Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
File: m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json)
Hash identifier: Pa5/AqtJ/C7KBHjGUjWUKbER5SpygDpkeWMy59FCBqI=
Subject key identifier: 3D:3B:20:57:69:52:2E:F6:1A:9E:67:F7:48:C2:CF:7C:ED:83:25:72
Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Certificate issuer: /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Certificate serial: 019D3752453CEF69A29A9BC1D54C4B075441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
Manifest number: 0AF4
Signing time: Sun 29 Mar 2026 02:00:31 +0000
Manifest this update: Sun 29 Mar 2026 02:00:31 +0000
Manifest next update: Mon 30 Mar 2026 02:00:31 +0000
Files and hashes: 1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: 0UQRbGZIwAS+CfyAk5bUDP/UXInQsVznp9MbsQYRqXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:45:3c:ef:69:a2:9a:9b:c1:d5:4c:4b:07:54:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Validity
Not Before: Mar 29 02:00:31 2026 GMT
Not After : Mar 30 02:00:31 2026 GMT
Subject: CN=3d3b205769522ef61a9e67f748c2cf7ced832572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:b1:4d:41:6c:86:7a:3f:75:f6:05:ca:d5:
19:1d:bf:20:b1:88:46:dd:f1:95:26:ba:26:e5:e4:
a6:27:b8:06:5c:9b:1d:06:7e:73:ba:40:38:8e:a7:
b0:df:4b:93:1e:d1:66:6e:53:0a:c8:d1:67:ab:58:
e7:e4:2a:32:31:67:3a:ce:f7:ae:cc:64:4f:df:61:
88:4e:08:5c:80:da:db:db:9b:ee:8e:77:09:44:db:
a6:38:6f:ea:e5:26:7c:42:f6:e1:21:5f:32:1e:3c:
2c:a7:a0:a9:f8:f4:24:6d:12:35:9c:2e:d6:fd:b0:
08:8a:c3:de:7c:a6:b7:6d:36:32:df:dc:78:d7:13:
a5:47:9e:18:d9:90:04:d0:47:7e:d8:02:ee:e8:5c:
ed:f3:aa:5a:55:9a:fc:7d:68:41:a7:b6:f9:23:a1:
a6:84:89:97:64:d1:6c:bf:c7:6c:1a:e1:ce:07:c0:
29:a4:62:03:44:ce:35:0f:d6:2f:db:fd:54:cf:80:
91:05:19:05:88:a8:d8:1e:2f:c6:e0:a5:6a:06:41:
6d:83:f3:03:6a:77:56:ea:e5:60:fe:88:9a:2b:7b:
1b:94:d7:9d:d4:fa:9d:bc:b1:03:d2:6a:1e:84:44:
bb:40:77:9d:73:80:52:51:c7:74:23:25:8e:5b:80:
6e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3B:20:57:69:52:2E:F6:1A:9E:67:F7:48:C2:CF:7C:ED:83:25:72
X509v3 Authority Key Identifier:
keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:93:61:b8:ff:91:7d:82:e3:ea:d5:b2:3a:d9:69:3f:c1:36:
68:80:71:6e:a9:e5:a7:d3:ab:1a:bf:1e:3a:9a:3a:19:2b:b2:
3c:4d:90:e3:e5:01:ed:79:45:12:32:c8:67:96:f0:68:6b:f1:
d8:b2:e9:8c:69:26:ef:2e:b4:ec:bd:e0:c1:fd:38:22:cb:63:
88:a4:38:97:40:16:48:e3:c2:77:85:14:a5:37:df:a3:73:97:
8c:99:23:1a:54:50:bd:93:7d:3a:d1:e2:23:ec:95:51:6f:cc:
39:74:73:72:c4:d6:25:76:f7:40:18:c2:66:9e:54:1c:8d:08:
d0:3f:21:4b:8e:3a:4e:02:9c:11:e9:3e:ad:0a:cb:35:d0:17:
38:86:b9:c5:7e:26:56:19:fe:ad:71:9f:2c:29:57:ce:af:b1:
3e:8e:cd:af:ed:6d:b7:37:5c:3a:3a:68:4d:e1:8e:f4:d9:5d:
84:f3:69:76:f1:62:96:c6:1d:9f:a3:38:08:b5:16:b5:6b:fc:
34:c3:2f:f8:06:db:ff:a1:3a:45:6c:72:11:0b:22:a2:d4:8b:
bb:f1:ba:2b:be:36:f2:5d:a8:7a:ee:7b:ae:cd:08:9f:68:c4:
a8:b9:57:de:31:2c:47:5e:48:92:be:6f:74:7b:cc:25:c8:27:
ef:ff:a0:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UkU872mimpvB1UxLB1RBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZTdmODkyMmFiODQ2YTI5ODE5ZWE4MjRiYjFjNjFiMDZl
MzEzYjAwHhcNMjYwMzI5MDIwMDMxWhcNMjYwMzMwMDIwMDMxWjAzMTEwLwYDVQQD
EygzZDNiMjA1NzY5NTIyZWY2MWE5ZTY3Zjc0OGMyY2Y3Y2VkODMyNTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yixTUFshno/dfYFytUZHb8gsYhG
3fGVJrom5eSmJ7gGXJsdBn5zukA4jqew30uTHtFmblMKyNFnq1jn5CoyMWc6zveu
zGRP32GITghcgNrb25vujncJRNumOG/q5SZ8QvbhIV8yHjwsp6Cp+PQkbRI1nC7W
/bAIisPefKa3bTYy39x41xOlR54Y2ZAE0Ed+2ALu6Fzt86paVZr8fWhBp7b5I6Gm
hImXZNFsv8dsGuHOB8AppGIDRM41D9Yv2/1Uz4CRBRkFiKjYHi/G4KVqBkFtg/MD
andW6uVg/oiaK3sblNed1PqdvLED0moehES7QHedc4BSUcd0IyWOW4BuSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD07IFdpUi72Gp5n90jCz3ztgyVyMB8GA1UdIwQY
MBaAFJvn+JIquEaimBnqgkuxxhsG4xOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80M2I3M2YtYTBjNS00YTJkLTk0Y2Qt
YjUzOTY3YTJjOTM4LzEvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy80M2I3M2YtYTBjNS00YTJkLTk0Y2QtYjUzOTY3YTJjOTM4
LzEvbS1mNGtpcTRScUtZR2VxQ1M3SEdHd2JqRTdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZNhuP+R
fYLj6tWyOtlpP8E2aIBxbqnlp9OrGr8eOpo6GSuyPE2Q4+UB7XlFEjLIZ5bwaGvx
2LLpjGkm7y607L3gwf04IstjiKQ4l0AWSOPCd4UUpTffo3OXjJkjGlRQvZN9OtHi
I+yVUW/MOXRzcsTWJXb3QBjCZp5UHI0I0D8hS446TgKcEek+rQrLNdAXOIa5xX4m
Vhn+rXGfLClXzq+xPo7Nr+1ttzdcOjpoTeGO9NldhPNpdvFilsYdn6M4CLUWtWv8
NMMv+Abb/6E6RWxyEQsiotSLu/G6K7428l2oeu57rs0In2jEqLlX3jEsR15Ikr5v
dHvMJcgn7/+g/g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:52 2026 by rpki-client