Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
File: 4npTBThB5i83hzAr07PcF66DR6M.mft (raw, json)
Hash identifier: Drc5y1fUVfjRRhjPu5qpomreSxPmrGPxz7nOcSBs2js=
Subject key identifier: 18:AF:75:CC:72:0F:5C:ED:6B:52:B0:E5:57:A6:38:61:F7:DA:0F:F0
Authority key identifier: E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3
Certificate issuer: /CN=e27a53053841e62f3787302bd3b3dc17ae8347a3
Certificate serial: 019D3865B3AF39767A0960D25D3100B99DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
Manifest number: 0BEF
Signing time: Sun 29 Mar 2026 07:01:22 +0000
Manifest this update: Sun 29 Mar 2026 07:01:22 +0000
Manifest next update: Mon 30 Mar 2026 07:01:22 +0000
Files and hashes: 1: 4npTBThB5i83hzAr07PcF66DR6M.crl (hash: IK5X7AipdSr1fWLN0P9zfLoTxSEMlEsfVVH7hPFxam4=)
2: cSt6K46EMy2J87fQrUxV7kuln7s.roa (hash: bwoUNClS8M/uJi71mCDhu+Re3L2VQt/bSmzn5caPq7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b3:af:39:76:7a:09:60:d2:5d:31:00:b9:9d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27a53053841e62f3787302bd3b3dc17ae8347a3
Validity
Not Before: Mar 29 07:01:22 2026 GMT
Not After : Mar 30 07:01:22 2026 GMT
Subject: CN=18af75cc720f5ced6b52b0e557a63861f7da0ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d9:e6:95:8f:0f:46:67:c8:70:9c:4f:67:92:
d5:37:e3:6c:b8:83:78:98:b8:1b:0a:95:2f:59:b0:
4b:b8:a8:77:61:be:3b:02:3e:6e:3b:06:5e:34:d3:
70:c4:ce:23:4b:79:a0:cd:63:3f:c1:98:a4:45:c1:
4a:26:ab:6c:66:fc:b4:88:4f:00:63:21:00:8a:cd:
d9:89:63:2c:af:6c:85:ca:74:29:8b:c0:98:2e:b1:
95:b9:cb:19:59:c5:40:0e:a1:64:28:0c:10:95:b6:
96:b4:18:c9:95:c3:b8:5c:ee:12:69:b5:d5:5c:fa:
3c:ea:69:da:71:70:fc:cb:c3:df:8c:7b:90:4e:5e:
d0:0c:02:b3:68:24:b7:11:c9:d7:ea:cb:1f:33:27:
ca:13:6b:48:a6:96:83:bd:47:3b:df:9d:20:b9:21:
14:b0:c0:93:dd:9b:d5:82:b7:a1:d5:a8:8c:3a:d5:
2f:31:1f:6f:64:50:c1:83:b2:01:80:03:91:83:c5:
6e:48:72:6e:ab:de:7b:83:43:af:82:69:67:9e:65:
9c:37:d7:96:d1:f4:fe:5d:f7:8d:86:87:1a:f9:05:
d8:d5:1f:ed:7f:99:d7:64:48:29:c1:e0:df:f4:95:
73:67:c2:ca:88:f1:a6:5e:79:3a:67:3f:6d:c0:98:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AF:75:CC:72:0F:5C:ED:6B:52:B0:E5:57:A6:38:61:F7:DA:0F:F0
X509v3 Authority Key Identifier:
keyid:E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ce:86:91:eb:22:96:13:ca:3e:a6:7d:29:8d:ee:55:93:4d:
