Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: fgDtkBneiXoS+ZklnZ9csJx193s3p+Bf5GMACl+5DmI=
Subject key identifier: B5:01:0E:4B:38:A3:AA:BF:63:90:1E:D0:19:93:80:64:B3:0E:64:31
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 019D33080330C182A0500F82B89E5EE41704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 1897
Signing time: Sat 28 Mar 2026 06:00:56 +0000
Manifest this update: Sat 28 Mar 2026 06:00:56 +0000
Manifest next update: Sun 29 Mar 2026 06:00:56 +0000
Files and hashes: 1: 1-5V3M6zE3wKBEweDO-7_cCen51c.roa (hash: LwMI3fPGMvfyxbI/YBNs8zyBRZxgnVuUyiN/3FDRb40=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: ajaS+nxKIgXaaX8BHWRlxpjiq7jPakcSfRFDFXV7UFQ=)
3: tJXMZewUy_qQorxapIfDeK0TRA4.roa (hash: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:03:30:c1:82:a0:50:0f:82:b8:9e:5e:e4:17:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Mar 28 06:00:56 2026 GMT
Not After : Mar 29 06:00:56 2026 GMT
Subject: CN=b5010e4b38a3aabf63901ed019938064b30e6431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5a:4b:a7:15:f3:b4:7e:3c:45:6b:fc:d9:c6:
79:fe:3f:3a:4c:02:fb:ac:b5:76:06:bf:00:49:09:
2b:4a:f8:20:fc:ef:f6:84:a3:d5:43:6a:51:dc:04:
9f:72:58:3f:38:3e:c7:9a:24:0a:1b:18:2b:91:cd:
d6:37:1d:c7:37:eb:52:7e:e5:21:3b:23:35:68:a5:
9b:45:ee:f3:63:c7:30:b4:3b:2a:ac:9d:e8:53:13:
e9:99:d1:a7:0f:90:be:3b:1a:cb:f4:b9:1e:c4:38:
14:88:c3:6a:db:22:6e:74:be:67:84:dc:dd:f9:7d:
5d:6b:38:61:86:ad:a1:cb:20:83:3a:55:89:29:aa:
34:2e:3d:6b:fb:cc:31:4d:06:b4:80:c6:cd:2b:cc:
72:3c:2a:a9:a5:fd:68:63:01:b9:d9:d1:5a:b9:92:
b3:f4:24:5b:fb:77:6f:f5:0f:de:67:d8:f8:1b:66:
99:3d:22:86:db:98:ec:ad:ec:ec:9b:a5:7c:e1:b9:
f8:71:98:d9:2e:48:5b:87:d0:05:f8:22:ce:53:fa:
19:28:42:8b:44:ee:b2:ed:b4:62:bd:33:de:e6:70:
05:7e:b9:38:a5:5a:82:9c:df:f0:f9:08:ed:e8:4c:
27:fe:39:07:46:f6:fb:38:84:37:16:bb:8f:58:c5:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:01:0E:4B:38:A3:AA:BF:63:90:1E:D0:19:93:80:64:B3:0E:64:31
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:3c:75:9f:9d:e1:e8:b2:04:f4:82:47:5e:52:92:5c:03:bf:
9c:77:24:c5:cb:0b:4b:c5:19:ed:c7:8f:26:44:b8:4d:86:07:
d5:45:3c:8c:c6:a4:05:0d:9e:0c:da:1d:4e:ac:3a:ec:81:21:
e5:18:1d:77:d4:20:e5:67:84:ae:96:8a:b2:2c:ea:3b:32:a3:
6a:16:1e:aa:87:7b:53:b2:2e:78:91:f8:a0:3c:b0:2c:ca:0c:
9f:61:91:c6:9d:9e:db:50:00:eb:c4:67:a7:ea:54:94:88:3e:
1a:71:80:0e:b8:57:83:c9:0d:10:5c:24:c6:74:f5:85:c7:19:
b6:0a:0a:9d:f2:84:06:f1:d6:0e:62:cd:dc:f2:fb:bd:c5:f6:
e0:a1:3e:d8:06:13:1b:fb:15:1e:69:87:8e:73:3c:29:e6:ab:
8c:70:bc:aa:76:73:74:8f:3b:69:63:07:96:51:f2:27:94:26:
7e:b2:20:b2:29:92:40:64:a5:3e:d9:7d:8b:f7:f8:a5:f6:52:
40:39:42:1f:ae:d6:94:ce:3c:ea:98:8d:71:77:1c:23:e8:e9:
c1:f7:09:61:fe:63:39:8f:5d:4a:00:6c:a0:6e:8a:5a:3b:9b:
04:9a:97:06:35:0d:83:b8:73:12:4f:3c:b2:6e:ff:72:7d:c1:
25:64:a5:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zCAMwwYKgUA+CuJ5e5BcEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODBlYmJiY2EwZjg5MGRlMzUzODkxNDIxYTgzZGQ1YjY1
M2Q5NDAwHhcNMjYwMzI4MDYwMDU2WhcNMjYwMzI5MDYwMDU2WjAzMTEwLwYDVQQD
EyhiNTAxMGU0YjM4YTNhYWJmNjM5MDFlZDAxOTkzODA2NGIzMGU2NDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVpLpxXztH48RWv82cZ5/j86TAL7
rLV2Br8ASQkrSvgg/O/2hKPVQ2pR3ASfclg/OD7HmiQKGxgrkc3WNx3HN+tSfuUh
OyM1aKWbRe7zY8cwtDsqrJ3oUxPpmdGnD5C+OxrL9LkexDgUiMNq2yJudL5nhNzd
+X1dazhhhq2hyyCDOlWJKao0Lj1r+8wxTQa0gMbNK8xyPCqppf1oYwG52dFauZKz
9CRb+3dv9Q/eZ9j4G2aZPSKG25jsrezsm6V84bn4cZjZLkhbh9AF+CLOU/oZKEKL
RO6y7bRivTPe5nAFfrk4pVqCnN/w+Qjt6Ewn/jkHRvb7OIQ3FruPWMWuOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUBDks4o6q/Y5Ae0BmTgGSzDmQxMB8GA1UdIwQY
MBaAFOGA67vKD4kN41OJFCGoPdW2U9lAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEt
MDU1NTY5NTljNDU1LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEtMDU1NTY5NTljNDU1
LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjx1n53h
6LIE9IJHXlKSXAO/nHckxcsLS8UZ7cePJkS4TYYH1UU8jMakBQ2eDNodTqw67IEh
5Rgdd9Qg5WeErpaKsizqOzKjahYeqod7U7IueJH4oDywLMoMn2GRxp2e21AA68Rn
p+pUlIg+GnGADrhXg8kNEFwkxnT1hccZtgoKnfKEBvHWDmLN3PL7vcX24KE+2AYT
G/sVHmmHjnM8KearjHC8qnZzdI87aWMHllHyJ5QmfrIgsimSQGSlPtl9i/f4pfZS
QDlCH67WlM486piNcXccI+jpwfcJYf5jOY9dSgBsoG6KWjubBJqXBjUNg7hzEk88
sm7/cn3BJWSlxA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:38:39 2026 by rpki-client