Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: olcQXdyF2SSwllwlGzgNIOL+8bCMNiPb6sITV3yNtuU=
Subject key identifier: DD:9D:EF:CB:71:C6:50:84:C8:AB:3A:8D:BF:58:7D:CF:16:5F:78:E0
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 019CF3BAEAF0FF4EBC3B1F1606AEC5EFBE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 186E
Signing time: Sun 15 Mar 2026 23:00:39 +0000
Manifest this update: Sun 15 Mar 2026 23:00:39 +0000
Manifest next update: Mon 16 Mar 2026 23:00:39 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: ItCUvqGrXRlxsIes0gZhBWz0xPoYMXosmlYmlomOVWE=)
2: BfP2bGOW8HthUfuXXggXfcuAbvE.roa (hash: dmLHFskk9KIm4+573JvglcI2K8WR/PAM7m+/RW2L1vs=)
3: Gqd_X9Cp3EkyhF_XljM8cJVBjSo.asa (hash: J5j3yc/QFcGihvZazzwI8F9VHttAgOTYUiy+DL6NbuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:ba:ea:f0:ff:4e:bc:3b:1f:16:06:ae:c5:ef:be:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: Mar 15 23:00:39 2026 GMT
Not After : Mar 16 23:00:39 2026 GMT
Subject: CN=dd9defcb71c65084c8ab3a8dbf587dcf165f78e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:03:2d:d8:af:bb:2f:87:8e:24:a8:83:54:ad:
b9:56:5e:77:1f:ee:74:12:51:32:f2:51:5c:fb:d3:
d1:d3:b9:08:78:1a:14:5a:22:60:f3:2c:e1:a8:68:
ca:19:d1:00:1d:22:d0:c1:39:61:28:0e:09:bf:d2:
8d:81:26:e5:7a:31:a6:22:48:e9:1f:75:99:08:db:
4a:95:e3:ce:7b:a4:a6:9b:14:dd:9b:06:14:20:a0:
b3:00:29:51:e9:a8:fb:79:ee:34:fa:0b:45:3b:bf:
e2:8a:67:05:20:25:59:be:79:88:d6:17:ed:9d:d2:
62:3d:5b:fa:fe:f9:85:2e:27:50:f0:e3:6c:30:36:
e1:fe:d7:1c:5a:53:0c:78:61:1e:49:8c:29:68:60:
e0:3d:ac:d0:b2:f0:02:97:4a:db:a3:30:00:a4:c7:
97:a0:6e:1d:69:df:2c:eb:83:41:9e:30:3c:b2:e1:
d0:5d:b4:23:fe:1a:50:4a:8e:bc:09:2c:a9:16:7a:
c5:08:56:4d:ab:b1:1d:8c:61:bb:3c:6e:49:ce:ca:
8f:86:66:b2:ec:53:20:e0:3b:f4:76:38:17:f2:31:
6a:d3:a5:af:b5:2e:67:04:a7:ec:50:1d:17:6e:b8:
4b:d9:7a:e0:49:1e:f1:fd:b7:9c:6b:c6:c8:2e:7d:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9D:EF:CB:71:C6:50:84:C8:AB:3A:8D:BF:58:7D:CF:16:5F:78:E0
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:53:d3:9d:39:d2:1b:44:66:29:41:31:3f:e5:21:4d:a0:68:
32:b6:dc:41:7b:91:19:5f:72:fc:a2:d3:f3:83:b2:38:5d:23:
fd:e0:7c:d0:13:8a:a0:42:09:49:50:51:4e:b3:4f:e3:73:1f:
c0:f7:11:35:e9:80:25:8c:6b:c4:f4:89:a5:d0:07:91:cc:81:
b9:82:e4:a7:13:ca:34:9f:f9:c2:76:aa:e3:18:c1:3e:4c:f4:
8c:3c:e8:8b:47:fe:03:51:f4:83:fa:62:eb:21:9e:5b:69:e8:
07:1f:50:53:00:c1:3d:d6:d0:4d:bb:38:9d:fe:af:ab:4b:2a:
87:17:4c:f4:ea:6b:cf:78:64:38:bf:da:ac:73:a1:29:c3:78:
e3:21:c4:ea:e1:a4:10:87:7e:f0:7a:9b:30:06:5e:68:ee:dc:
76:f3:28:a4:1a:ee:41:79:0d:2e:9d:fe:91:fe:49:a6:07:cb:
0b:90:78:15:02:59:c8:11:48:b3:a5:13:c4:40:18:82:a9:9f:
72:45:e2:b5:4f:86:0b:97:c8:1a:f7:dc:a7:c9:f5:be:63:28:
20:3b:35:c5:e4:de:db:7a:0d:94:19:68:ae:dd:98:f8:96:b1:
7f:3c:3a:a9:f9:86:93:9f:3a:c8:27:e8:45:38:26:61:84:ed:
c6:7d:7d:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzzuurw/068Ox8WBq7F775rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYTAwOGE4MGQ4ZmYyNjI2MjVlNjVmZTI1ODc2OTE1OGIy
OTk4ZjAwHhcNMjYwMzE1MjMwMDM5WhcNMjYwMzE2MjMwMDM5WjAzMTEwLwYDVQQD
EyhkZDlkZWZjYjcxYzY1MDg0YzhhYjNhOGRiZjU4N2RjZjE2NWY3OGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAMt2K+7L4eOJKiDVK25Vl53H+50
ElEy8lFc+9PR07kIeBoUWiJg8yzhqGjKGdEAHSLQwTlhKA4Jv9KNgSblejGmIkjp
H3WZCNtKlePOe6SmmxTdmwYUIKCzAClR6aj7ee40+gtFO7/iimcFICVZvnmI1hft
ndJiPVv6/vmFLidQ8ONsMDbh/tccWlMMeGEeSYwpaGDgPazQsvACl0rbozAApMeX
oG4dad8s64NBnjA8suHQXbQj/hpQSo68CSypFnrFCFZNq7EdjGG7PG5JzsqPhmay
7FMg4Dv0djgX8jFq06WvtS5nBKfsUB0XbrhL2XrgSR7x/beca8bILn3whwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2d78txxlCEyKs6jb9Yfc8WX3jgMB8GA1UdIwQY
MBaAFOCgCKgNj/JiYl5l/iWHaRWLKZjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wMzM4ZjMtMDgwMi00ZTViLTkyNDEt
NjBiZjcxOTM3MTA0LzEvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wMzM4ZjMtMDgwMi00ZTViLTkyNDEtNjBiZjcxOTM3MTA0
LzEvNEtBSXFBMlA4bUppWG1YLUpZZHBGWXNwbVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFPTnTnS
G0RmKUExP+UhTaBoMrbcQXuRGV9y/KLT84OyOF0j/eB80BOKoEIJSVBRTrNP43Mf
wPcRNemAJYxrxPSJpdAHkcyBuYLkpxPKNJ/5wnaq4xjBPkz0jDzoi0f+A1H0g/pi
6yGeW2noBx9QUwDBPdbQTbs4nf6vq0sqhxdM9Oprz3hkOL/arHOhKcN44yHE6uGk
EId+8HqbMAZeaO7cdvMopBruQXkNLp3+kf5JpgfLC5B4FQJZyBFIs6UTxEAYgqmf
ckXitU+GC5fIGvfcp8n1vmMoIDs1xeTe23oNlBlort2Y+Jaxfzw6qfmGk586yCfo
RTgmYYTtxn19Kw==
-----END CERTIFICATE-----
Generated at Mon Mar 16 08:15:04 2026 by rpki-client