c8:47:5a:7b:13:c0:26:19:b2:0a:5f:2b:de:de:b3:9a:cd:ca:
cc:4a:13:cc:c6:6f:bc:37:55:46:5c:ca:4d:3a:d6:99:d7:f8:
be:39:88:24:aa:2f:f9:98:54:a2:2a:00:bc:6a:3b:e0:c3:a2:
35:ca:21:da:c0:8a:61:96:51:60:71:5a:71:50:5e:8d:96:73:
99:97:bc:63:65:be:f2:2e:10:dc:87:c3:ae:2e:22:af:6b:d5:
51:09:1d:80:4c:2b:a1:74:5c:9e:30:2a:f8:5e:a4:c9:c1:65:
c7:cb:a2:18:2d:9e:2d:0e:b4:00:c3:a8:98:72:49:17:e8:4e:
96:d7:da:0b:f4:54:63:d8:4e:9e:76:0d:86:b6:62:6d:47:e6:
ab:df:4e:45:d5:c5:bb:a2:06:07:ab:fc:70:c0:ff:57:88:4c:
ff:1e:e8:40:65:7f:88:b4:ae:9f:6a:51:76:02:99:9d:98:8f:
d5:d2:83:14:12:cc:53:37:18:b1:c4:fe:78:d0:6d:3a:fb:6f:
da:04:c9:1d:75:31:b6:e4:9d:03:59:f5:ac:1f:f6:91:ec:17:
90:33:3b:1e:f9:63:9e:91:3d:88:2c:c0:0e:cd:d7:50:2f:44:
3a:5e:c5:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZbOvOXZ6CWDSXTEAuZ2mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyN2E1MzA1Mzg0MWU2MmYzNzg3MzAyYmQzYjNkYzE3YWU4
MzQ3YTMwHhcNMjYwMzI5MDcwMTIyWhcNMjYwMzMwMDcwMTIyWjAzMTEwLwYDVQQD
EygxOGFmNzVjYzcyMGY1Y2VkNmI1MmIwZTU1N2E2Mzg2MWY3ZGEwZmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNnmlY8PRmfIcJxPZ5LVN+NsuIN4
mLgbCpUvWbBLuKh3Yb47Aj5uOwZeNNNwxM4jS3mgzWM/wZikRcFKJqtsZvy0iE8A
YyEAis3ZiWMsr2yFynQpi8CYLrGVucsZWcVADqFkKAwQlbaWtBjJlcO4XO4SabXV
XPo86mnacXD8y8PfjHuQTl7QDAKzaCS3EcnX6ssfMyfKE2tIppaDvUc7350guSEU
sMCT3ZvVgreh1aiMOtUvMR9vZFDBg7IBgAORg8VuSHJuq957g0OvgmlnnmWcN9eW
0fT+XfeNhoca+QXY1R/tf5nXZEgpweDf9JVzZ8LKiPGmXnk6Zz9twJhN2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBivdcxyD1zta1Kw5VemOGH32g/wMB8GA1UdIwQY
MBaAFOJ6UwU4QeYvN4cwK9Oz3Beug0ejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84NzYyZjUtZmFlMy00NWY2LWE3OWIt
Y2FlZGJkNzE0MGU5LzEvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84NzYyZjUtZmFlMy00NWY2LWE3OWItY2FlZGJkNzE0MGU5
LzEvNG5wVEJUaEI1aTgzaHpBcjA3UGNGNjZEUjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAss6Gkesi
lhPKPqZ9KY3uVZNNyEdaexPAJhmyCl8r3t6zms3KzEoTzMZvvDdVRlzKTTrWmdf4
vjmIJKov+ZhUoioAvGo74MOiNcoh2sCKYZZRYHFacVBejZZzmZe8Y2W+8i4Q3IfD
ri4ir2vVUQkdgEwroXRcnjAq+F6kycFlx8uiGC2eLQ60AMOomHJJF+hOltfaC/RU
Y9hOnnYNhrZibUfmq99ORdXFu6IGB6v8cMD/V4hM/x7oQGV/iLSun2pRdgKZnZiP
1dKDFBLMUzcYscT+eNBtOvtv2gTJHXUxtuSdA1n1rB/2kewXkDM7HvljnpE9iCzA
Ds3XUC9EOl7FtA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:22 2026 by rpki-client