Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
File: 4BtODyogHPQwBI4kgWSzLt30Pa4.mft (raw, json)
Hash identifier: qhe1VtuaXkPDryyoq+IIi/fQezo7wdwB36+T1QbwaVg=
Subject key identifier: 08:B7:64:95:5E:2C:3E:36:14:13:4E:4F:57:5C:E4:5D:EA:BF:31:6C
Authority key identifier: E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE
Certificate issuer: /CN=e01b4e0f2a201cf430048e248164b32eddf43dae
Certificate serial: 019D389BBF6B45969E98E7B8F2E5EBE44DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
Manifest number: 0334
Signing time: Sun 29 Mar 2026 08:00:24 +0000
Manifest this update: Sun 29 Mar 2026 08:00:24 +0000
Manifest next update: Mon 30 Mar 2026 08:00:24 +0000
Files and hashes: 1: 4BtODyogHPQwBI4kgWSzLt30Pa4.crl (hash: mhIP6wGb8404u5a0ixjJc09plzqzzfuigZeMEt0OLGE=)
2: bvn9xrtj8WOl66unrLqZtL1bs_8.roa (hash: /pqD3nrcEleiPqOHk8dm0+W2Klr4HRio578jwUq+GZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bf:6b:45:96:9e:98:e7:b8:f2:e5:eb:e4:4d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01b4e0f2a201cf430048e248164b32eddf43dae
Validity
Not Before: Mar 29 08:00:24 2026 GMT
Not After : Mar 30 08:00:24 2026 GMT
Subject: CN=08b764955e2c3e3614134e4f575ce45deabf316c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:24:13:a6:0f:38:b3:ac:93:98:83:7e:2f:
d8:80:39:de:67:8a:e0:39:33:62:05:c0:69:76:42:
b6:88:50:21:70:61:be:ff:9b:ba:63:01:47:9b:c7:
12:b7:7c:df:94:84:42:fd:39:a1:ea:18:21:e2:47:
de:18:c2:93:75:d0:25:bb:c9:2a:ba:43:2f:ae:71:
a8:d3:d0:16:8e:b6:f2:65:1e:ce:49:95:c6:df:29:
d4:5b:90:88:11:77:9b:cc:3c:4f:b5:d5:8b:1c:9b:
bf:5e:d5:4a:34:d6:9e:be:87:0d:ed:9b:5f:73:73:
4c:c2:59:47:48:5d:50:7d:1b:ad:07:7b:64:ab:36:
13:0d:d2:ff:bd:66:5e:bb:a1:83:77:c3:13:0c:1c:
f3:83:e3:c1:a3:a4:08:d4:c9:d9:cd:19:12:29:26:
5b:e8:52:6b:84:b1:e9:86:78:3d:51:ec:9d:7c:17:
52:43:63:ca:23:6c:12:58:12:dc:c7:47:1e:d1:cd:
cc:7a:01:91:9f:50:e7:7d:72:1f:9d:be:06:bf:fb:
0b:8a:75:09:3e:0d:f0:f9:2f:35:85:b8:3e:52:0c:
de:97:76:a1:38:24:70:90:ce:c1:9f:e7:29:f4:7b:
59:58:d5:06:52:79:fd:b0:18:07:8a:01:72:a0:eb:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B7:64:95:5E:2C:3E:36:14:13:4E:4F:57:5C:E4:5D:EA:BF:31:6C
X509v3 Authority Key Identifier:
keyid:E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ed:55:ac:9f:7d:81:21:07:e4:73:92:b2:2f:b4:a6:80:9a:
4e:e1:d3:57:aa:f0:56:66:72:3c:b9:b7:51:7d:63:d8:cd:1c:
