Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier: PfGPvILhbxHEsKuK4XQ+ugADOqswAnk3iVJUHisdT1g=
Subject key identifier: 11:EA:5B:66:81:2F:6A:CE:C9:85:9B:C2:16:D3:5B:29:60:84:B9:14
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial: 019D228323B06E98DC3378051CFA7A4CEE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number: 0CB1
Signing time: Wed 25 Mar 2026 01:01:52 +0000
Manifest this update: Wed 25 Mar 2026 01:01:52 +0000
Manifest next update: Thu 26 Mar 2026 01:01:52 +0000
Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: JggyR7r/9gvRn8cmpVoLesQqwXkDCms3ApsaErJoTYI=)
2: xtYobtIx2W6_g9SOOJPQhPICYpQ.roa (hash: mB2srtxC3TvgB8CL9USorDjZQ7e+W7OquH6xXCy/qr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:22:83:23:b0:6e:98:dc:33:78:05:1c:fa:7a:4c:ee:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Validity
Not Before: Mar 25 01:01:52 2026 GMT
Not After : Mar 26 01:01:52 2026 GMT
Subject: CN=11ea5b66812f6acec9859bc216d35b296084b914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:22:e7:3b:5e:f7:d5:0b:3e:3b:39:7a:47:
83:cf:e2:16:1a:2f:01:4a:4c:41:c1:a0:61:98:27:
00:ac:fa:a9:15:14:92:6f:27:d0:4d:9d:22:8c:ca:
2d:7f:9e:7d:59:fd:1f:69:9e:cd:79:ef:61:b4:be:
5e:51:df:65:55:77:a2:83:75:e8:6c:d4:51:be:4a:
2e:68:a0:e7:66:cb:fc:7e:16:ad:a5:1a:61:64:9f:
d3:01:f3:ea:84:fa:49:9c:6e:10:de:fa:2a:d5:c1:
48:e0:91:a0:ff:2e:71:1a:6d:53:12:bf:df:f3:4d:
58:16:13:8b:7a:9f:b5:e6:13:31:75:b6:4d:b9:4c:
71:61:27:d4:d9:7c:5a:23:c8:25:98:94:ff:e7:bd:
23:4f:1c:f0:43:d5:3e:5f:ae:1a:48:1a:a1:c1:f8:
51:d6:c3:5c:fa:06:a2:87:22:b9:70:3b:e0:08:45:
2c:4c:f1:31:9f:63:06:ac:ad:c1:c7:08:cb:a0:58:
08:2a:18:04:81:04:65:4b:dc:91:b1:7e:fa:3e:51:
85:9c:bc:e6:6d:f2:aa:32:6f:c7:e4:44:f4:0d:be:
42:e5:de:4d:c1:0f:e5:45:49:4d:d8:4a:f6:13:df:
cf:36:21:be:08:2a:8b:1f:4c:b0:1e:f2:fd:cb:86:
1e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EA:5B:66:81:2F:6A:CE:C9:85:9B:C2:16:D3:5B:29:60:84:B9:14
X509v3 Authority Key Identifier:
keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2c:6c:30:df:ad:fa:95:1c:98:3e:96:b1:7d:30:99:8b:af:
33:ed:71:a9:16:90:67:81:99:36:e6:09:2a:e7:8b:c1:4e:57:
28:8f:ef:63:8f:53:e6:82:28:ee:f1:a4:d9:54:e6:19:8c:3b:
20:aa:ce:80:55:4e:6a:11:83:b0:a8:e1:a1:8b:bb:5a:aa:10:
99:57:ff:3e:06:3c:55:a4:3e:59:07:fd:8b:95:e6:28:23:78:
99:5f:da:51:02:5f:be:f2:c1:63:be:8e:d9:e0:e4:b9:35:9f:
5d:b6:15:cd:a6:9b:23:0d:0f:c5:e4:68:ba:d3:21:11:30:b9:
62:b8:9b:29:32:be:7c:cf:25:63:72:4c:9c:8f:a1:7d:84:01:
4e:b7:61:80:26:20:d3:3b:56:36:d3:eb:5b:7a:dd:16:e0:44:
89:95:ce:6d:df:2a:b1:ca:92:73:7a:e0:87:e2:98:bf:5d:d1:
83:0e:26:85:76:6c:b4:5d:0d:31:4b:b0:bb:5a:ee:b8:53:4e:
5b:6a:f0:e6:21:79:a6:ae:f3:14:26:b3:c2:07:af:40:36:39:
52:21:8c:bd:11:ff:2c:93:ef:ad:28:36:c7:ed:82:3c:f5:23:
07:14:b9:83:84:53:49:5b:70:71:6e:5d:d6:b6:d5:08:4a:2e:
38:3f:8b:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0igyOwbpjcM3gFHPp6TO5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMWFhM2VmZjQ3NWIwMTBiZGU0MTU0ZjNiZDQ3NDNhN2Mw
YmFlNTUwHhcNMjYwMzI1MDEwMTUyWhcNMjYwMzI2MDEwMTUyWjAzMTEwLwYDVQQD
EygxMWVhNWI2NjgxMmY2YWNlYzk4NTliYzIxNmQzNWIyOTYwODRiOTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvgi5zte99ULPjs5ekeDz+IWGi8B
SkxBwaBhmCcArPqpFRSSbyfQTZ0ijMotf559Wf0faZ7Nee9htL5eUd9lVXeig3Xo
bNRRvkouaKDnZsv8fhatpRphZJ/TAfPqhPpJnG4Q3voq1cFI4JGg/y5xGm1TEr/f
801YFhOLep+15hMxdbZNuUxxYSfU2XxaI8glmJT/570jTxzwQ9U+X64aSBqhwfhR
1sNc+gaihyK5cDvgCEUsTPExn2MGrK3BxwjLoFgIKhgEgQRlS9yRsX76PlGFnLzm
bfKqMm/H5ET0Db5C5d5NwQ/lRUlN2Er2E9/PNiG+CCqLH0ywHvL9y4YezQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHqW2aBL2rOyYWbwhbTWylghLkUMB8GA1UdIwQY
MBaAFOAao+/0dbAQveQVTzvUdDp8C65VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85Yjg3ZDUtM2I2Yi00MjZlLWIzY2Ut
M2QwY2Q5ODYxOTBmLzEvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85Yjg3ZDUtM2I2Yi00MjZlLWIzY2UtM2QwY2Q5ODYxOTBm
LzEvNEJxajdfUjFzQkM5NUJWUE85UjBPbndMcmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSxsMN+t
+pUcmD6WsX0wmYuvM+1xqRaQZ4GZNuYJKueLwU5XKI/vY49T5oIo7vGk2VTmGYw7
IKrOgFVOahGDsKjhoYu7WqoQmVf/PgY8VaQ+WQf9i5XmKCN4mV/aUQJfvvLBY76O
2eDkuTWfXbYVzaabIw0PxeRoutMhETC5YribKTK+fM8lY3JMnI+hfYQBTrdhgCYg
0ztWNtPrW3rdFuBEiZXObd8qscqSc3rgh+KYv13Rgw4mhXZstF0NMUuwu1ruuFNO
W2rw5iF5pq7zFCazwgevQDY5UiGMvRH/LJPvrSg2x+2CPPUjBxS5g4RTSVtwcW5d
1rbVCEouOD+LSQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 09:41:56 2026 by rpki-client