Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: kHbuaVV+Tf0/W9Wmw9FI8HBPHb4slQjLSGog/5LSJks=
Subject key identifier: CD:27:2A:13:DF:B9:24:C3:1F:77:91:3F:74:6C:4C:A3:20:97:FA:22
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 019D382DD3C62AD29EDC89F6EE597A912970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 04CD
Signing time: Sun 29 Mar 2026 06:00:20 +0000
Manifest this update: Sun 29 Mar 2026 06:00:20 +0000
Manifest next update: Mon 30 Mar 2026 06:00:20 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: rMZz/5UxbiXUwbDjoaBFy7EyEhwtMNDuJnBjRdIi45o=)
2: nm8pFEpWXGPLmBGfEmff0mnlzsw.roa (hash: +n+qMQpld1QaCfNSSKf78RqXBTGK3eec/GzY9ilFD5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d3:c6:2a:d2:9e:dc:89:f6:ee:59:7a:91:29:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: Mar 29 06:00:20 2026 GMT
Not After : Mar 30 06:00:20 2026 GMT
Subject: CN=cd272a13dfb924c31f77913f746c4ca32097fa22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3f:26:b5:9f:df:86:7d:bb:52:6b:74:2f:29:
4c:64:ca:e8:48:07:e0:85:c4:e2:2e:51:6f:74:6a:
c9:fd:35:79:25:54:1e:55:0c:75:5b:97:91:fb:f4:
26:df:c7:5a:05:2e:69:e7:af:b3:66:f9:52:8c:97:
91:38:f6:9c:94:8b:7a:86:e1:19:b1:45:68:d8:cf:
72:e4:5a:41:4d:fe:2d:82:75:a5:a6:e3:5a:7d:90:
dd:5a:29:97:3b:19:83:f8:84:bc:92:cd:23:f9:cd:
26:75:e5:25:9b:b9:1b:89:c5:a7:49:65:0c:1e:14:
7c:ed:cb:61:e8:2f:f8:74:5b:d6:de:f0:f8:8a:5e:
2a:2f:15:72:f4:18:20:80:62:39:7b:04:95:74:c0:
d1:62:90:ec:d2:a2:9d:13:ed:90:04:3d:0b:68:56:
1e:6d:04:81:77:57:bc:d6:64:83:ab:e2:bd:11:57:
1c:28:64:34:8f:85:ab:fe:14:1a:40:be:2a:4c:65:
86:28:50:42:67:5e:d2:4d:da:70:13:59:43:c9:fc:
86:f0:c7:fc:41:34:4e:7f:98:77:02:35:5e:86:9d:
28:fc:da:9b:07:cc:32:62:83:b7:c9:2c:1c:b9:67:
41:cd:76:18:20:60:35:13:0a:af:6f:76:09:85:70:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:27:2A:13:DF:B9:24:C3:1F:77:91:3F:74:6C:4C:A3:20:97:FA:22
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7b:41:a3:ec:f3:fb:e2:50:97:8f:24:f8:01:96:3a:5d:2b:
58:32:ce:fb:f5:ea:5d:e5:5e:7a:ca:de:7f:c5:89:ce:99:a5:
8c:c4:83:d4:92:da:f7:08:fd:74:05:58:53:7f:93:54:fb:4c:
1c:fd:b3:30:77:c7:11:56:7a:68:1f:a5:d7:6e:f0:81:4e:a0:
4a:85:ef:42:7c:94:89:56:cd:77:dd:c1:1c:6f:57:f4:88:ea:
d9:71:10:13:e3:3d:df:8a:00:aa:ab:54:b8:dd:dd:b1:15:75:
a9:6a:75:89:bf:66:f2:58:c1:87:28:c1:33:2f:ab:03:9d:f7:
62:05:40:a4:98:e1:68:59:e9:57:fa:c9:9e:6e:3d:8a:ed:f0:
21:5f:a5:53:b7:3a:88:89:7d:4e:d8:c1:31:d5:b7:31:d8:84:
03:f0:85:77:8e:95:d2:d1:c0:88:71:3b:b8:e2:3e:75:4d:ae:
66:59:6c:5a:71:94:dd:9e:ea:0e:f3:20:12:76:fe:d3:c8:86:
40:7e:84:2c:1d:37:01:5c:f4:8a:d3:de:09:98:b5:bf:ab:be:
86:40:d5:43:66:db:8e:0a:01:9d:74:f5:d3:0d:b3:40:4f:88:
c1:0f:eb:b3:2d:ea:0b:32:ab:1c:6d:67:54:ba:19:36:02:ce:
72:86:3b:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LdPGKtKe3In27ll6kSlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWEzYmFlNDhjOTU1NjYzMTRkNjBlZmE4ODlmM2Q2NWY5
YmRkNDEwHhcNMjYwMzI5MDYwMDIwWhcNMjYwMzMwMDYwMDIwWjAzMTEwLwYDVQQD
EyhjZDI3MmExM2RmYjkyNGMzMWY3NzkxM2Y3NDZjNGNhMzIwOTdmYTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+D8mtZ/fhn27Umt0LylMZMroSAfg
hcTiLlFvdGrJ/TV5JVQeVQx1W5eR+/Qm38daBS5p56+zZvlSjJeROPaclIt6huEZ
sUVo2M9y5FpBTf4tgnWlpuNafZDdWimXOxmD+IS8ks0j+c0mdeUlm7kbicWnSWUM
HhR87cth6C/4dFvW3vD4il4qLxVy9BgggGI5ewSVdMDRYpDs0qKdE+2QBD0LaFYe
bQSBd1e81mSDq+K9EVccKGQ0j4Wr/hQaQL4qTGWGKFBCZ17STdpwE1lDyfyG8Mf8
QTROf5h3AjVehp0o/NqbB8wyYoO3ySwcuWdBzXYYIGA1Ewqvb3YJhXBsTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0nKhPfuSTDH3eRP3RsTKMgl/oiMB8GA1UdIwQY
MBaAFOGaO65IyVVmMU1g76iJ89Zfm91BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82MzBkMGEtNDViOC00NmM0LThjMDIt
OTE4NGE5MWI4YWUxLzEvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82MzBkMGEtNDViOC00NmM0LThjMDItOTE4NGE5MWI4YWUx
LzEvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3tBo+zz
++JQl48k+AGWOl0rWDLO+/XqXeVeesref8WJzpmljMSD1JLa9wj9dAVYU3+TVPtM
HP2zMHfHEVZ6aB+l127wgU6gSoXvQnyUiVbNd93BHG9X9Ijq2XEQE+M934oAqqtU
uN3dsRV1qWp1ib9m8ljBhyjBMy+rA533YgVApJjhaFnpV/rJnm49iu3wIV+lU7c6
iIl9TtjBMdW3MdiEA/CFd46V0tHAiHE7uOI+dU2uZllsWnGU3Z7qDvMgEnb+08iG
QH6ELB03AVz0itPeCZi1v6u+hkDVQ2bbjgoBnXT10w2zQE+IwQ/rsy3qCzKrHG1n
VLoZNgLOcoY73A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:54 2026 by rpki-client