Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
File: 4MKGY5gUKldLpHsZfXF5G14jr3w.mft (raw, json)
Hash identifier: BSyd+Kezdp5FKf7/3AHNHFDIsSx/D2BhH41wZKcHUEM=
Subject key identifier: BE:50:78:1F:98:C0:AB:1A:C9:6A:24:FF:CD:D8:70:32:B4:A8:10:84
Authority key identifier: E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
Certificate issuer: /CN=e0c2866398142a574ba47b197d71791b5e23af7c
Certificate serial: 019D37F707FC5EC7CE988775B384F30C6111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 05:00:29 +0000
Manifest this update: Sun 29 Mar 2026 05:00:29 +0000
Manifest next update: Mon 30 Mar 2026 05:00:29 +0000
Files and hashes: 1: 4MKGY5gUKldLpHsZfXF5G14jr3w.crl (hash: jXe2ApQfJoKLnq4Dabg1cj5g/g1CY6aneZ/h4m2r0XU=)
2: QH02WxuzjvjRn51oLBiPvrujLa4.roa (hash: IQDzIfbbVCDUYyTY4gs2wjyKwyhZrH0/tzgcEn65G5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:07:fc:5e:c7:ce:98:87:75:b3:84:f3:0c:61:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c2866398142a574ba47b197d71791b5e23af7c
Validity
Not Before: Mar 29 05:00:29 2026 GMT
Not After : Mar 30 05:00:29 2026 GMT
Subject: CN=be50781f98c0ab1ac96a24ffcdd87032b4a81084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:cc:f3:38:d0:8c:5b:a3:3c:21:c4:ee:b8:
30:83:0b:cb:05:83:38:26:d1:18:dc:a2:64:fd:98:
bf:28:1f:7e:ff:bd:9a:2c:4d:67:54:72:64:30:23:
c0:97:4b:0f:08:9c:96:33:22:b2:f9:6f:9b:06:33:
27:93:42:cb:9f:90:6f:0c:20:f8:bc:cf:f1:88:b6:
c5:28:3b:41:e6:c0:86:60:b5:52:c6:ce:84:f2:98:
89:ac:23:b0:96:d5:ea:fb:7b:c6:a3:28:1c:30:84:
13:6e:9b:8b:00:97:da:07:0c:44:ba:7b:30:48:57:
b8:73:7e:90:7f:92:e9:2f:25:c7:68:fa:f4:c2:24:
d5:4d:c1:75:7e:6c:d3:5a:50:f8:5a:d6:7b:ac:98:
16:63:d6:c8:b8:aa:00:7a:89:ef:65:d3:2e:d6:43:
cc:5e:1c:bc:ad:83:aa:b5:3d:28:7e:ef:80:58:98:
7c:6a:b2:b3:78:29:0b:59:36:53:6f:f4:19:2d:81:
82:be:6d:ea:5f:eb:18:67:de:0a:9c:fc:2e:e9:64:
c6:98:05:99:55:04:52:4d:17:4a:26:bc:08:79:2c:
89:b7:dc:b5:03:60:d6:1a:5e:ae:2d:3d:9b:ec:b0:
43:bd:9a:16:1b:98:8e:71:4b:64:08:20:a7:d5:57:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:50:78:1F:98:C0:AB:1A:C9:6A:24:FF:CD:D8:70:32:B4:A8:10:84
X509v3 Authority Key Identifier:
keyid:E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a4:5e:e7:58:c4:a8:35:61:0a:62:02:7d:fd:85:28:4a:27:
d3:69:02:3f:97:2d:ad:ee:5e:28:e7:a8:71:5a:54:52:c9:e1:
