Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft (raw, json)
Hash identifier: zwyBG3+ZBqzVixQwLfc7AslwCMdiC3QHlNFnTRNyT84=
Subject key identifier: 56:DD:4E:C6:89:F2:42:F6:B8:74:19:BA:84:BD:F5:DA:AB:1F:32:69
Authority key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
Certificate issuer: /CN=e31c010e95015c2123641d33120a7e9c9008002d
Certificate serial: 019D37528FE33845264650D6FD95278A05F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
Manifest number: 01BA
Signing time: Sun 29 Mar 2026 02:00:50 +0000
Manifest this update: Sun 29 Mar 2026 02:00:50 +0000
Manifest next update: Mon 30 Mar 2026 02:00:50 +0000
Files and hashes: 1: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl (hash: eQmAKyMRtqo5Awk3qGROUK3L7QjuqlbWkN/swjzrJmk=)
2: EVP8JZC4veSxdxX6T8tUKYQ-OAA.roa (hash: bYUAbwTN22M9GXhG7TnoyYrgAEb8pmrS9QwXIchXrAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:8f:e3:38:45:26:46:50:d6:fd:95:27:8a:05:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31c010e95015c2123641d33120a7e9c9008002d
Validity
Not Before: Mar 29 02:00:50 2026 GMT
Not After : Mar 30 02:00:50 2026 GMT
Subject: CN=56dd4ec689f242f6b87419ba84bdf5daab1f3269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bb:18:ec:4e:ee:00:c2:36:b7:3c:e3:d7:fd:
d5:d8:66:e3:d2:56:ae:5e:61:92:81:e6:7f:15:ff:
ce:b1:6b:79:c5:7d:49:06:de:48:61:00:ab:86:bf:
12:24:f2:a7:90:bd:68:82:9b:0b:18:4e:87:36:a8:
d5:9c:b9:fc:02:f0:bb:bb:35:3b:0b:f7:fa:3f:da:
4b:82:f9:6c:c6:4a:04:dc:f2:66:26:5a:31:a9:dd:
dd:53:86:89:23:11:5a:b1:0e:cd:a2:75:d8:77:8a:
4e:86:4d:c4:ad:a4:26:d4:bc:c6:c4:be:dc:8e:a6:
79:9a:b0:b4:d6:04:76:6e:13:97:fc:63:ec:b8:b7:
bf:f8:99:a2:f6:2a:86:91:43:fd:05:d2:3a:85:5a:
16:68:9e:63:30:dc:2d:4a:b6:e1:b6:a2:13:f4:f5:
e9:3b:7f:cb:fa:00:2c:88:20:06:a7:a8:50:a3:e8:
32:95:1c:22:36:36:3f:dc:b1:e7:3c:e5:c6:37:b1:
46:8c:0e:74:20:7e:13:a4:69:45:b3:93:9a:56:ad:
26:aa:4d:38:0d:ca:07:7f:77:b5:5c:32:16:71:94:
6c:75:6f:cd:9b:cf:2d:d0:04:c9:c3:6b:c3:4f:b4:
7b:50:1a:da:af:66:f9:5c:ea:64:1f:ef:52:da:c8:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DD:4E:C6:89:F2:42:F6:B8:74:19:BA:84:BD:F5:DA:AB:1F:32:69
X509v3 Authority Key Identifier:
keyid:E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6e:8c:eb:f4:54:0a:a7:88:d8:ab:e8:85:f8:a0:aa:51:4a:
0a:6a:4d:6f:61:4d:e7:95:69:6d:d0:11:3c:c2:07:6d:c1:38:
b4:1a:25:5a:91:e0:f5:97:20:f4:ae:f6:77:17:c4:f8:9d:cf:
3f:30:d4:4b:dc:49:d8:94:2d:15:16:03:96:de:f1:38:68:80:
07:78:47:8f:a9:be:53:db:43:3a:db:49:d0:6d:37:02:58:fd:
16:7e:b8:7a:dc:d6:23:21:a3:9d:38:1e:10:2d:d9:dc:cd:fe:
71:b7:91:d7:42:67:e9:59:7e:c3:41:7b:b4:fd:e4:de:42:09:
df:38:28:f7:e8:b4:bb:87:f1:93:d1:30:27:3c:7c:33:d0:1e:
a0:a1:d2:14:39:b9:17:75:b3:c6:e3:ef:fb:db:ed:9b:b6:ba:
25:61:e0:7d:02:32:f4:da:9a:45:e5:67:89:04:bd:1b:df:88:
87:23:5b:39:1a:09:63:56:3f:c4:58:00:43:10:da:ad:57:57:
18:07:53:89:81:8b:47:13:f6:91:3e:a7:ac:e1:c5:7f:ed:f1:
e2:1c:73:dc:ac:0b:1e:18:3a:06:bb:ac:c2:5c:6e:69:cb:20:
6e:a9:83:c5:b8:8a:2d:76:39:be:01:3b:8c:7f:e4:b8:68:71:
97:01:86:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uo/jOEUmRlDW/ZUnigX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWMwMTBlOTUwMTVjMjEyMzY0MWQzMzEyMGE3ZTljOTAw
ODAwMmQwHhcNMjYwMzI5MDIwMDUwWhcNMjYwMzMwMDIwMDUwWjAzMTEwLwYDVQQD
Eyg1NmRkNGVjNjg5ZjI0MmY2Yjg3NDE5YmE4NGJkZjVkYWFiMWYzMjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorsY7E7uAMI2tzzj1/3V2Gbj0lau
XmGSgeZ/Ff/OsWt5xX1JBt5IYQCrhr8SJPKnkL1ogpsLGE6HNqjVnLn8AvC7uzU7
C/f6P9pLgvlsxkoE3PJmJloxqd3dU4aJIxFasQ7NonXYd4pOhk3EraQm1LzGxL7c
jqZ5mrC01gR2bhOX/GPsuLe/+Jmi9iqGkUP9BdI6hVoWaJ5jMNwtSrbhtqIT9PXp
O3/L+gAsiCAGp6hQo+gylRwiNjY/3LHnPOXGN7FGjA50IH4TpGlFs5OaVq0mqk04
DcoHf3e1XDIWcZRsdW/Nm88t0ATJw2vDT7R7UBrar2b5XOpkH+9S2sjXbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbdTsaJ8kL2uHQZuoS99dqrHzJpMB8GA1UdIwQY
MBaAFOMcAQ6VAVwhI2QdMxIKfpyQCAAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80ODM4MDYtMDQ1ZC00ODU2LWI1Mjkt
YjQ3ZTc0ZWQ0ZTdlLzEvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80ODM4MDYtMDQ1ZC00ODU2LWI1MjktYjQ3ZTc0ZWQ0ZTdl
LzEvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbm6M6/RU
CqeI2KvohfigqlFKCmpNb2FN55VpbdARPMIHbcE4tBolWpHg9Zcg9K72dxfE+J3P
PzDUS9xJ2JQtFRYDlt7xOGiAB3hHj6m+U9tDOttJ0G03Alj9Fn64etzWIyGjnTge
EC3Z3M3+cbeR10Jn6Vl+w0F7tP3k3kIJ3zgo9+i0u4fxk9EwJzx8M9AeoKHSFDm5
F3WzxuPv+9vtm7a6JWHgfQIy9NqaReVniQS9G9+IhyNbORoJY1Y/xFgAQxDarVdX
GAdTiYGLRxP2kT6nrOHFf+3x4hxz3KwLHhg6BruswlxuacsgbqmDxbiKLXY5vgE7
jH/kuGhxlwGGCg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:37 2026 by rpki-client