7f:fe:67:6b:4f:7a:1c:df:e8:e5:2e:a9:2a:23:ea:8e:c8:e8:
aa:72:0a:2f:d8:50:f0:83:fe:dc:0f:41:9f:ad:db:28:53:5a:
47:a7:b2:49:e6:46:23:b9:b7:0c:e2:dc:51:50:aa:86:fa:27:
eb:33:99:9c:06:f0:45:00:bd:77:7d:9e:c0:8b:26:3b:9f:78:
27:25:58:0d:10:c6:13:d3:79:6e:9d:e0:d4:bd:a6:ac:65:03:
3e:08:d3:0d:14:c5:92:28:ee:f2:1e:88:5e:5b:3d:66:7f:f7:
bf:0e:9c:9d:1d:1c:3a:b7:ea:32:88:bf:cf:08:f6:8c:4d:55:
07:8d:03:bc:5a:e7:cc:f0:94:eb:39:91:d1:d9:02:f7:4c:d5:
9a:5e:cc:75:13:9f:0f:8e:ca:b9:7c:f4:a2:26:63:be:3d:37:
58:ae:49:8a:5b:9b:26:67:cd:bc:2d:ad:94:e9:30:a8:33:3a:
82:ed:1e:9f:c7:11:13:e1:9c:4b:18:f8:d2:4f:4a:d8:cd:31:
d0:17:53:2a:ae:6b:e6:b8:2a:45:17:23:f0:e0:88:a4:64:b3:
2a:60:b0:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m79rRZaemOe48uXr5E3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMWI0ZTBmMmEyMDFjZjQzMDA0OGUyNDgxNjRiMzJlZGRm
NDNkYWUwHhcNMjYwMzI5MDgwMDI0WhcNMjYwMzMwMDgwMDI0WjAzMTEwLwYDVQQD
EygwOGI3NjQ5NTVlMmMzZTM2MTQxMzRlNGY1NzVjZTQ1ZGVhYmYzMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1wkE6YPOLOsk5iDfi/YgDneZ4rg
OTNiBcBpdkK2iFAhcGG+/5u6YwFHm8cSt3zflIRC/Tmh6hgh4kfeGMKTddAlu8kq
ukMvrnGo09AWjrbyZR7OSZXG3ynUW5CIEXebzDxPtdWLHJu/XtVKNNaevocN7Ztf
c3NMwllHSF1QfRutB3tkqzYTDdL/vWZeu6GDd8MTDBzzg+PBo6QI1MnZzRkSKSZb
6FJrhLHphng9UeydfBdSQ2PKI2wSWBLcx0ce0c3MegGRn1DnfXIfnb4Gv/sLinUJ
Pg3w+S81hbg+Ugzel3ahOCRwkM7Bn+cp9HtZWNUGUnn9sBgHigFyoOvS8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAi3ZJVeLD42FBNOT1dc5F3qvzFsMB8GA1UdIwQY
MBaAFOAbTg8qIBz0MASOJIFksy7d9D2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJ0T0R5b2dIUFF3Qkk0a2dXU3pMdDMwUGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYzJjY2MtOGNiZC00YmVmLTk0MWQt
YzYxNWY5OTEwZmZjLzEvNEJ0T0R5b2dIUFF3Qkk0a2dXU3pMdDMwUGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lYzJjY2MtOGNiZC00YmVmLTk0MWQtYzYxNWY5OTEwZmZj
LzEvNEJ0T0R5b2dIUFF3Qkk0a2dXU3pMdDMwUGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+1VrJ99
gSEH5HOSsi+0poCaTuHTV6rwVmZyPLm3UX1j2M0cf/5na096HN/o5S6pKiPqjsjo
qnIKL9hQ8IP+3A9Bn63bKFNaR6eySeZGI7m3DOLcUVCqhvon6zOZnAbwRQC9d32e
wIsmO594JyVYDRDGE9N5bp3g1L2mrGUDPgjTDRTFkiju8h6IXls9Zn/3vw6cnR0c
OrfqMoi/zwj2jE1VB40DvFrnzPCU6zmR0dkC90zVml7MdROfD47KuXz0oiZjvj03
WK5JilubJmfNvC2tlOkwqDM6gu0en8cRE+GcSxj40k9K2M0x0BdTKq5r5rgqRRcj
8OCIpGSzKmCwJA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:44 2026 by rpki-client