhmkv7VChvDU5yxZX48h+UJz
Z+Qslk8zbeB9I0JL7yp4hPqryt3xjC3cCwO6Nm7Rem5t5yIrT95q2RMuXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEotrHMPd8T8ot8qUqtzyys/qj/uMB8GA1UdIwQY
MBaAFOA3CrcU2wj0eNOT0SgnSJG3kylSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNERjS3R4VGJDUFI0MDVQUktDZElrYmVUS1ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80NDFlOWUtNWVmYi00M2Y4LTk5MWEt
ZWQ2ODg1Y2E1Njc5LzEvNERjS3R4VGJDUFI0MDVQUktDZElrYmVUS1ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi80NDFlOWUtNWVmYi00M2Y4LTk5MWEtZWQ2ODg1Y2E1Njc5
LzEvNERjS3R4VGJDUFI0MDVQUktDZElrYmVUS1ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxHlt70o
roi9Ok+IdqmvgRg4x7c9syoKmTbAJKoZ8a7hLGBbphAXqUJRaHqv/CfJctwRkanh
/z3u05CBB8/DH8Q+BaS+f7Ppmk54VCkYcmihqiIhjELqtIko+cuVdHgXGhFOGT3w
vw/W4UzaA/tGdfkMCZIKIE0PbXJ9SfJVrwMBXitf6FK0JfzQd51BA1EfRoBMptiY
pSRaROKQrWOA9wAB9ToXtM5tZRgTM9THTTDYIdBBckxffmththwBI2j+CIGVz9tH
9XIvqFfuqI1peShgwNuF085kpd49EbQJIgRnCWsjKCPgXKxDM1H6XSFi1839DlIr
9vuPZ4HZNxFYtA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:50 2026 by rpki-client