Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File: 4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier: nm4EFELoFIgd/MmTaFYWuaPqgOWo691NJUztXgqIgzs=
Subject key identifier: 03:5D:F7:AC:21:41:CF:28:BC:98:7E:D0:8E:FE:D3:C6:9B:99:EA:42
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial: 019D39AEAC4E86BC02E3971ABB3DAEE03C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number: 1151
Signing time: Sun 29 Mar 2026 13:00:41 +0000
Manifest this update: Sun 29 Mar 2026 13:00:41 +0000
Manifest next update: Mon 30 Mar 2026 13:00:41 +0000
Files and hashes: 1: 1OjQOklemE1c2Ofd7sEbtV6WCLQ.roa (hash: p8zMORBp4EwLrEV0pwePL8HYOl4fQLM1ray936MhnIo=)
2: 3gKR0cK9QoxfvHnSIiqY4bcG8ww.roa (hash: ZcGaXU4YPznoibhlbyhjzKqhwZf4BJJECm4SI2hoD/U=)
3: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: kUBHlGVOr0LQ56yDDQpMIiG5YDMSXPEKtn1PH/gC8l4=)
4: 8tAmUasl9shJmzVr02QyR9gf1yg.roa (hash: 56dLPJcjlB89ljFKBrlBrzN9saKBJC9XHbbe4kgHJpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ac:4e:86:bc:02:e3:97:1a:bb:3d:ae:e0:3c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Validity
Not Before: Mar 29 13:00:41 2026 GMT
Not After : Mar 30 13:00:41 2026 GMT
Subject: CN=035df7ac2141cf28bc987ed08efed3c69b99ea42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:e6:3e:1a:26:1f:79:e9:05:93:55:ae:93:
0c:cb:2b:0f:fb:a1:3a:07:0b:60:b3:03:40:b6:79:
30:88:1a:bb:e4:d8:d9:5d:d5:d7:38:c4:76:7b:f6:
e5:b1:6c:9a:ba:5d:a0:db:6f:07:00:86:bd:09:54:
b4:4d:38:3b:ef:f0:dc:9e:45:68:d9:5a:f9:3d:af:
1f:90:c9:4f:c6:af:4e:2f:8d:96:ef:8e:70:86:65:
2b:13:68:e7:98:78:23:73:d6:a3:a1:0d:1d:42:69:
0a:84:a7:aa:a6:c0:49:25:91:e9:2e:be:8f:de:64:
68:ae:2a:74:06:ca:2d:c5:1b:89:8c:f3:f7:e5:09:
7b:81:09:a3:1b:f6:2b:86:8a:06:fe:26:73:de:c0:
1c:c5:57:ed:52:ef:4c:36:ec:81:84:14:ee:fe:30:
a7:57:4f:1a:e6:fd:aa:c5:7b:f4:7e:6b:26:80:10:
de:20:4e:62:ba:19:f6:17:63:98:8a:55:0c:bc:32:
9d:5f:e8:bc:60:d3:c2:1a:0d:c0:1b:5f:65:e8:a5:
83:1a:88:42:8c:f6:9d:f2:a3:0d:27:7f:be:69:98:
c0:f2:75:42:d0:e3:7d:35:6d:2e:8c:c3:fb:fd:ec:
8f:b8:de:55:99:ba:e0:c8:e8:cd:a3:71:f0:66:81:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5D:F7:AC:21:41:CF:28:BC:98:7E:D0:8E:FE:D3:C6:9B:99:EA:42
X509v3 Authority Key Identifier:
keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:03:9a:71:dd:37:b0:ef:ed:0b:5e:59:8a:ea:25:09:9c:b8:
