Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier: T0FOSW974pbX7q6au3lbM5w3xlu7vQIkkJ0iCDDEmuE=
Subject key identifier: CD:DE:81:D9:31:63:A8:60:A9:8A:8A:95:06:49:62:97:69:5A:1E:FC
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial: 019D1FB8D4E35B712BC6E3657A212BD31309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number: 1703
Signing time: Tue 24 Mar 2026 12:01:39 +0000
Manifest this update: Tue 24 Mar 2026 12:01:39 +0000
Manifest next update: Wed 25 Mar 2026 12:01:39 +0000
Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: cgr1yZgLge3gHDUA9OfjYaxOWvuWlWEHVhrB1571S4g=)
2: wxMlSMWtQ0ndBMMV3tfXfzI4pMo.roa (hash: Cum4Di2WX2Vf5OYvq7GxldvC9jsMY0qM5fo7QBzndMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 12:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:b8:d4:e3:5b:71:2b:c6:e3:65:7a:21:2b:d3:13:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Validity
Not Before: Mar 24 12:01:39 2026 GMT
Not After : Mar 25 12:01:39 2026 GMT
Subject: CN=cdde81d93163a860a98a8a9506496297695a1efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3e:f6:b1:a0:0e:96:5e:1a:72:17:19:dc:b2:
97:8c:38:49:b0:8c:1c:4a:28:4f:ec:e2:68:4d:a9:
0c:8d:d3:a8:59:ad:e8:67:d0:c2:5a:70:35:30:b6:
e5:30:c4:25:97:28:a2:31:5d:d4:22:ff:b2:f3:9c:
8c:fd:0f:58:35:1a:f6:0c:44:df:de:e2:a0:d9:fc:
97:b9:15:84:73:09:23:57:ca:a2:42:f3:a2:97:b2:
45:ff:5c:61:44:5f:6d:b1:b2:e8:a0:0a:ff:dc:a1:
5d:ba:a3:44:8a:e9:bd:44:c3:00:ac:6d:91:87:84:
c3:0f:1f:49:9b:e3:39:e9:1f:e7:eb:1b:d3:4b:c3:
23:15:ba:1d:1a:74:ad:69:3e:ce:2e:c9:9c:1a:eb:
ab:87:a4:32:9b:10:36:02:2b:0f:0a:d3:2f:a2:7a:
db:ed:45:cf:87:86:33:42:ce:ad:c5:8e:be:eb:bb:
2f:d8:5c:bf:c7:eb:22:da:a1:8b:5d:1a:b4:3e:f6:
1c:b0:21:75:7d:c5:19:57:8d:1a:9a:e8:84:58:e7:
73:1d:8a:11:da:8d:9c:43:08:c4:7c:e8:30:30:89:
bb:a5:68:84:a5:bd:e1:e3:70:15:9e:81:1d:da:eb:
4d:ab:22:b2:44:22:8f:fb:1f:4e:28:18:c1:00:5f:
50:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DE:81:D9:31:63:A8:60:A9:8A:8A:95:06:49:62:97:69:5A:1E:FC
X509v3 Authority Key Identifier:
keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f9:0c:18:30:63:b8:99:4c:99:9f:27:30:27:8f:92:7f:62:
25:59:7d:25:fb:98:f7:4b:7d:33:ea:ca:f0:d9:54:e0:33:ce:
32:25:ab:a6:61:52:11:f5:48:ac:4d:ae:c3:ee:88:be:29:23:
a1:2a:a2:c2:93:cf:0c:9d:13:e9:b2:c0:ea:4a:58:fa:23:45:
7f:32:80:11:bc:91:17:2d:d4:d7:d4:a8:8f:12:d1:e6:de:41:
10:ad:4b:1c:44:1f:08:e0:1d:c8:8a:42:77:f2:a5:0f:cb:16:
8a:b9:1f:69:c2:43:8e:22:f4:3d:d6:92:89:b5:74:12:e7:0a:
20:80:19:cb:61:b9:f1:2e:ce:bd:19:7f:46:29:cd:a5:e0:4c:
49:5c:0d:1f:32:11:37:51:6b:90:c2:1b:75:2c:c5:b7:44:a6:
16:e7:26:0c:fc:b6:cc:a4:b0:f7:bb:e5:16:6f:fb:24:e0:2a:
90:7d:5e:86:51:3f:6a:af:c5:28:80:32:03:52:b0:87:40:b5:
7c:63:00:68:07:6e:fe:c7:5b:c1:8e:41:2d:02:d1:8f:ff:ba:
46:bc:c3:ae:bc:2e:3d:98:70:89:db:18:ab:70:51:f3:9d:91:
d4:05:2c:9a:ed:32:c5:6c:d1:15:38:85:ea:25:ef:74:d0:ff:
9c:96:80:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0fuNTjW3ErxuNleiEr0xMJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxY2M0NWU4NGIwNzhkNDU4YWRmOGQ4Njc0NDVjNDZmOGM4
ZDBmYWUwHhcNMjYwMzI0MTIwMTM5WhcNMjYwMzI1MTIwMTM5WjAzMTEwLwYDVQQD
EyhjZGRlODFkOTMxNjNhODYwYTk4YThhOTUwNjQ5NjI5NzY5NWExZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j72saAOll4achcZ3LKXjDhJsIwc
SihP7OJoTakMjdOoWa3oZ9DCWnA1MLblMMQllyiiMV3UIv+y85yM/Q9YNRr2DETf
3uKg2fyXuRWEcwkjV8qiQvOil7JF/1xhRF9tsbLooAr/3KFduqNEium9RMMArG2R
h4TDDx9Jm+M56R/n6xvTS8MjFbodGnStaT7OLsmcGuurh6QymxA2AisPCtMvonrb
7UXPh4YzQs6txY6+67sv2Fy/x+si2qGLXRq0PvYcsCF1fcUZV40amuiEWOdzHYoR
2o2cQwjEfOgwMIm7pWiEpb3h43AVnoEd2utNqyKyRCKP+x9OKBjBAF9QCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3egdkxY6hgqYqKlQZJYpdpWh78MB8GA1UdIwQY
MBaAFOHMRehLB41Fit+NhnRFxG+MjQ+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wOGFiYTgtYjc1Ni00NDkyLWE3ZWQt
NjMyMGM0NjBhM2Y4LzEvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wOGFiYTgtYjc1Ni00NDkyLWE3ZWQtNjMyMGM0NjBhM2Y4
LzEvNGN4RjZFc0hqVVdLMzQyR2RFWEViNHlORDY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPkMGDBj
uJlMmZ8nMCePkn9iJVl9JfuY90t9M+rK8NlU4DPOMiWrpmFSEfVIrE2uw+6Ivikj
oSqiwpPPDJ0T6bLA6kpY+iNFfzKAEbyRFy3U19SojxLR5t5BEK1LHEQfCOAdyIpC
d/KlD8sWirkfacJDjiL0PdaSibV0EucKIIAZy2G58S7OvRl/RinNpeBMSVwNHzIR
N1FrkMIbdSzFt0SmFucmDPy2zKSw97vlFm/7JOAqkH1ehlE/aq/FKIAyA1Kwh0C1
fGMAaAdu/sdbwY5BLQLRj/+6RrzDrrwuPZhwidsYq3BR852R1AUsmu0yxWzRFTiF
6iXvdND/nJaAyQ==
-----END CERTIFICATE-----
Generated at Tue Mar 24 20:18:36 2026 by rpki-client