Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
File: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft (raw, json)
Hash identifier: +AyLtkjEzzA8awEve0TmtzzJUFSpFcE+w3B6pOSoWYM=
Subject key identifier: AF:E8:74:3F:32:F5:AF:66:AF:EF:28:6B:F4:05:64:B8:D0:F6:27:C2
Authority key identifier: E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46
Certificate issuer: /CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546
Certificate serial: 019D28F26AAA0445B819D02952848701A228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
Manifest number: 0313
Signing time: Thu 26 Mar 2026 07:01:08 +0000
Manifest this update: Thu 26 Mar 2026 07:01:08 +0000
Manifest next update: Fri 27 Mar 2026 07:01:08 +0000
Files and hashes: 1: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl (hash: SRh4SJccaqaZcq3nzC4ZUEF3s/IiWc9FAl1QJbR+RY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:6a:aa:04:45:b8:19:d0:29:52:84:87:01:a2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546
Validity
Not Before: Mar 26 07:01:08 2026 GMT
Not After : Mar 27 07:01:08 2026 GMT
Subject: CN=afe8743f32f5af66afef286bf40564b8d0f627c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:86:36:7f:f5:95:54:13:43:a0:71:f3:49:c9:
cd:04:02:8a:c5:78:9d:d6:f6:c6:2f:b5:cc:c2:05:
57:ac:c5:c5:ee:a3:2e:29:cb:c8:6b:0b:66:47:ef:
22:62:44:1a:46:a7:c8:1b:9a:03:d7:cc:d4:ee:aa:
2d:a0:fc:16:ac:df:3f:2f:79:19:df:ca:97:83:de:
31:61:e5:6b:5c:9a:2e:40:5b:80:1a:c8:48:8a:c1:
06:4c:fe:66:11:61:f2:fc:92:31:11:19:f6:02:ee:
f6:2b:41:fe:74:4d:7d:25:e6:0b:65:fb:99:ba:fa:
fa:17:2e:4a:e3:7f:cc:2d:80:92:46:bc:e3:f9:bb:
05:79:c5:f5:e3:be:41:c6:56:7c:01:05:33:c6:1a:
31:08:bd:34:47:eb:a9:0a:da:b3:bd:01:85:f6:ff:
db:d0:a1:5e:f5:7e:82:01:e5:bf:d6:3d:a5:88:61:
2d:1e:69:61:54:d5:40:a3:94:d7:89:0a:19:24:84:
34:08:82:8e:ba:03:bf:7e:7f:d4:16:f2:a1:ea:a6:
0f:2c:86:be:86:07:e6:74:c1:e7:ea:e2:6d:0f:be:
da:0f:d7:5f:9a:61:be:1e:a6:f8:2e:07:49:79:33:
45:4e:8e:f8:75:b5:42:64:eb:75:46:34:02:f8:99:
b8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:74:3F:32:F5:AF:66:AF:EF:28:6B:F4:05:64:B8:D0:F6:27:C2
X509v3 Authority Key Identifier:
keyid:E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9f:5d:69:6a:c3:3e:67:66:13:86:0f:80:e9:27:5b:cd:02:
b3:e7:a0:99:de:6b:2c:20:ea:50:3c:9e:56:56:4a:49:4c:03:
5d:eb:1a:0d:9e:21:f1:b7:37:4a:15:b8:af:3e:3f:69:24:69:
93:f3:13:bc:00:9f:4d:3a:b3:23:3a:67:9d:4a:45:8a:c6:c1:
54:b1:7a:0c:70:38:16:6d:5c:a6:94:f0:cc:0a:fa:30:0a:69:
da:75:17:0c:a5:34:59:46:96:85:20:c4:42:9f:0d:aa:c0:8f:
7d:f8:28:0b:73:aa:db:70:59:0c:ef:f8:ff:43:ec:19:4a:d7:
28:f1:9d:0f:d1:b2:e8:32:25:03:1a:7c:83:16:95:a4:83:02:
53:40:56:ca:19:bd:f6:e3:54:b5:a6:e6:71:db:6c:ba:a2:a3:
46:e6:12:26:a9:e1:58:b2:2a:66:c5:fd:07:f4:7b:76:ed:c7:
5e:eb:52:23:43:bf:a0:6f:48:2f:6a:f9:ab:03:a0:6d:5c:ff:
f6:e5:12:7d:fd:81:23:09:f1:0e:81:02:58:c8:5a:2c:04:8b:
85:b7:a8:e4:0b:56:e8:e1:3b:9d:ba:d1:5c:dd:56:6f:08:dd:
b7:d4:7e:1d:7a:8f:7e:5f:d8:f7:cd:4e:40:a2:c7:54:a2:74:
b5:a3:ee:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8mqqBEW4GdApUoSHAaIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZmY0YzRlMjM4MTA2ZGM1ZjI5NmUyNmE5Y2VjZjNjNGE0
MzU1NDYwHhcNMjYwMzI2MDcwMTA4WhcNMjYwMzI3MDcwMTA4WjAzMTEwLwYDVQQD
EyhhZmU4NzQzZjMyZjVhZjY2YWZlZjI4NmJmNDA1NjRiOGQwZjYyN2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIY2f/WVVBNDoHHzScnNBAKKxXid
1vbGL7XMwgVXrMXF7qMuKcvIawtmR+8iYkQaRqfIG5oD18zU7qotoPwWrN8/L3kZ
38qXg94xYeVrXJouQFuAGshIisEGTP5mEWHy/JIxERn2Au72K0H+dE19JeYLZfuZ
uvr6Fy5K43/MLYCSRrzj+bsFecX1475BxlZ8AQUzxhoxCL00R+upCtqzvQGF9v/b
0KFe9X6CAeW/1j2liGEtHmlhVNVAo5TXiQoZJIQ0CIKOugO/fn/UFvKh6qYPLIa+
hgfmdMHn6uJtD77aD9dfmmG+Hqb4LgdJeTNFTo74dbVCZOt1RjQC+Jm4gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/odD8y9a9mr+8oa/QFZLjQ9ifCMB8GA1UdIwQY
MBaAFOL/TE4jgQbcXyluJqnOzzxKQ1VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHY5TVRpT0JCdHhmS1c0bXFjN1BQRXBEVlVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kODYxMzctYThjOC00YTYyLTg3Yzkt
MjNlZjZjZWU1ZWRmLzEvNHY5TVRpT0JCdHhmS1c0bXFjN1BQRXBEVlVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kODYxMzctYThjOC00YTYyLTg3YzktMjNlZjZjZWU1ZWRm
LzEvNHY5TVRpT0JCdHhmS1c0bXFjN1BQRXBEVlVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJ9daWrD
PmdmE4YPgOknW80Cs+egmd5rLCDqUDyeVlZKSUwDXesaDZ4h8bc3ShW4rz4/aSRp
k/MTvACfTTqzIzpnnUpFisbBVLF6DHA4Fm1cppTwzAr6MApp2nUXDKU0WUaWhSDE
Qp8NqsCPffgoC3Oq23BZDO/4/0PsGUrXKPGdD9Gy6DIlAxp8gxaVpIMCU0BWyhm9
9uNUtabmcdtsuqKjRuYSJqnhWLIqZsX9B/R7du3HXutSI0O/oG9IL2r5qwOgbVz/
9uUSff2BIwnxDoECWMhaLASLhbeo5AtW6OE7nbrRXN1Wbwjdt9R+HXqPfl/Y981O
QKLHVKJ0taPuKA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:23 2026 by rpki-client