b7:ce:45:e1:ab:a3:eb:07:65:5f:4a:67:91:e3:33:48:ec:6d:
c8:9f:e7:d0:89:b6:36:d9:c1:d1:e7:56:70:9b:f7:6f:5a:88:
ee:ef:f1:7f:0a:70:92:8e:4a:7e:c6:1a:3b:e6:80:ac:a0:54:
fd:d9:7a:eb:88:9c:e6:20:44:d6:d6:94:8f:c2:ca:cc:62:1d:
da:81:29:05:33:bd:9b:a1:f7:6c:ce:c4:74:d0:9d:b9:3e:b4:
e3:a9:64:92:c3:1f:e8:cb:87:50:4c:ce:97:0b:4e:b6:55:1e:
dd:f5:5d:a2:6c:c9:5a:cf:7c:31:46:dc:f4:06:2f:f9:26:6b:
e1:23:ff:e4:20:34:d0:e4:d6:6c:2a:88:6d:35:44:ea:09:b5:
f9:6c:6a:27:a4:b7:45:8a:f9:d6:6b:b8:92:19:0f:7a:7a:79:
ce:b6:60:f8:9e:85:4d:5a:5e:46:63:b8:66:fe:4d:12:30:43:
bc:d6:9c:cd:46:da:fb:83:21:b7:f6:33:31:c1:32:b9:b6:0e:
ca:9c:e8:35:4f:38:28:c7:55:d7:13:94:58:d5:44:a0:87:23:
c4:d8:4f:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039wf8XsfOmId1s4TzDGERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYzI4NjYzOTgxNDJhNTc0YmE0N2IxOTdkNzE3OTFiNWUy
M2FmN2MwHhcNMjYwMzI5MDUwMDI5WhcNMjYwMzMwMDUwMDI5WjAzMTEwLwYDVQQD
EyhiZTUwNzgxZjk4YzBhYjFhYzk2YTI0ZmZjZGQ4NzAzMmI0YTgxMDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvALM8zjQjFujPCHE7rgwgwvLBYM4
JtEY3KJk/Zi/KB9+/72aLE1nVHJkMCPAl0sPCJyWMyKy+W+bBjMnk0LLn5BvDCD4
vM/xiLbFKDtB5sCGYLVSxs6E8piJrCOwltXq+3vGoygcMIQTbpuLAJfaBwxEunsw
SFe4c36Qf5LpLyXHaPr0wiTVTcF1fmzTWlD4WtZ7rJgWY9bIuKoAeonvZdMu1kPM
Xhy8rYOqtT0ofu+AWJh8arKzeCkLWTZTb/QZLYGCvm3qX+sYZ94KnPwu6WTGmAWZ
VQRSTRdKJrwIeSyJt9y1A2DWGl6uLT2b7LBDvZoWG5iOcUtkCCCn1Vft9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5QeB+YwKsayWok/83YcDK0qBCEMB8GA1UdIwQY
MBaAFODChmOYFCpXS6R7GX1xeRteI698MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE1LR1k1Z1VLbGRMcEhzWmZYRjVHMTRqcjN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zY2Q5NjEtMmRjZC00NTE4LWJmYjgt
YTE2Y2Y3YWM3ZGQ4LzEvNE1LR1k1Z1VLbGRMcEhzWmZYRjVHMTRqcjN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zY2Q5NjEtMmRjZC00NTE4LWJmYjgtYTE2Y2Y3YWM3ZGQ4
LzEvNE1LR1k1Z1VLbGRMcEhzWmZYRjVHMTRqcjN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6Re51jE
qDVhCmICff2FKEon02kCP5ctre5eKOeocVpUUsnht85F4auj6wdlX0pnkeMzSOxt
yJ/n0Im2NtnB0edWcJv3b1qI7u/xfwpwko5KfsYaO+aArKBU/dl664ic5iBE1taU
j8LKzGId2oEpBTO9m6H3bM7EdNCduT6046lkksMf6MuHUEzOlwtOtlUe3fVdomzJ
Ws98MUbc9AYv+SZr4SP/5CA00OTWbCqIbTVE6gm1+WxqJ6S3RYr51mu4khkPenp5
zrZg+J6FTVpeRmO4Zv5NEjBDvNaczUba+4Mht/YzMcEyubYOypzoNU84KMdV1xOU
WNVEoIcjxNhPGw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:43 2026 by rpki-client