Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
File: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft (raw, json)
Hash identifier: 6PZQZuGgFMi5NRfG5YJyKVF0lAXKgfp2pYMguK0L/kE=
Subject key identifier: 55:A3:90:F2:B4:7E:FA:81:17:11:18:0A:46:D8:7A:6C:DB:22:97:41
Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
Certificate issuer: /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Certificate serial: 019CE47F36F3F558ECA85CD7759B201333AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
Manifest number: 1488
Signing time: Fri 13 Mar 2026 00:01:08 +0000
Manifest this update: Fri 13 Mar 2026 00:01:08 +0000
Manifest next update: Sat 14 Mar 2026 00:01:08 +0000
Files and hashes: 1: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl (hash: sb5BB9005ibpnj42uPyrGazvMDVwe33CRRZK8LzogI4=)
2: QpTGyhEqHx6901xnQ91Zzt7qUHE.roa (hash: YchmT807E93vtUCwowps9RxjRDg1qTobGuNKmeL1H4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7f:36:f3:f5:58:ec:a8:5c:d7:75:9b:20:13:33:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Validity
Not Before: Mar 13 00:01:08 2026 GMT
Not After : Mar 14 00:01:08 2026 GMT
Subject: CN=55a390f2b47efa811711180a46d87a6cdb229741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:ed:60:8a:37:ed:0b:5b:cc:92:2a:20:aa:
c3:4b:ea:85:5d:37:60:09:e0:3a:2d:56:35:80:69:
6f:fd:5d:8a:bf:f9:92:ce:76:c5:8e:69:b7:e2:b4:
56:3e:d6:22:92:27:9c:3b:d7:39:d4:29:74:95:87:
28:c7:8f:78:13:20:16:e8:c2:d3:cf:8c:84:57:7c:
03:ae:f8:78:c6:19:25:44:54:be:ec:75:3d:c5:f1:
2d:b6:29:dd:d4:d0:6c:0c:27:18:51:ae:c5:15:92:
82:6d:e1:0a:44:f0:04:ba:df:49:99:12:ca:35:74:
ed:c4:93:53:6b:ba:68:52:d1:30:3a:57:f1:a7:d2:
e2:98:a6:5a:3c:6f:70:c2:0d:33:d3:f5:de:b6:28:
f6:88:94:20:d7:a1:bc:55:e3:65:8e:83:f6:62:a8:
7b:5a:08:85:00:61:f5:92:9a:99:f3:29:06:f8:0e:
1a:a4:49:7b:39:22:64:6e:e6:24:a6:fd:33:18:cf:
c0:9b:4b:5d:fd:6e:1b:f7:c8:6a:d9:6f:f1:84:25:
f1:50:fa:3f:24:36:cd:54:db:a1:c3:a6:57:1f:f0:
de:fe:db:b7:28:ad:8b:ee:55:c0:9f:83:5a:ed:75:
0b:ba:0d:bb:18:65:aa:3a:16:47:66:9f:3c:9b:f7:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A3:90:F2:B4:7E:FA:81:17:11:18:0A:46:D8:7A:6C:DB:22:97:41
X509v3 Authority Key Identifier:
keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bb:79:41:6c:ec:9c:97:86:b8:ea:a2:45:07:e9:c0:c9:be:
5d:6a:1b:e9:32:2a:d6:60:79:67:6e:c3:78:e8:b7:7c:bc:01:
17:40:ae:25:3c:6f:2d:84:64:b1:2c:85:f2:cf:bc:f3:92:fe:
96:ac:b5:f6:74:d5:63:04:4d:49:ee:d3:46:ab:1e:f3:a7:84:
82:41:6c:7c:b5:10:39:92:5b:af:74:b6:c0:9a:a5:20:e1:41:
fc:b1:8f:16:43:ad:c6:6d:9f:81:f6:37:da:cd:cc:76:75:fb:
ce:0e:0a:94:86:c8:8d:da:b6:f7:83:b2:b6:87:80:7d:37:cb:
28:ca:9a:17:a3:10:3e:c5:5d:d2:83:28:4b:9a:3f:f8:b4:90:
03:32:89:19:7d:a3:c8:d3:6c:9e:20:46:62:57:02:c3:a3:26:
3f:fe:37:36:06:96:30:4b:2c:61:5f:92:a4:fd:16:85:8c:1a:
37:d6:bc:5d:f6:a0:1c:e5:61:55:aa:5c:20:e6:e3:37:eb:4b:
dd:cb:4c:c2:cd:fb:a0:b0:f9:58:a6:33:02:cb:2a:31:9d:97:
58:47:9e:b0:6a:b5:42:6c:00:95:1c:56:ae:aa:40:8a:bc:42:
fa:2e:5d:20:7d:7d:f4:99:8b:59:56:91:da:dc:88:d8:eb:c3:
47:4d:46:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkfzbz9VjsqFzXdZsgEzOvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDg3ZTJmMGRmMjk2ZmUxMWU3NmVlNGMxMDE3YmNmMTIw
NWIyZjAwHhcNMjYwMzEzMDAwMTA4WhcNMjYwMzE0MDAwMTA4WjAzMTEwLwYDVQQD
Eyg1NWEzOTBmMmI0N2VmYTgxMTcxMTE4MGE0NmQ4N2E2Y2RiMjI5NzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDbtYIo37QtbzJIqIKrDS+qFXTdg
CeA6LVY1gGlv/V2Kv/mSznbFjmm34rRWPtYikiecO9c51Cl0lYcox494EyAW6MLT
z4yEV3wDrvh4xhklRFS+7HU9xfEttind1NBsDCcYUa7FFZKCbeEKRPAEut9JmRLK
NXTtxJNTa7poUtEwOlfxp9LimKZaPG9wwg0z0/Xetij2iJQg16G8VeNljoP2Yqh7
WgiFAGH1kpqZ8ykG+A4apEl7OSJkbuYkpv0zGM/Am0td/W4b98hq2W/xhCXxUPo/
JDbNVNuhw6ZXH/De/tu3KK2L7lXAn4Na7XULug27GGWqOhZHZp88m/chzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWjkPK0fvqBFxEYCkbYemzbIpdBMB8GA1UdIwQY
MBaAFOEIfi8N8pb+Eedu5MEBe88SBbLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQt
YTUwYTg4MGFhN2ZjLzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQtYTUwYTg4MGFhN2Zj
LzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabt5QWzs
nJeGuOqiRQfpwMm+XWob6TIq1mB5Z27DeOi3fLwBF0CuJTxvLYRksSyF8s+885L+
lqy19nTVYwRNSe7TRqse86eEgkFsfLUQOZJbr3S2wJqlIOFB/LGPFkOtxm2fgfY3
2s3MdnX7zg4KlIbIjdq294OytoeAfTfLKMqaF6MQPsVd0oMoS5o/+LSQAzKJGX2j
yNNsniBGYlcCw6MmP/43NgaWMEssYV+SpP0WhYwaN9a8XfagHOVhVapcIObjN+tL
3ctMws37oLD5WKYzAssqMZ2XWEeesGq1QmwAlRxWrqpAirxC+i5dIH199JmLWVaR
2tyI2OvDR01Ghw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 10:00:18 2026 by rpki-client