Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json)
Hash identifier: iV6xzEmIGdj0O2dqMeU9KBoExSRiGbJgcL19s/mGXPA=
Subject key identifier: 4B:F4:4B:85:DB:B0:FB:45:40:05:6C:FD:FF:95:FE:0C:E7:40:FC:44
Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Certificate serial: 019D39AEC75882DAFEE386AA4FDBA0A59BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
Manifest number: 04C4
Signing time: Sun 29 Mar 2026 13:00:48 +0000
Manifest this update: Sun 29 Mar 2026 13:00:48 +0000
Manifest next update: Mon 30 Mar 2026 13:00:48 +0000
Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: MaZ7R47hxuMbyqkh6Utu4MO95X2NogEuCrbDql0x9oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c7:58:82:da:fe:e3:86:aa:4f:db:a0:a5:9b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Validity
Not Before: Mar 29 13:00:48 2026 GMT
Not After : Mar 30 13:00:48 2026 GMT
Subject: CN=4bf44b85dbb0fb4540056cfdff95fe0ce740fc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:9b:3c:c7:bf:bf:e9:00:97:4a:a5:5d:90:
79:9f:1f:11:68:d9:0a:77:9a:c4:80:20:18:a0:68:
49:52:e2:ac:06:ff:02:43:c9:6f:93:79:03:61:e9:
f9:ce:02:e5:7c:08:0e:32:02:ce:42:c6:b5:aa:ea:
e9:2f:e0:e9:16:37:c1:56:91:95:88:60:9d:38:e5:
a4:6f:30:f6:3f:93:68:12:d9:29:bb:5b:f5:af:0d:
76:24:11:d7:48:47:96:a9:59:80:56:34:36:dd:07:
e3:a6:dc:7a:e0:00:84:2b:8c:e1:38:75:62:2e:f1:
df:61:18:c7:42:91:9f:fb:72:04:7b:44:2d:e3:f8:
87:c6:b7:47:54:f4:31:85:34:36:88:90:e8:38:eb:
76:1d:03:f1:2b:4f:74:aa:b5:b3:24:a4:da:b7:fb:
50:d3:df:50:21:f0:2e:93:da:e6:58:89:f7:a7:50:
d2:68:7b:cb:d0:80:fc:ae:35:02:d6:29:20:69:b5:
a8:44:c8:72:1d:73:3e:1b:86:c1:5d:ca:a9:64:0e:
fb:e9:69:c3:65:e0:6b:42:ce:6c:0f:63:65:32:ad:
8e:54:75:2a:87:32:96:d7:33:d4:71:69:79:f2:74:
a8:de:c2:d2:ee:b9:af:01:9f:aa:cc:a9:43:d2:8e:
cd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F4:4B:85:DB:B0:FB:45:40:05:6C:FD:FF:95:FE:0C:E7:40:FC:44
X509v3 Authority Key Identifier:
keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9f:ac:18:a5:bb:72:f9:f6:02:13:ae:85:c7:97:fc:f0:6e:
3f:44:11:58:c2:b3:5a:d7:4c:62:b1:b9:13:a9:95:5c:18:90:
e1:07:cb:c0:25:46:e2:32:7a:e2:5e:ca:43:5b:c8:69:34:57:
7f:6a:c6:31:cd:15:8c:3a:47:e8:a5:37:f4:5e:ab:ff:aa:27:
dd:c5:71:f8:35:4b:56:14:a1:b3:4b:6e:20:40:06:d0:41:92:
ab:21:48:38:b4:c9:54:f0:7b:ad:7f:03:05:ab:50:6a:33:47:
9a:72:8d:46:5a:77:a4:ec:aa:f6:af:18:47:3b:ce:ea:4f:cd:
14:b4:04:9d:21:fa:d1:4d:56:e6:0d:89:83:9b:03:0e:b9:75:
63:ea:16:2d:a5:67:81:33:dd:46:d1:bd:eb:c2:57:aa:9c:db:
f0:c2:72:b5:6b:8f:da:e5:89:c0:02:5d:2e:c9:b9:57:b5:e6:
b9:79:ec:c3:58:31:cd:3b:67:5b:f7:cc:a1:ea:05:6b:1c:a0:
f5:2c:57:61:e0:ca:cb:ef:79:48:ac:39:64:c7:50:c5:0a:5c:
43:0f:ac:3b:9b:78:3e:36:4f:06:c7:a4:a0:96:73:e7:33:69:
72:05:d6:aa:46:de:6f:82:7b:94:32:0a:57:92:e0:d7:01:2a:
d6:a0:59:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rsdYgtr+44aqT9ugpZv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ODc3MTI1ODU5NDdkYzU1MTlhYTg2ZTBiZDFmNDM1ZGY1
MmI1ZWUwHhcNMjYwMzI5MTMwMDQ4WhcNMjYwMzMwMTMwMDQ4WjAzMTEwLwYDVQQD
Eyg0YmY0NGI4NWRiYjBmYjQ1NDAwNTZjZmRmZjk1ZmUwY2U3NDBmYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBabPMe/v+kAl0qlXZB5nx8RaNkK
d5rEgCAYoGhJUuKsBv8CQ8lvk3kDYen5zgLlfAgOMgLOQsa1qurpL+DpFjfBVpGV
iGCdOOWkbzD2P5NoEtkpu1v1rw12JBHXSEeWqVmAVjQ23Qfjptx64ACEK4zhOHVi
LvHfYRjHQpGf+3IEe0Qt4/iHxrdHVPQxhTQ2iJDoOOt2HQPxK090qrWzJKTat/tQ
099QIfAuk9rmWIn3p1DSaHvL0ID8rjUC1ikgabWoRMhyHXM+G4bBXcqpZA776WnD
ZeBrQs5sD2NlMq2OVHUqhzKW1zPUcWl58nSo3sLS7rmvAZ+qzKlD0o7NeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEv0S4XbsPtFQAVs/f+V/gznQPxEMB8GA1UdIwQY
MBaAFPWHcSWFlH3FUZqobgvR9DXfUrXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC84YTE1MzgtNDgwMy00ZDcwLTljMmEt
N2RjN2U2ZjkyZWQ0LzEvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC84YTE1MzgtNDgwMy00ZDcwLTljMmEtN2RjN2U2ZjkyZWQ0
LzEvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp+sGKW7
cvn2AhOuhceX/PBuP0QRWMKzWtdMYrG5E6mVXBiQ4QfLwCVG4jJ64l7KQ1vIaTRX
f2rGMc0VjDpH6KU39F6r/6on3cVx+DVLVhShs0tuIEAG0EGSqyFIOLTJVPB7rX8D
BatQajNHmnKNRlp3pOyq9q8YRzvO6k/NFLQEnSH60U1W5g2Jg5sDDrl1Y+oWLaVn
gTPdRtG968JXqpzb8MJytWuP2uWJwAJdLsm5V7XmuXnsw1gxzTtnW/fMoeoFaxyg
9SxXYeDKy+95SKw5ZMdQxQpcQw+sO5t4PjZPBsekoJZz5zNpcgXWqkbeb4J7lDIK
V5Lg1wEq1qBZ4g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:17 2026 by rpki-client