Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
File: 4tY8oFQoMuZCZPOssVYZki_s-Ds.mft (raw, json)
Hash identifier: EQ6OTHEgjio9N7+YL9a8077IoX1/EziNRAVmh5pbuEQ=
Subject key identifier: A4:2D:ED:FB:76:A7:46:D9:C7:3C:99:96:B2:41:ED:3D:FE:5B:78:C0
Authority key identifier: E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
Certificate issuer: /CN=e2d63ca0542832e64264f3acb15619922fecf83b
Certificate serial: 019D3940B9F3AA4CDBF73D51AD72DA5EC493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
Manifest number: 1168
Signing time: Sun 29 Mar 2026 11:00:36 +0000
Manifest this update: Sun 29 Mar 2026 11:00:36 +0000
Manifest next update: Mon 30 Mar 2026 11:00:36 +0000
Files and hashes: 1: 4tY8oFQoMuZCZPOssVYZki_s-Ds.crl (hash: 3dVQyphNu7ozAZWRlU/dtOhoYs1J2obtOO9LJNuTrcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b9:f3:aa:4c:db:f7:3d:51:ad:72:da:5e:c4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d63ca0542832e64264f3acb15619922fecf83b
Validity
Not Before: Mar 29 11:00:36 2026 GMT
Not After : Mar 30 11:00:36 2026 GMT
Subject: CN=a42dedfb76a746d9c73c9996b241ed3dfe5b78c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:04:31:11:5e:a1:ec:84:ee:b2:56:3a:ed:
d2:f6:a6:4f:30:93:d9:ce:8a:5b:c8:28:2b:a9:c6:
40:12:0f:35:df:18:6d:b4:b1:c6:5a:d7:02:61:c7:
f9:57:44:e1:af:37:c5:21:1a:26:d2:8f:5d:31:ad:
9a:b6:a0:8f:0b:52:63:02:30:78:a4:e6:6e:aa:d6:
d1:ed:2f:20:74:02:5c:22:45:8d:84:9a:07:94:02:
03:4a:78:9d:55:b8:0e:d9:66:31:f5:72:ee:40:87:
a6:02:22:09:18:21:c6:d0:83:9b:6b:97:95:aa:92:
54:39:ad:c8:0d:bf:52:d4:42:b2:b1:65:47:c3:bf:
65:76:30:b1:0f:2a:b4:81:35:3d:34:f7:00:3b:97:
59:f2:8f:04:df:cf:98:66:db:03:b8:48:7b:36:b8:
91:88:33:14:2e:44:e3:0e:eb:36:55:bc:ee:67:26:
1f:ac:14:42:e4:48:6e:61:01:ed:93:5e:02:95:4d:
97:e2:e2:00:c7:2b:47:9e:1c:e1:d1:6e:9c:bc:42:
81:92:a7:7b:f6:79:fc:1e:10:36:75:ec:1d:88:ab:
67:1e:c6:a0:9d:83:8a:0f:5d:e4:4f:37:4c:b7:34:
d0:1c:eb:87:db:17:8a:45:f5:51:c1:f5:22:a9:3b:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2D:ED:FB:76:A7:46:D9:C7:3C:99:96:B2:41:ED:3D:FE:5B:78:C0
X509v3 Authority Key Identifier:
keyid:E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:52:8c:7e:32:16:b1:36:f7:75:9e:1e:3c:be:8f:a8:67:7b:
8a:64:61:13:04:30:08:cb:a4:10:a4:70:26:1c:e0:9c:ba:c2:
c7:83:9b:07:a9:27:9a:d9:80:0f:ec:41:3b:c8:bd:90:9d:e6:
