Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: EIKQkDBz7eqjN2N+OgEK5OwDZleuhLjpGilKvpObf4o=
Subject key identifier: 40:38:C2:DB:08:98:45:D5:64:86:64:52:C4:11:6E:9A:50:80:53:BF
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 019CE71216E98B65FFCBC4BE5EA37741886D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 11CC
Signing time: Fri 13 Mar 2026 12:00:48 +0000
Manifest this update: Fri 13 Mar 2026 12:00:48 +0000
Manifest next update: Sat 14 Mar 2026 12:00:48 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: H1XIfQ2h5AZHH6MDp38bTtPNoW+d7Wb05XiwsuOAbtI=)
2: bOTyO1jGNXvTUzXi3EztaGmz3K4.roa (hash: 5vKYEUvZMHjV6NuMxD9j9IkwxVI/1099N+1KTRpjjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:16:e9:8b:65:ff:cb:c4:be:5e:a3:77:41:88:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Mar 13 12:00:48 2026 GMT
Not After : Mar 14 12:00:48 2026 GMT
Subject: CN=4038c2db089845d564866452c4116e9a508053bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f3:94:9a:ae:ba:9f:7f:08:d0:9b:51:2b:5a:
3e:07:bf:c6:17:ad:0f:d7:64:82:cf:20:bb:ae:90:
53:db:42:62:6d:0d:fa:a0:8d:0e:4b:72:64:ac:91:
86:48:cf:c9:c4:94:a6:0c:6b:47:7f:bd:4d:a3:d0:
4d:3f:c2:68:40:55:af:1b:d7:d6:67:5d:71:ab:4c:
d6:3b:e5:17:40:59:31:6f:c6:b0:2c:11:b2:35:f4:
eb:30:79:32:5d:02:87:68:7c:6d:5f:98:7e:56:69:
2a:25:99:b8:c8:b9:56:ab:1b:b8:c6:50:f7:93:55:
1a:c0:96:f6:ac:15:b7:ba:9b:eb:1a:43:53:da:65:
e2:91:56:9c:24:50:2e:27:88:3a:ec:43:1d:8f:8b:
bc:83:8c:ec:e6:07:49:de:52:6c:af:65:73:8a:c0:
80:9f:15:d2:0e:83:01:72:18:85:64:60:d5:06:c9:
49:37:49:bf:6f:e0:1d:d0:51:c1:5f:28:c8:90:b4:
5f:36:9b:2c:78:de:54:84:ce:6e:1f:f3:d4:22:a3:
5e:a2:60:6c:23:f3:1f:68:d3:1b:51:3c:e1:0a:17:
ee:cc:17:6c:f9:2f:74:69:7e:bd:52:39:a2:44:af:
55:69:52:59:5a:2b:b3:83:88:02:28:a1:8e:32:20:
31:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:38:C2:DB:08:98:45:D5:64:86:64:52:C4:11:6E:9A:50:80:53:BF
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7d:5e:6a:ff:fb:86:01:d3:5d:50:e6:36:05:1e:d3:9e:0b:
6a:23:0b:e6:e0:e0:a2:54:0d:d8:ca:86:ec:24:6c:cc:00:3c:
f1:21:72:ad:56:0f:b7:e5:03:92:4e:2d:95:83:19:30:1a:47:
50:d7:bd:2b:5b:06:ba:1a:e8:59:16:b0:70:58:b6:9e:82:d7:
7b:da:b3:e0:5b:e1:a9:f8:0a:f5:b3:21:73:98:91:29:12:22:
91:f2:48:9c:62:da:03:12:5f:e1:e6:0a:25:9c:a7:2e:d2:58:
a0:ea:c1:ff:a7:eb:6d:a0:92:27:a9:48:85:1a:ee:3a:ec:20:
83:43:b6:93:f8:82:89:fd:96:67:94:70:85:92:c5:51:ab:6f:
5e:90:11:de:f7:41:b7:12:17:88:5a:fd:b1:36:94:0a:7b:8e:
a3:29:eb:21:e4:ae:d6:f7:4a:90:d1:64:ec:ea:d0:92:ed:b4:
25:16:b4:35:2f:c2:ad:8d:9b:56:43:83:77:79:48:c8:28:35:
67:67:8e:e3:6a:64:ee:a8:41:99:04:46:0b:34:af:0a:9d:82:
2d:4b:74:11:8b:3d:9e:05:34:d2:85:db:ab:df:11:a5:2e:8a:
5e:f3:c9:ed:14:1b:23:a5:0d:d3:f7:c7:0e:7e:6c:e8:f8:2b:
e4:27:06:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZznEhbpi2X/y8S+XqN3QYhtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZmUwMDExZWJlNGYyMTZjNThkM2FiNDI4MTJiOTg0MDJi
ZTBiMmMwHhcNMjYwMzEzMTIwMDQ4WhcNMjYwMzE0MTIwMDQ4WjAzMTEwLwYDVQQD
Eyg0MDM4YzJkYjA4OTg0NWQ1NjQ4NjY0NTJjNDExNmU5YTUwODA1M2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vOUmq66n38I0JtRK1o+B7/GF60P
12SCzyC7rpBT20JibQ36oI0OS3JkrJGGSM/JxJSmDGtHf71No9BNP8JoQFWvG9fW
Z11xq0zWO+UXQFkxb8awLBGyNfTrMHkyXQKHaHxtX5h+VmkqJZm4yLlWqxu4xlD3
k1UawJb2rBW3upvrGkNT2mXikVacJFAuJ4g67EMdj4u8g4zs5gdJ3lJsr2VzisCA
nxXSDoMBchiFZGDVBslJN0m/b+Ad0FHBXyjIkLRfNpsseN5UhM5uH/PUIqNeomBs
I/MfaNMbUTzhChfuzBds+S90aX69UjmiRK9VaVJZWiuzg4gCKKGOMiAxfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEA4wtsImEXVZIZkUsQRbppQgFO/MB8GA1UdIwQY
MBaAFA/+ABHr5PIWxY06tCgSuYQCvgssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF80QUVldms4aGJGalRxMEtCSzVoQUstQ3l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85NjE4NGQtNTk4MS00NzAyLTlkMzIt
NmNjMGRhZjM0MWM0LzEvRF80QUVldms4aGJGalRxMEtCSzVoQUstQ3l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS85NjE4NGQtNTk4MS00NzAyLTlkMzItNmNjMGRhZjM0MWM0
LzEvRF80QUVldms4aGJGalRxMEtCSzVoQUstQ3l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArX1eav/7
hgHTXVDmNgUe054LaiML5uDgolQN2MqG7CRszAA88SFyrVYPt+UDkk4tlYMZMBpH
UNe9K1sGuhroWRawcFi2noLXe9qz4FvhqfgK9bMhc5iRKRIikfJInGLaAxJf4eYK
JZynLtJYoOrB/6frbaCSJ6lIhRruOuwgg0O2k/iCif2WZ5RwhZLFUatvXpAR3vdB
txIXiFr9sTaUCnuOoynrIeSu1vdKkNFk7OrQku20JRa0NS/CrY2bVkODd3lIyCg1
Z2eO42pk7qhBmQRGCzSvCp2CLUt0EYs9ngU00oXbq98RpS6KXvPJ7RQbI6UN0/fH
Dn5s6Pgr5CcGzA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 18:15:36 2026 by rpki-client