Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File: 4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier: PFt2MEIuednxcnluItYhxGouBwKfoo8PJr8a9UvJRXM=
Subject key identifier: D9:49:B1:EE:72:82:42:33:FD:94:61:47:BF:4D:99:53:F1:7A:E5:CD
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer: /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial: 019D39780253953772EDD7C258B8AC092C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number: 0C35
Signing time: Sun 29 Mar 2026 12:00:59 +0000
Manifest this update: Sun 29 Mar 2026 12:00:59 +0000
Manifest next update: Mon 30 Mar 2026 12:00:59 +0000
Files and hashes: 1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: 8sc0a/dYh1Tl18px87ox9n1URqML/jSrWAJT8wbVGSI=)
2: UWX8SxCjwL_qmxdOe6nySrZQC84.roa (hash: D5R5Nyowo4jjOW+4uW1uT9NqCdmsnMIgdkwB6H1oOfI=)
3: vAkRpmTvdjsWw_0AKaPQzFGQBZQ.roa (hash: 8oO/bPo+96+JLDumliudhdJVxtG8gpJVeHN/Dwo+7JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:02:53:95:37:72:ed:d7:c2:58:b8:ac:09:2c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Validity
Not Before: Mar 29 12:00:59 2026 GMT
Not After : Mar 30 12:00:59 2026 GMT
Subject: CN=d949b1ee72824233fd946147bf4d9953f17ae5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:41:5c:11:fa:d0:f1:e1:a5:c6:3b:71:f6:
f0:b4:fc:32:ac:d6:5b:3e:36:bf:47:a3:29:51:78:
4e:af:53:8c:49:83:db:e6:37:38:03:11:01:76:3e:
18:d1:f6:ba:69:b9:02:78:ac:c9:19:d8:cb:6a:43:
d2:5c:56:38:0d:ee:9d:8b:36:3d:1f:a8:fe:79:3a:
e9:c0:3f:4e:03:99:0d:a9:ea:61:c9:df:e3:44:44:
74:92:c2:d3:82:df:d6:39:09:fd:8e:c0:8f:b9:b8:
33:79:37:76:23:84:ce:95:51:b6:52:de:38:7a:41:
2c:37:ff:57:06:a1:3d:d3:cd:95:d8:8a:61:32:65:
0d:3d:db:8c:b3:37:fd:53:79:a3:d2:b6:25:99:b8:
f7:10:d0:fd:26:bd:80:16:54:4f:77:90:08:c9:cc:
7a:3e:b2:d2:67:32:03:72:3a:70:90:64:97:19:a5:
a5:f8:4a:69:04:0f:0e:b3:47:43:b5:ee:1b:2e:40:
d1:c4:a6:12:04:47:ca:43:1d:c9:0a:4f:1f:bf:66:
01:d2:fb:ef:a1:e9:94:87:cc:e1:08:dd:96:eb:f5:
69:67:30:33:7a:47:3e:19:21:0f:7e:92:c1:bb:63:
08:e5:13:5e:e1:5f:04:5f:4f:30:0b:b6:7f:2b:d3:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:49:B1:EE:72:82:42:33:FD:94:61:47:BF:4D:99:53:F1:7A:E5:CD
X509v3 Authority Key Identifier:
keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cb:11:8f:a5:52:04:c7:37:de:f7:7b:7b:8d:c9:d1:73:80:
fd:89:a7:f8:6c:71:db:71:28:70:08:d1:b9:4a:9f:82:e4:24:
b0:57:f6:e6:c2:71:1d:78:70:b1:10:16:43:5e:c2:db:26:0a:
de:2b:b4:69:fa:04:dd:59:7b:7f:91:a4:9b:11:3e:86:ea:bf:
45:bc:d0:89:61:6e:0a:ac:1d:63:0c:1f:3d:2f:9d:a0:6b:e1:
03:7b:34:a1:f6:23:02:e1:12:99:d3:93:68:be:a8:23:89:c5:
a2:35:dc:d8:05:b4:ea:2a:85:33:f7:db:72:62:e6:18:11:44:
40:b9:be:65:cd:23:27:24:80:60:fc:b2:86:5a:4d:99:21:f9:
db:74:21:29:8c:b3:9c:b8:25:e3:51:c8:65:90:b4:12:9c:0b:
38:3c:21:8c:9b:83:dc:ab:d1:c1:5e:23:ef:82:5c:fa:d7:39:
a8:de:d0:df:eb:50:37:9e:bf:4d:36:3f:3a:e7:1b:4e:82:a1:
37:82:dc:f6:8c:bb:34:7b:7e:ec:6f:98:6e:c7:b2:50:9e:27:
6d:29:46:9a:75:33:e6:f8:d0:07:28:cc:cd:ac:2d:60:b5:cd:
ee:0f:a7:91:69:df:82:cf:9a:98:8c:23:aa:db:5f:18:d4:6a:
86:62:e5:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eAJTlTdy7dfCWLisCSxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTRjZmU0N2FlZDUxZWM3MWFhNzVmNTM2MTg5YmFkNmU4
NjJkZWIwHhcNMjYwMzI5MTIwMDU5WhcNMjYwMzMwMTIwMDU5WjAzMTEwLwYDVQQD
EyhkOTQ5YjFlZTcyODI0MjMzZmQ5NDYxNDdiZjRkOTk1M2YxN2FlNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQRBXBH60PHhpcY7cfbwtPwyrNZb
Pja/R6MpUXhOr1OMSYPb5jc4AxEBdj4Y0fa6abkCeKzJGdjLakPSXFY4De6dizY9
H6j+eTrpwD9OA5kNqephyd/jRER0ksLTgt/WOQn9jsCPubgzeTd2I4TOlVG2Ut44
ekEsN/9XBqE9082V2IphMmUNPduMszf9U3mj0rYlmbj3END9Jr2AFlRPd5AIycx6
PrLSZzIDcjpwkGSXGaWl+EppBA8Os0dDte4bLkDRxKYSBEfKQx3JCk8fv2YB0vvv
oemUh8zhCN2W6/VpZzAzekc+GSEPfpLBu2MI5RNe4V8EX08wC7Z/K9N2JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlJse5ygkIz/ZRhR79NmVPxeuXNMB8GA1UdIwQY
MBaAFOLkz+R67VHscap19TYYm61uhi3rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVUUDVIcnRVZXh4cW5YMU5oaWJyVzZHTGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9lNGNjYmItZmQ2MS00ZmM0LWFhYmQt
YTE4ODNjOGIxZmU0LzEvNHVUUDVIcnRVZXh4cW5YMU5oaWJyVzZHTGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9lNGNjYmItZmQ2MS00ZmM0LWFhYmQtYTE4ODNjOGIxZmU0
LzEvNHVUUDVIcnRVZXh4cW5YMU5oaWJyVzZHTGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMsRj6VS
BMc33vd7e43J0XOA/Ymn+Gxx23EocAjRuUqfguQksFf25sJxHXhwsRAWQ17C2yYK
3iu0afoE3Vl7f5GkmxE+huq/RbzQiWFuCqwdYwwfPS+doGvhA3s0ofYjAuESmdOT
aL6oI4nFojXc2AW06iqFM/fbcmLmGBFEQLm+Zc0jJySAYPyyhlpNmSH523QhKYyz
nLgl41HIZZC0EpwLODwhjJuD3KvRwV4j74Jc+tc5qN7Q3+tQN56/TTY/OucbToKh
N4Lc9oy7NHt+7G+YbseyUJ4nbSlGmnUz5vjQByjMzawtYLXN7g+nkWnfgs+amIwj
qttfGNRqhmLlUA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:23:52 2026 by rpki-client