Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
File: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft (raw, json)
Hash identifier: HjXHEcxWtCXw2HgX7T6pxbShwfiaN8czzhv6RBXV65c=
Subject key identifier: F5:42:4A:D5:C1:36:68:25:5B:1F:94:A9:26:04:BF:09:E0:3F:D1:7F
Authority key identifier: E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
Certificate issuer: /CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Certificate serial: 019CF384416D4B9CB721F83F5203D6C7EBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
Manifest number: 3C
Signing time: Sun 15 Mar 2026 22:00:56 +0000
Manifest this update: Sun 15 Mar 2026 22:00:56 +0000
Manifest next update: Mon 16 Mar 2026 22:00:56 +0000
Files and hashes: 1: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl (hash: DVSM2moL+X9blUyzRBAoYQEausEN4/jGtkhTuHu4NOI=)
2: AFLK_8dbQHSlYChoAA91MADo2dU.asa (hash: 7cAv3e9gnI3dZUR9MQwkNpXKUI1PglLX9wimy3aeHe8=)
3: Piv3x5GjdFWYogfJry-sQL2JX-U.roa (hash: 2ZYAqvuqxNoPqFzul2MyF+P3n7KAI2Js6FxsXshtYjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:84:41:6d:4b:9c:b7:21:f8:3f:52:03:d6:c7:eb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Validity
Not Before: Mar 15 22:00:56 2026 GMT
Not After : Mar 16 22:00:56 2026 GMT
Subject: CN=f5424ad5c13668255b1f94a92604bf09e03fd17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:86:eb:ea:2e:a5:13:f4:d1:c9:ff:68:c8:
33:e2:ca:7c:13:2d:40:24:fb:d2:d9:4e:1e:dc:07:
72:7f:d4:09:27:43:49:b3:f4:fa:d1:26:29:4f:f9:
5d:8d:d2:80:12:b6:65:c6:ae:f5:95:40:03:77:6f:
ff:2f:a9:1b:94:62:81:e4:63:1a:62:7d:0b:83:74:
d2:fa:96:8b:2f:89:a7:14:e2:39:3f:80:a1:3e:1b:
13:84:bd:4b:01:0e:79:fc:8f:49:bb:97:36:c3:72:
38:83:3e:d7:1a:cb:e0:78:8a:f2:fd:13:a3:8c:a6:
20:89:b2:cd:81:9c:c7:f4:13:77:7e:6c:54:79:1a:
5a:f3:86:28:ec:4a:35:1e:7e:cd:74:b8:2a:30:4e:
ab:83:d3:2c:cf:f1:55:4c:8c:2d:8c:bc:95:7f:6e:
a3:6f:00:92:b3:65:f3:29:13:c2:72:3c:f7:af:7d:
c6:ed:c4:73:f7:80:ca:42:19:3f:7a:db:3a:8f:5f:
de:3f:6d:20:8b:61:8a:da:56:70:66:2a:18:69:c9:
51:f3:2e:f8:9a:24:ce:3d:81:f2:79:dd:4a:67:cc:
a5:3c:31:97:bf:eb:1b:65:d2:25:9c:0b:a2:8b:d3:
b3:07:b7:92:4a:27:43:56:39:b8:cf:fa:33:e1:3f:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:42:4A:D5:C1:36:68:25:5B:1F:94:A9:26:04:BF:09:E0:3F:D1:7F
X509v3 Authority Key Identifier:
keyid:E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:69:29:4c:e3:58:70:3b:7e:91:f8:9b:13:57:f0:1b:b0:69:
86:76:df:9e:3f:95:59:b0:8d:a4:ee:ba:17:e1:db:16:2a:98:
25:f5:be:88:81:45:c0:cb:c2:0f:11:c5:3d:f5:e5:71:ad:0c:
fa:29:67:4e:a4:6d:99:23:7a:22:0f:73:f1:d3:68:6b:9a:cc:
db:52:90:ab:f6:e2:d3:1e:37:8c:03:93:6b:7b:1e:f7:e3:dc:
6a:61:6a:1b:27:09:10:34:a7:20:1b:ee:4b:fc:ba:de:8e:fc:
f3:a2:92:7d:4a:05:b3:61:fb:dc:f1:1e:37:ca:77:2c:56:16:
42:d4:76:b8:cb:cf:75:3c:2a:4a:db:09:44:a3:a9:6c:a7:42:
ad:73:3d:01:50:c9:51:b1:a0:90:ea:66:9f:66:bc:cc:90:9d:
10:c1:37:ea:be:2c:a9:2e:f6:af:e7:c3:be:fc:2b:d4:36:96:
5b:a0:db:06:eb:f2:55:1d:bd:2c:86:93:6a:59:f2:4a:bc:b2:
1c:05:a9:c6:26:d3:07:43:cd:01:a9:d7:cf:e3:bb:db:f8:9c:
87:d3:6e:9a:38:23:b5:8f:11:d3:84:8d:91:df:5e:41:99:d7:
e1:a3:ee:b5:44:bd:7e:ca:22:fd:99:b5:34:2f:86:94:0b:a6:
0f:e0:89:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzzhEFtS5y3Ifg/UgPWx+vGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwY2E3OTVjNGI1ZmIzYzllN2RkOTkyZTdhMzc2NDkwMmQx
MjFiYzIwHhcNMjYwMzE1MjIwMDU2WhcNMjYwMzE2MjIwMDU2WjAzMTEwLwYDVQQD
EyhmNTQyNGFkNWMxMzY2ODI1NWIxZjk0YTkyNjA0YmYwOWUwM2ZkMTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk2G6+oupRP00cn/aMgz4sp8Ey1A
JPvS2U4e3Adyf9QJJ0NJs/T60SYpT/ldjdKAErZlxq71lUADd2//L6kblGKB5GMa
Yn0Lg3TS+paLL4mnFOI5P4ChPhsThL1LAQ55/I9Ju5c2w3I4gz7XGsvgeIry/ROj
jKYgibLNgZzH9BN3fmxUeRpa84Yo7Eo1Hn7NdLgqME6rg9Msz/FVTIwtjLyVf26j
bwCSs2XzKRPCcjz3r33G7cRz94DKQhk/ets6j1/eP20gi2GK2lZwZioYaclR8y74
miTOPYHyed1KZ8ylPDGXv+sbZdIlnAuii9OzB7eSSidDVjm4z/oz4T9aXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVCStXBNmglWx+UqSYEvwngP9F/MB8GA1UdIwQY
MBaAFODKeVxLX7PJ592ZLno3ZJAtEhvCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE1wNVhFdGZzOG5uM1prdWVqZGtrQzBTRzhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83YmI5N2YtNmQzZi00NjA3LTgxOTEt
ZmQwYTEzOWM3ZjNkLzEvNE1wNVhFdGZzOG5uM1prdWVqZGtrQzBTRzhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy83YmI5N2YtNmQzZi00NjA3LTgxOTEtZmQwYTEzOWM3ZjNk
LzEvNE1wNVhFdGZzOG5uM1prdWVqZGtrQzBTRzhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWkpTONY
cDt+kfibE1fwG7Bphnbfnj+VWbCNpO66F+HbFiqYJfW+iIFFwMvCDxHFPfXlca0M
+ilnTqRtmSN6Ig9z8dNoa5rM21KQq/bi0x43jAOTa3se9+PcamFqGycJEDSnIBvu
S/y63o7886KSfUoFs2H73PEeN8p3LFYWQtR2uMvPdTwqStsJRKOpbKdCrXM9AVDJ
UbGgkOpmn2a8zJCdEME36r4sqS72r+fDvvwr1DaWW6DbBuvyVR29LIaTalnySryy
HAWpxibTB0PNAanXz+O72/ich9NumjgjtY8R04SNkd9eQZnX4aPutUS9fsoi/Zm1
NC+GlAumD+CJdA==
-----END CERTIFICATE-----
Generated at Mon Mar 16 08:17:17 2026 by rpki-client