Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
File: 4PcIYcfPbv530i_HBJvpbGdopQA.mft (raw, json)
Hash identifier: kFTuQiSzqqI0k3Awbq1MetdvVXif07D6EsrAGwfAzcg=
Subject key identifier: 48:9F:A9:DF:43:D3:44:9B:ED:AA:13:1B:5D:96:36:E8:8B:1A:DE:A8
Authority key identifier: E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
Certificate issuer: /CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Certificate serial: 019D284E07E83A5BDCD23A7238C72BC1847F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
Manifest number: 084A
Signing time: Thu 26 Mar 2026 04:01:35 +0000
Manifest this update: Thu 26 Mar 2026 04:01:35 +0000
Manifest next update: Fri 27 Mar 2026 04:01:35 +0000
Files and hashes: 1: 4PcIYcfPbv530i_HBJvpbGdopQA.crl (hash: 1zQ5tMQ1S+zSIT0AQRLQXrKOI9iUErzMQZg1XAxRpOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:07:e8:3a:5b:dc:d2:3a:72:38:c7:2b:c1:84:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Validity
Not Before: Mar 26 04:01:35 2026 GMT
Not After : Mar 27 04:01:35 2026 GMT
Subject: CN=489fa9df43d3449bedaa131b5d9636e88b1adea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:26:db:49:af:a4:28:e2:f8:9c:6f:36:cb:
e6:0c:00:6b:0f:0f:94:c1:95:6c:bb:9e:95:ee:ac:
77:8f:1c:e7:54:63:c4:b8:0f:be:fd:10:ec:33:db:
09:b1:89:20:25:e1:7b:c3:30:94:4f:81:c2:c3:3e:
6d:bf:10:67:79:e0:e2:be:89:ef:fd:03:ca:7a:18:
31:90:16:30:ce:09:65:2a:ec:d2:50:fa:07:b3:b5:
68:af:68:11:07:23:96:ea:d2:b4:49:2d:dd:aa:ba:
d9:24:b3:41:bc:da:40:38:81:49:98:a9:b9:1e:cc:
d8:15:2a:7a:1b:ff:c7:b6:d7:15:33:25:a4:51:e1:
2e:cc:b1:27:9d:5e:2b:bd:25:ba:d6:99:52:b5:77:
7d:4f:3f:4e:3a:cd:80:90:ac:07:77:ce:ba:ae:c3:
73:52:d1:82:c6:d5:6d:a5:de:5d:21:4f:6b:5b:1a:
e5:f0:55:86:10:67:c9:fb:fe:ec:a9:49:e2:fa:40:
b2:32:cd:13:b8:9b:89:10:10:7f:71:21:91:7e:9f:
80:cb:b2:41:22:85:9a:cc:8f:08:23:49:94:be:03:
4c:f7:ef:85:4c:7b:28:e3:b2:11:52:e8:0a:cd:6e:
54:c6:cc:bb:15:2d:b1:d1:12:b0:d6:9b:87:3d:85:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9F:A9:DF:43:D3:44:9B:ED:AA:13:1B:5D:96:36:E8:8B:1A:DE:A8
X509v3 Authority Key Identifier:
keyid:E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6b:fe:14:fe:b9:71:a4:f8:b9:fd:1d:26:9a:07:9c:49:e1:
a2:3d:61:d1:a9:f9:ec:56:27:2d:f6:23:47:14:a2:b6:4c:00:
aa:dd:5d:36:4d:c2:ec:3c:c7:ee:58:d5:48:93:6f:fa:39:df:
7d:2e:87:a6:49:4e:e9:d1:75:6f:e2:45:53:8f:a1:55:7b:b3:
20:28:f8:61:7d:32:3d:7c:7f:0a:9f:8c:a5:7d:f0:4d:aa:ba:
8d:ff:c8:47:dc:0a:0c:ca:ce:76:96:e1:78:7f:35:2e:5b:dd:
bd:8f:c0:65:db:a5:43:26:40:ff:c7:dd:4b:54:31:52:f5:f5:
00:a7:f5:6f:09:a0:0f:49:88:53:eb:8c:73:13:38:8d:90:2f:
d8:0c:a5:8a:d5:1e:e3:b5:03:f5:26:b7:52:71:5e:03:52:f6:
c6:88:e9:f0:ea:85:c4:58:e7:c9:b6:1f:0f:e1:0c:e0:62:4e:
1b:4a:40:e2:a5:a8:67:b3:b5:a8:db:df:9f:3b:37:73:14:d8:
a0:d3:36:47:4d:a2:b6:8f:04:3b:34:84:34:61:b8:bb:d9:df:
c7:a8:7f:d2:73:a4:f7:48:74:e9:77:c1:9f:89:04:6c:2a:e3:
3c:33:05:9f:ed:00:29:f7:a9:16:ab:2c:ee:05:70:ab:18:b2:
5c:b4:04:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTgfoOlvc0jpyOMcrwYR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZjcwODYxYzdjZjZlZmU3N2QyMmZjNzA0OWJlOTZjNjc2
OGE1MDAwHhcNMjYwMzI2MDQwMTM1WhcNMjYwMzI3MDQwMTM1WjAzMTEwLwYDVQQD
Eyg0ODlmYTlkZjQzZDM0NDliZWRhYTEzMWI1ZDk2MzZlODhiMWFkZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdAm20mvpCji+JxvNsvmDABrDw+U
wZVsu56V7qx3jxznVGPEuA++/RDsM9sJsYkgJeF7wzCUT4HCwz5tvxBneeDivonv
/QPKehgxkBYwzgllKuzSUPoHs7Vor2gRByOW6tK0SS3dqrrZJLNBvNpAOIFJmKm5
HszYFSp6G//HttcVMyWkUeEuzLEnnV4rvSW61plStXd9Tz9OOs2AkKwHd866rsNz
UtGCxtVtpd5dIU9rWxrl8FWGEGfJ+/7sqUni+kCyMs0TuJuJEBB/cSGRfp+Ay7JB
IoWazI8II0mUvgNM9++FTHso47IRUugKzW5Uxsy7FS2x0RKw1puHPYWc4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEifqd9D00Sb7aoTG12WNuiLGt6oMB8GA1UdIwQY
MBaAFOD3CGHHz27+d9IvxwSb6WxnaKUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFBjSVljZlBidjUzMGlfSEJKdnBiR2RvcFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NDI4MzAtY2M0OS00MTVhLTk3YjYt
NDQ3M2MwYjFlMDQ2LzEvNFBjSVljZlBidjUzMGlfSEJKdnBiR2RvcFFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81NDI4MzAtY2M0OS00MTVhLTk3YjYtNDQ3M2MwYjFlMDQ2
LzEvNFBjSVljZlBidjUzMGlfSEJKdnBiR2RvcFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGv+FP65
caT4uf0dJpoHnEnhoj1h0an57FYnLfYjRxSitkwAqt1dNk3C7DzH7ljVSJNv+jnf
fS6HpklO6dF1b+JFU4+hVXuzICj4YX0yPXx/Cp+MpX3wTaq6jf/IR9wKDMrOdpbh
eH81LlvdvY/AZdulQyZA/8fdS1QxUvX1AKf1bwmgD0mIU+uMcxM4jZAv2AylitUe
47UD9Sa3UnFeA1L2xojp8OqFxFjnybYfD+EM4GJOG0pA4qWoZ7O1qNvfnzs3cxTY
oNM2R02ito8EOzSENGG4u9nfx6h/0nOk90h06XfBn4kEbCrjPDMFn+0AKfepFqss
7gVwqxiyXLQE2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:17 2026 by rpki-client