49:97:56:a9:9d:ac:4e:f6:ee:5e:d7:d4:8c:b5:ed:c9:7e:75:
cc:7d:c9:3d:0b:e8:8f:89:6b:80:87:95:3a:d6:61:33:be:65:
63:58:da:26:14:ba:d1:64:28:d5:8c:76:8b:01:2a:87:07:e2:
2d:15:4d:23:16:63:87:a9:1d:0c:0b:0c:d6:5d:13:7c:f0:48:
3d:59:6b:20:c8:4e:6e:3d:e9:4f:0e:50:3f:5b:1c:eb:5b:77:
81:26:19:fc:44:cf:79:9e:19:a5:9c:6b:17:0f:fc:3b:0b:02:
a7:bf:f2:55:b2:d3:4b:88:52:a7:06:b0:65:df:7e:57:fa:7f:
87:ac:ca:11:b2:65:e7:79:bf:28:18:43:27:ab:48:1b:96:36:
25:bb:fd:f6:15:66:f1:2b:ac:69:bb:32:ac:6f:54:f1:52:71:
50:21:c2:75:e9:c2:ff:bd:80:dc:ac:78:d5:0a:47:13:41:49:
55:58:2d:58:a2:10:81:79:25:99:f7:38:b6:c5:d2:2d:32:22:
f1:ee:e0:03:f0:ba:9b:75:ee:47:7c:07:1c:41:73:a0:ac:40:
aa:b7:53:49:5b:2a:a4:99:7b:12:21:9d:52:53:b8:55:23:fd:
1e:d2:7b:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rqxOhrwC45cauz2u4DxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjkxZGJhZmEzYThkZTA3MGIwNzAyMmRlOWFkZjc0MzQx
ZmI0ZjIwHhcNMjYwMzI5MTMwMDQxWhcNMjYwMzMwMTMwMDQxWjAzMTEwLwYDVQQD
EygwMzVkZjdhYzIxNDFjZjI4YmM5ODdlZDA4ZWZlZDNjNjliOTllYTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgzmPhomH3npBZNVrpMMyysP+6E6
BwtgswNAtnkwiBq75NjZXdXXOMR2e/blsWyaul2g228HAIa9CVS0TTg77/DcnkVo
2Vr5Pa8fkMlPxq9OL42W745whmUrE2jnmHgjc9ajoQ0dQmkKhKeqpsBJJZHpLr6P
3mRorip0BsotxRuJjPP35Ql7gQmjG/YrhooG/iZz3sAcxVftUu9MNuyBhBTu/jCn
V08a5v2qxXv0fmsmgBDeIE5iuhn2F2OYilUMvDKdX+i8YNPCGg3AG19l6KWDGohC
jPad8qMNJ3++aZjA8nVC0ON9NW0ujMP7/eyPuN5VmbrgyOjNo3HwZoGjRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANd96whQc8ovJh+0I7+08abmepCMB8GA1UdIwQY
MBaAFOBpHbr6Oo3gcLBwIt6a33Q0H7TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQt
ZmQ0OWViM2YxOWIxLzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mNzVjN2QtZTViMy00NDJmLWEwODQtZmQ0OWViM2YxOWIx
LzEvNEdrZHV2bzZqZUJ3c0hBaTNwcmZkRFFmdFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAOacd03
sO/tC15ZiuolCZy4SZdWqZ2sTvbuXtfUjLXtyX51zH3JPQvoj4lrgIeVOtZhM75l
Y1jaJhS60WQo1Yx2iwEqhwfiLRVNIxZjh6kdDAsM1l0TfPBIPVlrIMhObj3pTw5Q
P1sc61t3gSYZ/ETPeZ4ZpZxrFw/8OwsCp7/yVbLTS4hSpwawZd9+V/p/h6zKEbJl
53m/KBhDJ6tIG5Y2Jbv99hVm8SusabsyrG9U8VJxUCHCdenC/72A3Kx41QpHE0FJ
VVgtWKIQgXklmfc4tsXSLTIi8e7gA/C6m3XuR3wHHEFzoKxAqrdTSVsqpJl7EiGd
UlO4VSP9HtJ7xA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:26:20 2026 by rpki-client