Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: hxq5mOLh6VkQUfObOhVuNsCCr7CRAS2vMwBqohRPxBQ=
Subject key identifier: 83:56:1C:F0:51:A2:87:95:EB:90:A3:B3:6C:4B:54:81:5B:50:A7:8A
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 019D39AE756E5340A884C5B8559761DB60B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 0846
Signing time: Sun 29 Mar 2026 13:00:27 +0000
Manifest this update: Sun 29 Mar 2026 13:00:27 +0000
Manifest next update: Mon 30 Mar 2026 13:00:27 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: HWFrW+ISQeBCrHTi9p/7X2S3q2BHVNCgDLj2krWwMco=)
2: G2elpiRe3mLE21vYizlf0cxzEYA.roa (hash: Eg0ncyWZplHxiExP5Yc2JBQmHWqje615/1fpu2tFHEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:75:6e:53:40:a8:84:c5:b8:55:97:61:db:60:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Mar 29 13:00:27 2026 GMT
Not After : Mar 30 13:00:27 2026 GMT
Subject: CN=83561cf051a28795eb90a3b36c4b54815b50a78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:c7:08:8b:61:b1:a7:41:34:bb:2c:64:c9:
f9:df:4b:57:9f:2e:7b:42:4b:37:9c:f9:ac:26:4a:
54:d4:15:ee:39:cc:66:09:bf:86:50:7c:45:c7:f4:
d3:11:d3:31:60:97:1c:53:d1:2d:5a:4e:14:22:09:
36:f5:eb:1a:08:6f:e5:9e:f0:a6:6f:ef:f6:b2:e5:
a2:61:25:72:9a:ae:1c:aa:dc:fd:f2:96:31:89:61:
15:b6:42:57:77:7a:04:3d:51:e7:07:1e:cd:66:9b:
80:7d:67:47:cb:27:8a:45:82:5f:f6:11:7c:65:75:
7f:58:62:e4:06:c2:79:c8:46:6a:a1:f5:e5:0e:f4:
1b:b4:f0:cb:24:02:45:94:80:47:62:08:66:b9:41:
3b:15:4e:06:ec:48:43:9e:5c:d1:88:e1:e5:fe:9d:
f9:91:1a:ee:d3:86:87:1e:78:ea:4a:81:fe:ed:7e:
1d:8e:81:a4:f3:15:54:d2:3d:00:4f:b0:e9:6f:3b:
aa:3d:a5:68:31:f3:d7:1d:12:5f:d4:2f:1e:36:78:
c6:44:bd:40:9c:78:f7:16:67:f6:22:80:02:63:9d:
c2:53:a3:05:f6:20:0d:ba:4a:c3:12:c4:75:9a:83:
76:af:24:da:78:0f:e6:ee:fb:c6:c1:c5:5d:30:7d:
20:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:56:1C:F0:51:A2:87:95:EB:90:A3:B3:6C:4B:54:81:5B:50:A7:8A
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:43:27:73:82:54:b2:33:92:ed:5d:33:09:96:01:68:22:11:
c8:d1:ef:da:ca:0a:e6:5b:c4:21:d4:4e:3a:72:1f:61:04:f5:
74:37:f2:b8:9d:f3:d3:51:33:a9:52:27:64:6f:e8:54:91:65:
36:e3:53:ec:5d:45:92:18:46:f4:3a:25:f6:54:38:5f:7c:ad:
9b:1e:9e:da:a4:da:f9:ad:bb:07:96:10:f2:02:52:ec:d0:dc:
69:bc:b4:a5:88:21:e6:d4:2f:f9:4f:ee:39:2b:1c:a4:31:f3:
43:07:ca:bb:d3:4d:3f:dc:b8:69:2e:45:92:0b:67:ec:3f:af:
2a:2d:d4:51:96:45:c4:fd:8d:48:f9:f6:c5:7c:51:19:17:af:
4c:89:13:e8:05:1d:e9:23:a4:d8:61:a6:e2:1d:ff:a1:ad:e8:
94:0c:63:3c:76:a1:83:55:6a:44:18:b2:d3:86:52:c8:2f:94:
97:54:c6:03:e5:40:d4:46:f5:f9:1f:84:4d:ea:64:f5:a4:3a:
1f:7d:59:a5:39:34:da:10:59:6d:e6:af:1b:c5:04:d6:20:70:
14:29:f3:f0:d1:e2:cb:c5:ab:47:bf:5c:7f:44:4f:16:cf:84:
39:12:bf:c5:81:5e:e3:ee:3f:8e:d3:a7:b4:f6:c2:eb:81:89:
52:75:e1:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rnVuU0CohMW4VZdh22C1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOGE4NmNjYmY1NjdiZDlhMjgyZmRkZjc1ZjBiN2Y1NTQy
MjIyZDIwHhcNMjYwMzI5MTMwMDI3WhcNMjYwMzMwMTMwMDI3WjAzMTEwLwYDVQQD
Eyg4MzU2MWNmMDUxYTI4Nzk1ZWI5MGEzYjM2YzRiNTQ4MTViNTBhNzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxHHCIthsadBNLssZMn530tXny57
Qks3nPmsJkpU1BXuOcxmCb+GUHxFx/TTEdMxYJccU9EtWk4UIgk29esaCG/lnvCm
b+/2suWiYSVymq4cqtz98pYxiWEVtkJXd3oEPVHnBx7NZpuAfWdHyyeKRYJf9hF8
ZXV/WGLkBsJ5yEZqofXlDvQbtPDLJAJFlIBHYghmuUE7FU4G7EhDnlzRiOHl/p35
kRru04aHHnjqSoH+7X4djoGk8xVU0j0AT7DpbzuqPaVoMfPXHRJf1C8eNnjGRL1A
nHj3Fmf2IoACY53CU6MF9iANukrDEsR1moN2ryTaeA/m7vvGwcVdMH0ghQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINWHPBRooeV65Cjs2xLVIFbUKeKMB8GA1UdIwQY
MBaAFOKKhsy/VnvZooL933Xwt/VUIiLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jODkwMGMtZjNkMi00NTdjLWIzOGIt
NmQ3NjUwY2EzZDA0LzEvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9jODkwMGMtZjNkMi00NTdjLWIzOGItNmQ3NjUwY2EzZDA0
LzEvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEMnc4JU
sjOS7V0zCZYBaCIRyNHv2soK5lvEIdROOnIfYQT1dDfyuJ3z01EzqVInZG/oVJFl
NuNT7F1FkhhG9Dol9lQ4X3ytmx6e2qTa+a27B5YQ8gJS7NDcaby0pYgh5tQv+U/u
OSscpDHzQwfKu9NNP9y4aS5Fkgtn7D+vKi3UUZZFxP2NSPn2xXxRGRevTIkT6AUd
6SOk2GGm4h3/oa3olAxjPHahg1VqRBiy04ZSyC+Ul1TGA+VA1Eb1+R+ETepk9aQ6
H31ZpTk02hBZbeavG8UE1iBwFCnz8NHiy8WrR79cf0RPFs+EORK/xYFe4+4/jtOn
tPbC64GJUnXhTQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:47 2026 by rpki-client