Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
File: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft (raw, json)
Hash identifier: wzQkc6iKd7MiF6y4nE5qs+hSP4nlAMCp+UjUkiSugB4=
Subject key identifier: 99:FE:8A:83:12:9E:13:4B:31:8F:31:79:3A:B2:BA:FF:04:3A:E8:26
Authority key identifier: E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
Certificate issuer: /CN=e2c756c691073752260eda0b29df3140cec48c18
Certificate serial: 019D389BD331E3060AEC855EE9840C8BEE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
Manifest number: 117B
Signing time: Sun 29 Mar 2026 08:00:29 +0000
Manifest this update: Sun 29 Mar 2026 08:00:29 +0000
Manifest next update: Mon 30 Mar 2026 08:00:29 +0000
Files and hashes: 1: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl (hash: sOtPxupJE7GfjD7qfwxJb5T+r99/bu9CSdD36vKzL+0=)
2: T3y-vjZIxVWN7JxZPOetrQJcWz0.roa (hash: XkyUMDJqJv6+3HQxI00RxtfuBMdhPrCaA/EHDWTyM5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d3:31:e3:06:0a:ec:85:5e:e9:84:0c:8b:ee:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c756c691073752260eda0b29df3140cec48c18
Validity
Not Before: Mar 29 08:00:29 2026 GMT
Not After : Mar 30 08:00:29 2026 GMT
Subject: CN=99fe8a83129e134b318f31793ab2baff043ae826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:c6:63:87:58:1c:a2:cf:8b:57:73:96:70:
87:58:36:78:33:d0:e5:47:12:ab:3f:b0:33:b3:f7:
e5:40:6d:59:04:44:fc:d4:1b:06:5b:26:c0:15:ba:
0d:1a:0c:a3:c0:93:15:d1:4b:e9:84:5b:50:03:6d:
1e:de:6e:7d:c5:e8:a9:9d:4b:47:44:0d:64:bb:9b:
d4:d7:f5:ce:e0:c9:25:5f:e4:e6:74:2d:5a:29:00:
b9:0d:df:a1:62:da:66:c5:68:f4:20:2b:80:fd:a1:
72:b0:9d:76:4a:a7:70:c8:59:f5:2d:6d:7e:62:87:
9b:93:a5:77:b9:78:0b:32:94:06:00:58:a6:49:4f:
ec:13:3f:95:8b:f2:8b:a2:c9:66:43:5c:28:30:5a:
2e:de:fa:46:4a:c2:a0:72:56:6d:11:52:f3:ce:d3:
d6:fe:a9:d8:1f:8d:21:ed:f5:29:6f:e7:24:94:ce:
90:47:2f:cd:3a:0f:22:ec:85:72:df:0d:a2:76:a3:
12:21:0f:c0:fe:0f:0f:a7:45:60:f4:a8:03:8a:26:
8d:48:70:ac:e7:05:a1:67:7e:40:8a:fa:ac:03:0f:
a2:4a:6c:ca:f2:48:f2:50:64:3c:88:75:b3:e6:ea:
c7:3e:38:63:42:9f:73:29:fb:29:e9:be:03:f5:65:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FE:8A:83:12:9E:13:4B:31:8F:31:79:3A:B2:BA:FF:04:3A:E8:26
X509v3 Authority Key Identifier:
keyid:E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8a:81:2d:0e:0e:80:f5:c7:12:e9:51:75:d0:83:04:68:1e:
59:63:04:a7:55:29:a7:1e:08:85:07:34:86:6a:57:72:92:75:
69:3d:a2:fc:c3:75:3b:20:8b:df:cf:c0:f6:7b:db:c2:9a:bc:
c2:08:2d:48:c7:17:d5:b3:36:e1:d2:56:f1:e6:c1:a5:52:5e:
04:24:1b:58:0b:43:c7:8a:71:55:c9:2d:fc:29:5a:8c:5c:c2:
c1:b6:2a:3b:3f:e9:08:53:7d:05:72:96:2e:2b:98:e7:8f:6f:
ce:17:c7:40:7a:de:fe:d0:41:45:8c:51:f4:40:ce:d9:7f:17:
85:3f:e7:0f:7c:86:eb:87:0c:aa:fe:d1:49:15:47:c5:45:f4:
55:45:60:6f:8a:32:55:ee:dd:98:2d:03:e5:38:b6:f5:d2:fe:
eb:6a:55:82:35:a4:91:6c:db:47:e6:3e:cd:a1:9b:58:b0:7e:
8b:96:f7:f6:83:a7:68:c1:0b:87:df:4e:82:2e:0f:b3:73:4a:
28:af:89:c5:08:e9:bc:cb:ed:28:c4:86:f6:4d:71:87:0f:cb:
37:5f:65:8a:c9:c0:b0:a4:f5:80:82:92:79:ab:e6:a6:3b:17:
b7:f1:74:b0:e1:71:cb:c3:7a:4e:99:7e:6a:00:91:1b:7f:14:
ca:f7:70:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m9Mx4wYK7IVe6YQMi+4YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzc1NmM2OTEwNzM3NTIyNjBlZGEwYjI5ZGYzMTQwY2Vj
NDhjMTgwHhcNMjYwMzI5MDgwMDI5WhcNMjYwMzMwMDgwMDI5WjAzMTEwLwYDVQQD
Eyg5OWZlOGE4MzEyOWUxMzRiMzE4ZjMxNzkzYWIyYmFmZjA0M2FlODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiPGY4dYHKLPi1dzlnCHWDZ4M9Dl
RxKrP7Azs/flQG1ZBET81BsGWybAFboNGgyjwJMV0UvphFtQA20e3m59xeipnUtH
RA1ku5vU1/XO4MklX+TmdC1aKQC5Dd+hYtpmxWj0ICuA/aFysJ12SqdwyFn1LW1+
Yoebk6V3uXgLMpQGAFimSU/sEz+Vi/KLoslmQ1woMFou3vpGSsKgclZtEVLzztPW
/qnYH40h7fUpb+cklM6QRy/NOg8i7IVy3w2idqMSIQ/A/g8Pp0Vg9KgDiiaNSHCs
5wWhZ35AivqsAw+iSmzK8kjyUGQ8iHWz5urHPjhjQp9zKfsp6b4D9WUhlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJn+ioMSnhNLMY8xeTqyuv8EOugmMB8GA1UdIwQY
MBaAFOLHVsaRBzdSJg7aCynfMUDOxIwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80NTRmMTEtZmMzNS00OThjLWE3YzAt
NWE0ZDhiNGUzZjBhLzEvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80NTRmMTEtZmMzNS00OThjLWE3YzAtNWE0ZDhiNGUzZjBh
LzEvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYqBLQ4O
gPXHEulRddCDBGgeWWMEp1Uppx4IhQc0hmpXcpJ1aT2i/MN1OyCL38/A9nvbwpq8
wggtSMcX1bM24dJW8ebBpVJeBCQbWAtDx4pxVckt/ClajFzCwbYqOz/pCFN9BXKW
LiuY549vzhfHQHre/tBBRYxR9EDO2X8XhT/nD3yG64cMqv7RSRVHxUX0VUVgb4oy
Ve7dmC0D5Ti29dL+62pVgjWkkWzbR+Y+zaGbWLB+i5b39oOnaMELh99Ogi4Ps3NK
KK+JxQjpvMvtKMSG9k1xhw/LN19lisnAsKT1gIKSeavmpjsXt/F0sOFxy8N6Tpl+
agCRG38UyvdwgA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:45 2026 by rpki-client