Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json)
Hash identifier: GE9a2d7hD7D7EqDSKn+O+0fwVLZ0gtVR3sQQLjWJG7M=
Subject key identifier: 5A:7F:BB:83:28:1F:2A:08:3F:CF:D9:5B:09:15:FE:6C:2D:B0:A8:04
Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Certificate serial: 019D3941522E45F9F688C30E10D63B529598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
Manifest number: 12F2
Signing time: Sun 29 Mar 2026 11:01:15 +0000
Manifest this update: Sun 29 Mar 2026 11:01:15 +0000
Manifest next update: Mon 30 Mar 2026 11:01:15 +0000
Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: myjN3jjPsf7XSyCz7NhG94Gv/XGTkW/aYrgzotwOGRY=)
2: H8G6D-Wk6u8Ak866YQFvElddI-c.roa (hash: PEnd5yN8T5n1W+yxVyKPvkVNjUPkgKs3BkeHGhdDjdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:52:2e:45:f9:f6:88:c3:0e:10:d6:3b:52:95:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Validity
Not Before: Mar 29 11:01:15 2026 GMT
Not After : Mar 30 11:01:15 2026 GMT
Subject: CN=5a7fbb83281f2a083fcfd95b0915fe6c2db0a804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:12:95:9f:71:19:e3:23:c2:26:ec:17:b0:c6:
f4:df:1d:2f:9b:1d:3f:e5:21:33:6c:e5:9e:16:ec:
ee:7c:e3:59:f1:93:3c:33:6c:ed:c2:1b:4b:cd:50:
ae:12:c2:75:51:7e:f1:02:03:b2:c3:ba:45:6f:04:
b6:36:e1:3f:fe:8d:fd:7b:ef:ac:1a:19:20:43:8b:
c4:bf:0f:d6:44:8c:b3:dc:90:93:ec:17:e8:38:09:
0e:11:eb:69:ed:ad:bb:28:99:f5:f0:b3:4c:ea:08:
cd:46:1f:1c:df:30:ed:9d:4b:70:ec:ba:52:4a:be:
6e:a9:94:f8:ad:d4:99:8a:0b:eb:82:d1:38:e8:4b:
75:8a:48:07:41:92:b4:80:35:0d:0f:e2:13:db:08:
1c:30:30:05:20:5c:7b:d2:e4:ec:f3:5b:74:4d:0a:
a1:ce:c5:54:29:8d:b9:f0:30:d7:e8:13:12:63:85:
6d:d8:d3:a6:9a:3f:46:2a:c7:7b:02:05:a5:75:e3:
e5:08:75:6f:72:f5:6f:a0:41:ee:47:17:e5:2b:68:
9f:a6:d0:5a:78:ef:6e:a6:91:44:37:53:3e:dd:6a:
ae:5c:1e:77:60:5c:86:2c:8b:99:59:bb:0a:5b:54:
e9:ca:c1:17:a8:9c:db:a3:69:e0:7d:16:85:34:79:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7F:BB:83:28:1F:2A:08:3F:CF:D9:5B:09:15:FE:6C:2D:B0:A8:04
X509v3 Authority Key Identifier:
keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:20:ab:13:45:75:ff:44:2c:43:56:23:f1:26:cc:ab:5b:39:
5c:79:63:30:6a:2b:bb:33:19:c9:c7:8f:9d:b2:da:23:cb:f0:
fc:50:ff:b1:53:d7:c6:92:4a:54:50:cc:fb:96:78:72:28:93:
94:29:7c:de:43:7e:a6:e2:dd:fe:f1:c6:ef:0f:4c:08:dd:b2:
72:a2:0b:a3:be:f2:f4:fb:ad:54:ce:09:85:a3:0e:d5:3e:10:
68:1e:a0:21:93:40:12:8c:9b:16:21:a9:84:e1:cd:af:bf:20:
38:01:f4:76:8e:2d:fe:18:4d:e4:7f:ff:ab:1f:22:01:ad:6b:
77:58:6e:3c:fc:f8:91:fa:f9:57:2c:06:b6:ef:bd:9e:e5:e9:
e4:7a:a7:0b:8e:30:fd:9f:e2:d8:f8:21:4a:a8:ec:05:cb:1b:
3c:0d:9b:49:77:79:74:41:e3:4e:9b:6b:15:64:9a:5e:10:26:
45:6a:d6:90:ff:1e:fe:d0:3b:d3:0d:be:4e:0b:7a:2d:25:4e:
32:c2:6c:a1:23:7a:8d:10:79:a2:34:66:e8:ed:dd:5a:b7:d2:
24:ea:b4:af:67:05:93:ed:67:15:d3:07:9d:76:9d:89:f2:c5:
46:ee:d1:36:35:62:03:a9:03:86:64:1b:70:26:57:51:0d:77:
d7:62:32:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QVIuRfn2iMMOENY7UpWYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyM2MwYzNlMDEwNmM5NjVkNDYwY2QwYzNjYmM1ZTIzNGY4
MmE2YjQwHhcNMjYwMzI5MTEwMTE1WhcNMjYwMzMwMTEwMTE1WjAzMTEwLwYDVQQD
Eyg1YTdmYmI4MzI4MWYyYTA4M2ZjZmQ5NWIwOTE1ZmU2YzJkYjBhODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhKVn3EZ4yPCJuwXsMb03x0vmx0/
5SEzbOWeFuzufONZ8ZM8M2ztwhtLzVCuEsJ1UX7xAgOyw7pFbwS2NuE//o39e++s
GhkgQ4vEvw/WRIyz3JCT7BfoOAkOEetp7a27KJn18LNM6gjNRh8c3zDtnUtw7LpS
Sr5uqZT4rdSZigvrgtE46Et1ikgHQZK0gDUND+IT2wgcMDAFIFx70uTs81t0TQqh
zsVUKY258DDX6BMSY4Vt2NOmmj9GKsd7AgWldePlCHVvcvVvoEHuRxflK2ifptBa
eO9uppFEN1M+3WquXB53YFyGLIuZWbsKW1TpysEXqJzbo2ngfRaFNHlHDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFp/u4MoHyoIP8/ZWwkV/mwtsKgEMB8GA1UdIwQY
MBaAFOI8DD4BBsll1GDNDDy8XiNPgqa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYt
MTc2NGIwMzYxOGZjLzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82NDdmMjgtNTljZi00ZDY4LWE1MGYtMTc2NGIwMzYxOGZj
LzEvNGp3TVBnRUd5V1hVWU0wTVBMeGVJMC1DcHJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSCrE0V1
/0QsQ1Yj8SbMq1s5XHljMGoruzMZycePnbLaI8vw/FD/sVPXxpJKVFDM+5Z4ciiT
lCl83kN+puLd/vHG7w9MCN2ycqILo77y9PutVM4JhaMO1T4QaB6gIZNAEoybFiGp
hOHNr78gOAH0do4t/hhN5H//qx8iAa1rd1huPPz4kfr5VywGtu+9nuXp5HqnC44w
/Z/i2PghSqjsBcsbPA2bSXd5dEHjTptrFWSaXhAmRWrWkP8e/tA70w2+Tgt6LSVO
MsJsoSN6jRB5ojRm6O3dWrfSJOq0r2cFk+1nFdMHnXadifLFRu7RNjViA6kDhmQb
cCZXUQ1312IyWA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:42 2026 by rpki-client