Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: qaVtxn9RB7q8ksbKdXku3HiNgaQ2O4DuYaz3yXqmlxs=
Subject key identifier: 83:E8:4A:2F:9A:A9:52:34:00:15:74:E9:B6:10:9C:80:1F:BA:27:F5
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 019CE1EBCCE5ED6A52F34A74AF2D487DEA4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 15B4
Signing time: Thu 12 Mar 2026 12:00:52 +0000
Manifest this update: Thu 12 Mar 2026 12:00:52 +0000
Manifest next update: Fri 13 Mar 2026 12:00:52 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: OrEaZ8g7FOLpvFfbVCqMBx8mOhkw4OnbGmZNLWqIRdo=)
2: eP9Zj4VtBHmGTmZV-BTJVgUUM2w.roa (hash: WYeB62ZsHbPuqTvSpxGwefGN+P372Umh9fLZQeEfJRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:eb:cc:e5:ed:6a:52:f3:4a:74:af:2d:48:7d:ea:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Mar 12 12:00:52 2026 GMT
Not After : Mar 13 12:00:52 2026 GMT
Subject: CN=83e84a2f9aa95234001574e9b6109c801fba27f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:f1:4a:e4:8f:e2:3b:09:95:1e:39:2b:d6:
0c:1a:39:62:a6:e4:d3:bb:07:41:54:a5:23:17:62:
13:2a:96:a2:99:96:e1:0f:0e:d1:5d:b8:21:0b:39:
39:00:c4:cb:d4:97:40:1d:17:f2:0c:17:df:fb:b8:
18:d4:58:1d:bf:d1:34:1a:af:71:93:ca:04:6d:b7:
48:44:fd:bb:d8:c7:c6:0b:d5:c3:e3:f6:90:ce:5d:
d2:3b:ca:ae:c6:e2:82:b7:6c:96:5f:b4:25:63:14:
dd:0f:ad:4b:4c:bf:9d:e5:c3:88:d4:60:88:b9:57:
31:4b:d2:ed:5c:0d:f0:62:68:d7:76:62:d2:fd:45:
40:03:42:49:12:10:ba:27:ee:6c:28:26:2d:9c:1b:
6c:18:f1:80:1b:b5:1b:7f:d1:55:8f:58:08:f1:49:
c8:4b:00:80:02:bf:e4:f3:61:ff:9f:1d:cd:7c:de:
34:29:c1:19:21:b0:ca:e1:76:1b:f4:5c:c0:3d:54:
b0:81:cd:93:69:68:35:17:87:7f:57:27:c7:e1:d9:
02:34:70:cf:10:29:8f:db:26:94:a1:24:a1:96:2c:
6b:95:e2:29:92:2a:51:f6:6b:a0:d1:48:be:3e:88:
03:eb:5d:64:8a:d2:97:ee:a7:23:90:1c:5a:9d:43:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E8:4A:2F:9A:A9:52:34:00:15:74:E9:B6:10:9C:80:1F:BA:27:F5
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:62:ce:6d:0a:db:a0:19:ae:2a:17:fb:7b:bd:11:83:e6:94:
bb:8c:26:f9:f3:19:6d:74:bd:15:dd:50:63:59:c7:04:d7:74:
a8:8a:2e:14:1a:e3:3a:fe:3c:de:6f:83:78:09:49:66:6f:6e:
96:69:8a:f9:e3:71:2b:b9:06:64:02:c1:f4:b2:6a:56:94:9a:
e4:b2:4a:5f:3c:16:56:a0:d2:b1:9a:de:b4:18:a5:ad:58:58:
fa:fa:a7:a2:6a:0f:7b:3f:56:42:1e:01:45:3a:4c:f6:36:35:
ae:9b:1a:69:e1:a7:bc:75:36:fe:af:6e:b5:d8:74:4d:f9:d1:
ea:ae:47:c3:9b:2e:6b:e5:ac:93:0a:a0:40:fe:2d:62:ca:70:
31:46:22:d2:dd:32:17:a1:90:96:bb:36:3e:38:38:a8:3c:62:
41:e1:9d:27:42:c9:0e:88:d6:eb:1c:0c:50:0d:59:80:4a:5b:
11:d1:63:23:76:19:a7:f4:05:44:20:98:3e:56:fb:63:3b:0f:
50:49:17:b5:14:1e:b9:f4:2e:9d:fc:fa:ae:73:d8:96:ab:9e:
72:3b:71:f8:9a:ea:56:ee:db:0d:40:98:43:9b:4f:01:70:de:
87:40:2c:f2:c6:4d:2a:4f:1a:b6:92:c9:76:e1:c4:52:53:92:
87:a3:7a:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzh68zl7WpS80p0ry1IfepNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMWRmNmE4YWFhNzA0MWQ3MjUyODVkMGRkMGUxODBhNjQ5
YmMyMTMwHhcNMjYwMzEyMTIwMDUyWhcNMjYwMzEzMTIwMDUyWjAzMTEwLwYDVQQD
Eyg4M2U4NGEyZjlhYTk1MjM0MDAxNTc0ZTliNjEwOWM4MDFmYmEyN2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsrxSuSP4jsJlR45K9YMGjlipuTT
uwdBVKUjF2ITKpaimZbhDw7RXbghCzk5AMTL1JdAHRfyDBff+7gY1Fgdv9E0Gq9x
k8oEbbdIRP272MfGC9XD4/aQzl3SO8quxuKCt2yWX7QlYxTdD61LTL+d5cOI1GCI
uVcxS9LtXA3wYmjXdmLS/UVAA0JJEhC6J+5sKCYtnBtsGPGAG7Ubf9FVj1gI8UnI
SwCAAr/k82H/nx3NfN40KcEZIbDK4XYb9FzAPVSwgc2TaWg1F4d/VyfH4dkCNHDP
ECmP2yaUoSShlixrleIpkipR9mug0Ui+PogD611kitKX7qcjkBxanUPx5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPoSi+aqVI0ABV06bYQnIAfuif1MB8GA1UdIwQY
MBaAFOId9qiqpwQdclKF0N0OGApkm8ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEt
NjJiYTNhNjg4NGM4LzEvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEtNjJiYTNhNjg4NGM4
LzEvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmLObQrb
oBmuKhf7e70Rg+aUu4wm+fMZbXS9Fd1QY1nHBNd0qIouFBrjOv483m+DeAlJZm9u
lmmK+eNxK7kGZALB9LJqVpSa5LJKXzwWVqDSsZretBilrVhY+vqnomoPez9WQh4B
RTpM9jY1rpsaaeGnvHU2/q9utdh0TfnR6q5Hw5sua+WskwqgQP4tYspwMUYi0t0y
F6GQlrs2Pjg4qDxiQeGdJ0LJDojW6xwMUA1ZgEpbEdFjI3YZp/QFRCCYPlb7YzsP
UEkXtRQeufQunfz6rnPYlquecjtx+JrqVu7bDUCYQ5tPAXDeh0As8sZNKk8atpLJ
duHEUlOSh6N6bQ==
-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:47 2026 by rpki-client