Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier: 02Ti0lSDir5kDOzjgosHFNaeWDWazXlVYuOdT72MjQ4=
Subject key identifier: 88:1C:2F:7D:A1:A1:B3:D3:9F:D5:27:FD:1B:A6:2E:9C:76:92:2C:16
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 019D3940F7FA353DB0B04314D07B5D8DA626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number: 0B15
Signing time: Sun 29 Mar 2026 11:00:52 +0000
Manifest this update: Sun 29 Mar 2026 11:00:52 +0000
Manifest next update: Mon 30 Mar 2026 11:00:52 +0000
Files and hashes: 1: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: SWEmSqOTZZVRYbywG/STS+Qe7kkSsEyxbU6jrpHMwME=)
2: 5F_Lv04RXNd_Y46Aej2XB7OXRCs.roa (hash: OFOrOgL1BwCDJs6vNTJlxJXJgyRTHA3y/UE7TO8d/LM=)
3: oil7N-Cu9Bp_DmPdE_j9IZL0Ozo.roa (hash: sJuR4lvRXMBU3fcQ7PumT3oOEz1g58/Vsv/QWac8Orc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f7:fa:35:3d:b0:b0:43:14:d0:7b:5d:8d:a6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: Mar 29 11:00:52 2026 GMT
Not After : Mar 30 11:00:52 2026 GMT
Subject: CN=881c2f7da1a1b3d39fd527fd1ba62e9c76922c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:59:0d:67:81:b2:86:6f:4d:f6:c4:8d:a3:
47:b3:a9:45:cc:ef:63:2a:23:c8:d9:dc:75:5c:9b:
3c:cb:4c:bc:13:81:b3:e3:f4:69:4a:4b:6f:c2:82:
be:5d:ae:b2:37:a2:e9:1c:a2:5c:12:36:5b:54:5f:
a8:2e:0f:2b:3f:bd:27:9e:1c:e6:59:68:55:8f:d9:
bb:1c:68:46:c3:d8:1e:e4:66:75:c2:33:15:0b:d8:
4a:e6:b6:1f:21:97:e0:f7:57:18:20:1c:51:76:a1:
ff:73:1e:f1:e2:d1:77:2e:29:6c:5f:91:74:05:04:
20:a3:83:b9:0b:44:85:28:1b:18:bd:f5:45:b9:08:
a0:29:27:3c:03:35:ef:c2:3b:e1:5d:4d:dd:9e:4d:
19:89:28:c8:56:e6:e5:fd:2e:52:0a:11:5b:40:0e:
23:e2:03:e9:41:30:72:79:da:67:ad:66:bf:a7:42:
5a:53:98:f9:3c:44:02:94:21:ae:0d:d7:a5:2d:cf:
57:da:c2:0a:45:84:54:20:7e:87:0d:3d:4f:e6:ac:
c0:4f:02:1d:7d:04:20:16:0d:f4:f6:c6:89:0b:30:
70:65:a9:75:69:12:d8:67:33:fd:d3:99:2a:c3:e6:
08:74:b7:07:5a:29:90:ff:fa:e1:85:05:49:c5:e8:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1C:2F:7D:A1:A1:B3:D3:9F:D5:27:FD:1B:A6:2E:9C:76:92:2C:16
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:59:6a:a0:61:d6:44:68:10:b0:5b:69:3e:80:2e:ee:4f:e6:
bc:65:8f:e5:92:aa:8e:53:9f:e3:ba:3b:32:32:e7:58:7b:d6:
e5:9f:8d:68:18:8c:84:09:5b:2a:84:71:03:95:4e:39:98:57:
03:23:9e:4e:a7:c6:17:fb:1d:bb:f0:51:61:7c:c0:a7:b0:c1:
b8:fb:1b:93:de:b5:b6:72:a7:89:7d:62:d1:d7:dd:fa:6f:18:
53:62:0d:aa:da:5f:ff:20:2d:2c:d3:22:7f:d6:d3:f5:58:dd:
99:ce:98:08:ba:3c:e6:55:55:95:11:53:26:db:32:3b:c6:e5:
93:99:43:7a:f6:3c:5a:2f:6e:53:97:4e:08:09:6d:9b:3e:cc:
e9:11:b0:f8:0c:a5:e6:57:8e:10:33:b9:17:12:87:7e:33:ff:
4b:b7:25:4f:43:74:4d:08:a6:5c:d1:6a:90:a3:51:9c:65:58:
0f:41:c9:93:91:15:22:57:53:af:fc:59:2a:35:26:b4:f0:28:
89:00:46:db:16:39:29:64:90:96:d2:f4:4a:7b:df:10:83:e6:
34:39:33:1c:ee:b8:2d:a7:82:b5:1f:bc:a3:3f:3f:a3:6e:51:
98:08:c6:e5:ac:72:0a:af:ef:5f:08:0e:a7:70:db:13:1a:5d:
c2:a5:70:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QPf6NT2wsEMU0HtdjaYmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYWVjM2M4YWIxMWZjMDU4YzlhOGVmNDAwZWYxYzNkMTQ0
YTdiYTgwHhcNMjYwMzI5MTEwMDUyWhcNMjYwMzMwMTEwMDUyWjAzMTEwLwYDVQQD
Eyg4ODFjMmY3ZGExYTFiM2QzOWZkNTI3ZmQxYmE2MmU5Yzc2OTIyYzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vtZDWeBsoZvTfbEjaNHs6lFzO9j
KiPI2dx1XJs8y0y8E4Gz4/RpSktvwoK+Xa6yN6LpHKJcEjZbVF+oLg8rP70nnhzm
WWhVj9m7HGhGw9ge5GZ1wjMVC9hK5rYfIZfg91cYIBxRdqH/cx7x4tF3LilsX5F0
BQQgo4O5C0SFKBsYvfVFuQigKSc8AzXvwjvhXU3dnk0ZiSjIVubl/S5SChFbQA4j
4gPpQTByedpnrWa/p0JaU5j5PEQClCGuDdelLc9X2sIKRYRUIH6HDT1P5qzATwId
fQQgFg309saJCzBwZal1aRLYZzP905kqw+YIdLcHWimQ//rhhQVJxehLawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgcL32hobPTn9Un/RumLpx2kiwWMB8GA1UdIwQY
MBaAFOKuw8irEfwFjJqO9ADvHD0USnuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iYTE5ZTQtNzFjYy00NzBlLWJkYTUt
OWRhNGNjNjIwNTMzLzEvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iYTE5ZTQtNzFjYy00NzBlLWJkYTUtOWRhNGNjNjIwNTMz
LzEvNHE3RHlLc1JfQVdNbW83MEFPOGNQUlJLZTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1lqoGHW
RGgQsFtpPoAu7k/mvGWP5ZKqjlOf47o7MjLnWHvW5Z+NaBiMhAlbKoRxA5VOOZhX
AyOeTqfGF/sdu/BRYXzAp7DBuPsbk961tnKniX1i0dfd+m8YU2INqtpf/yAtLNMi
f9bT9Vjdmc6YCLo85lVVlRFTJtsyO8blk5lDevY8Wi9uU5dOCAltmz7M6RGw+Ayl
5leOEDO5FxKHfjP/S7clT0N0TQimXNFqkKNRnGVYD0HJk5EVIldTr/xZKjUmtPAo
iQBG2xY5KWSQltL0SnvfEIPmNDkzHO64LaeCtR+8oz8/o25RmAjG5axyCq/vXwgO
p3DbExpdwqVwrA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:03 2026 by rpki-client