01:c5:63:7e:40:63:9c:5c:2d:d5:9d:35:b7:40:4e:ba:1f:9a:
c5:c8:ee:4e:74:dc:c7:ce:9b:0e:2f:aa:9d:02:31:2a:87:9b:
5e:2a:98:19:8d:b2:e7:d8:04:3d:0b:77:0f:43:c8:83:6d:52:
dc:01:78:8c:7f:c2:e0:8e:a2:3e:2c:28:9c:d0:0b:ea:6d:e0:
3b:6e:00:e1:fe:40:0e:ba:37:69:64:68:a2:3a:63:b8:06:89:
2f:4f:b0:9c:12:e7:ea:1c:c6:6a:bc:f2:40:1b:e7:34:62:94:
45:f6:4f:c4:72:b0:3c:38:c8:16:f3:c0:93:2b:54:3b:75:25:
50:60:a5:14:a0:91:73:2d:38:77:14:0a:5e:38:e2:e9:b0:2c:
56:e9:c5:5b:f0:bc:45:20:47:e8:e0:91:7a:f8:75:ae:ed:b1:
8c:00:84:55:04:8e:0f:3d:0a:a6:f7:21:ac:cd:0b:56:09:f8:
85:d7:2b:fd:44:76:77:57:88:2b:61:3b:96:ff:26:97:11:14:
3b:69:0e:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QLnzqkzb9z1RrXLaXsSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDYzY2EwNTQyODMyZTY0MjY0ZjNhY2IxNTYxOTkyMmZl
Y2Y4M2IwHhcNMjYwMzI5MTEwMDM2WhcNMjYwMzMwMTEwMDM2WjAzMTEwLwYDVQQD
EyhhNDJkZWRmYjc2YTc0NmQ5YzczYzk5OTZiMjQxZWQzZGZlNWI3OGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2QEMRFeoeyE7rJWOu3S9qZPMJPZ
zopbyCgrqcZAEg813xhttLHGWtcCYcf5V0ThrzfFIRom0o9dMa2atqCPC1JjAjB4
pOZuqtbR7S8gdAJcIkWNhJoHlAIDSnidVbgO2WYx9XLuQIemAiIJGCHG0IOba5eV
qpJUOa3IDb9S1EKysWVHw79ldjCxDyq0gTU9NPcAO5dZ8o8E38+YZtsDuEh7NriR
iDMULkTjDus2VbzuZyYfrBRC5EhuYQHtk14ClU2X4uIAxytHnhzh0W6cvEKBkqd7
9nn8HhA2dewdiKtnHsagnYOKD13kTzdMtzTQHOuH2xeKRfVRwfUiqTvsIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQt7ft2p0bZxzyZlrJB7T3+W3jAMB8GA1UdIwQY
MBaAFOLWPKBUKDLmQmTzrLFWGZIv7Pg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRZOG9GUW9NdVpDWlBPc3NWWVpraV9zLURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hYmE5ZDMtOTkxMi00ZjVlLTk4ZGEt
YzViMDBjYjhkOTE0LzEvNHRZOG9GUW9NdVpDWlBPc3NWWVpraV9zLURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9hYmE5ZDMtOTkxMi00ZjVlLTk4ZGEtYzViMDBjYjhkOTE0
LzEvNHRZOG9GUW9NdVpDWlBPc3NWWVpraV9zLURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFKMfjIW
sTb3dZ4ePL6PqGd7imRhEwQwCMukEKRwJhzgnLrCx4ObB6knmtmAD+xBO8i9kJ3m
AcVjfkBjnFwt1Z01t0BOuh+axcjuTnTcx86bDi+qnQIxKoebXiqYGY2y59gEPQt3
D0PIg21S3AF4jH/C4I6iPiwonNAL6m3gO24A4f5ADro3aWRoojpjuAaJL0+wnBLn
6hzGarzyQBvnNGKURfZPxHKwPDjIFvPAkytUO3UlUGClFKCRcy04dxQKXjji6bAs
VunFW/C8RSBH6OCRevh1ru2xjACEVQSODz0KpvchrM0LVgn4hdcr/UR2d1eIK2E7
lv8mlxEUO2kOrA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:57:44 2026 by rpki-client