Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
File: RRi4nH3OK17cBVgVFs_BnXoxdOg.mft (raw, json)
Hash identifier: jIyDQOIVUpbObBNwNSsgfHZy/sPg2izOsO3AfZ7vtGE=
Subject key identifier: 12:D3:BB:C7:8B:15:31:9C:1D:1F:3E:ED:4C:11:87:1C:12:7A:F6:E6
Authority key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
Certificate issuer: /CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Certificate serial: 019D38D30EABE329BB0446488AD088B24D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
Manifest number: 16B4
Signing time: Sun 29 Mar 2026 09:00:48 +0000
Manifest this update: Sun 29 Mar 2026 09:00:48 +0000
Manifest next update: Mon 30 Mar 2026 09:00:48 +0000
Files and hashes: 1: KNGzhIaCKCO7BqVAGRH0hS28bSE.roa (hash: p/4zAAWK0QGA2GZKTcppMHA4sXwzCSeZJaQW4PAVpBk=)
2: RRi4nH3OK17cBVgVFs_BnXoxdOg.crl (hash: EkX6NJj0cfD3fVUqi5AYvBJx57nztOOEB8GVL7mzuMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0e:ab:e3:29:bb:04:46:48:8a:d0:88:b2:4d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Validity
Not Before: Mar 29 09:00:48 2026 GMT
Not After : Mar 30 09:00:48 2026 GMT
Subject: CN=12d3bbc78b15319c1d1f3eed4c11871c127af6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b8:c1:c3:31:fa:6a:b1:3f:e6:5e:39:ab:5a:
6d:c7:da:83:42:3a:ec:db:3f:17:fe:13:82:96:99:
0e:d4:34:b6:5c:2f:bf:7c:25:4c:fb:d2:31:cb:70:
b9:54:fd:7c:a4:e0:42:92:9a:85:f6:ef:91:4c:20:
40:95:5b:a2:43:e9:cf:66:22:08:c4:c3:74:b1:25:
83:5e:a6:f4:39:ae:ba:48:01:43:3d:76:6d:d8:e5:
f4:87:f7:90:ed:b5:11:71:58:a0:3e:a3:65:84:0f:
78:08:82:81:de:c2:ad:d2:23:8f:e6:cb:d8:74:ab:
1e:89:e2:74:c2:3e:83:33:e0:be:5c:22:aa:3b:02:
60:14:97:1d:0e:d6:e2:7e:b9:a3:df:ee:29:a2:3f:
e8:9b:a4:8f:58:a7:5e:5c:91:db:1e:07:03:c4:59:
70:24:d2:f5:96:9d:6c:0b:9c:e7:04:9e:82:26:02:
74:49:42:84:d2:c9:a3:35:cf:59:e6:d4:c4:ae:66:
ba:2c:d8:a1:9c:d0:1f:64:33:75:e9:f1:6c:b5:b6:
02:5a:82:b8:ec:86:7f:d9:ef:f9:70:45:8e:d0:60:
c5:a7:6b:4c:b4:f9:30:47:13:58:74:a9:42:12:a3:
94:e5:4f:bb:bb:15:1e:d4:78:99:da:f0:93:ba:cd:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D3:BB:C7:8B:15:31:9C:1D:1F:3E:ED:4C:11:87:1C:12:7A:F6:E6
X509v3 Authority Key Identifier:
keyid:45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:97:b7:47:90:5e:07:4b:7e:f0:9c:22:33:85:a5:87:21:b1:
f2:c1:e4:4b:d0:4e:b7:7c:57:70:41:c5:26:9e:0d:97:8f:1f:
4f:00:e5:e2:da:54:f4:eb:7c:2d:dd:75:ab:fc:e5:69:54:8e:
61:77:d0:dd:a2:19:14:f6:00:07:8d:63:ca:42:3a:42:b3:85:
47:36:f0:55:93:98:27:75:ee:3c:cb:fa:99:67:ff:05:26:33:
9e:c3:fb:4e:e9:e8:a5:16:75:56:38:94:58:f5:12:2a:b6:8c:
6f:77:e4:ef:a5:d7:22:25:db:d6:9f:e4:9e:24:8b:68:43:d3:
c1:55:2b:1c:65:0d:7a:d1:d4:5c:d3:70:02:53:e7:f7:0b:98:
dc:24:51:5c:60:5d:67:c2:26:7b:35:b0:1a:84:3e:72:f6:53:
67:f4:d4:a5:70:b6:8f:c0:a2:b1:80:5f:38:de:3f:14:b2:99:
0d:29:da:54:4f:06:06:12:88:02:18:58:9c:9d:33:96:18:d6:
52:26:f6:35:84:96:dc:21:65:af:0b:45:92:51:1a:60:22:a0:
06:64:e5:02:da:fa:9d:c8:88:b2:23:9a:75:78:a0:df:21:f4:
b5:e1:ad:77:f1:8c:a6:51:49:3e:b3:e6:69:9c:dc:3b:a4:88:
ac:b5:f6:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040w6r4ym7BEZIitCIsk2aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MThiODljN2RjZTJiNWVkYzA1NTgxNTE2Y2ZjMTlkN2Ez
MTc0ZTgwHhcNMjYwMzI5MDkwMDQ4WhcNMjYwMzMwMDkwMDQ4WjAzMTEwLwYDVQQD
EygxMmQzYmJjNzhiMTUzMTljMWQxZjNlZWQ0YzExODcxYzEyN2FmNmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubjBwzH6arE/5l45q1ptx9qDQjrs
2z8X/hOClpkO1DS2XC+/fCVM+9Ixy3C5VP18pOBCkpqF9u+RTCBAlVuiQ+nPZiII
xMN0sSWDXqb0Oa66SAFDPXZt2OX0h/eQ7bURcVigPqNlhA94CIKB3sKt0iOP5svY
dKseieJ0wj6DM+C+XCKqOwJgFJcdDtbifrmj3+4poj/om6SPWKdeXJHbHgcDxFlw
JNL1lp1sC5znBJ6CJgJ0SUKE0smjNc9Z5tTErma6LNihnNAfZDN16fFstbYCWoK4
7IZ/2e/5cEWO0GDFp2tMtPkwRxNYdKlCEqOU5U+7uxUe1HiZ2vCTus3g3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLTu8eLFTGcHR8+7UwRhxwSevbmMB8GA1UdIwQY
MBaAFEUYuJx9zite3AVYFRbPwZ16MXToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jY2Y0NDQtYTIyYy00ZmNkLWJmMWEt
MGY5MzdjY2YwMmUwLzEvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jY2Y0NDQtYTIyYy00ZmNkLWJmMWEtMGY5MzdjY2YwMmUw
LzEvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJe3R5Be
B0t+8JwiM4WlhyGx8sHkS9BOt3xXcEHFJp4Nl48fTwDl4tpU9Ot8Ld11q/zlaVSO
YXfQ3aIZFPYAB41jykI6QrOFRzbwVZOYJ3XuPMv6mWf/BSYznsP7TunopRZ1VjiU
WPUSKraMb3fk76XXIiXb1p/kniSLaEPTwVUrHGUNetHUXNNwAlPn9wuY3CRRXGBd
Z8ImezWwGoQ+cvZTZ/TUpXC2j8CisYBfON4/FLKZDSnaVE8GBhKIAhhYnJ0zlhjW
Uib2NYSW3CFlrwtFklEaYCKgBmTlAtr6nciIsiOadXig3yH0teGtd/GMplFJPrPm
aZzcO6SIrLX2Aw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:49 2026 by rpki-client