Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: dpIpJK6cMa6Ry1IeQCk9Moe2f44o7JLiyoWn99R6pAI=
Subject key identifier: 9B:4E:2F:11:30:0C:C4:EB:80:C9:FA:04:5D:D3:2A:85:A3:8E:D1:54
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 019D296183ED6851618DEE9558F77FA7DD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 09:02:29 +0000
Manifest this update: Thu 26 Mar 2026 09:02:29 +0000
Manifest next update: Fri 27 Mar 2026 09:02:29 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: JAQOyofmDkv3a8Nw2c3ZQ3KwAY3Gnjh7IosHDua3uVw=)
2: Z-KRt-a6fFf_5XtERzEP16Ujm4E.roa (hash: UsGPZBKjWrTYFqihznPKPakXtZqMZXtabA/JlRVq59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:83:ed:68:51:61:8d:ee:95:58:f7:7f:a7:dd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Mar 26 09:02:29 2026 GMT
Not After : Mar 27 09:02:29 2026 GMT
Subject: CN=9b4e2f11300cc4eb80c9fa045dd32a85a38ed154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:63:e4:b5:2c:26:d6:43:68:69:20:43:4d:20:
15:79:61:f9:bd:11:6e:11:bb:f7:2b:8d:b9:c1:b3:
2a:6a:d8:66:97:e6:a9:5e:6c:7f:79:80:1f:0e:4b:
19:a7:d4:4d:57:87:72:21:94:1a:dc:bd:3e:55:06:
12:fe:d1:76:95:47:17:07:79:5c:fc:49:81:13:da:
e8:7b:78:31:5f:1d:49:54:13:f2:bd:b0:3f:7c:3f:
b4:13:1d:a5:4d:33:03:23:c0:d2:e5:86:9f:e3:8b:
f8:2f:7f:0f:47:21:f6:f6:65:ff:0b:0a:a8:07:34:
0f:05:51:f1:17:37:a1:0b:15:4a:e1:d2:28:cd:c1:
6b:36:a9:76:5e:df:37:e4:b9:dd:97:7e:70:34:45:
8c:54:49:51:62:91:41:17:41:63:59:71:6b:63:d8:
02:9b:69:ba:13:39:a7:bb:bc:d9:50:86:ed:39:1a:
4b:24:5c:18:3a:9f:c4:dc:11:f4:54:05:c5:44:a7:
83:44:0e:8e:64:04:b5:b0:00:74:99:66:c4:28:08:
9e:83:73:4d:b1:5c:2e:cf:c2:3d:d2:09:e0:de:b2:
f5:2c:a4:18:85:b8:33:e0:6b:b6:af:42:c7:da:9d:
31:40:20:c7:7e:3c:77:c3:73:cc:49:b9:6b:03:3e:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4E:2F:11:30:0C:C4:EB:80:C9:FA:04:5D:D3:2A:85:A3:8E:D1:54
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:07:88:19:cc:96:80:34:ec:c6:49:6c:69:69:61:ec:4f:17:
47:b1:ea:92:1c:20:75:c7:4a:17:d3:14:db:0b:8b:cd:2e:32:
cd:7c:26:04:b8:84:32:53:df:87:93:fa:10:1d:a5:1e:df:28:
6d:80:81:2c:be:bc:cd:7e:12:a9:d4:7e:39:15:fb:9f:ab:f8:
d2:af:22:9c:45:11:67:a7:4f:30:51:90:50:1b:8b:ef:c2:98:
a7:21:cb:83:87:7a:f4:8c:33:7f:83:83:a9:f3:b7:10:b3:12:
6d:5b:ec:c3:8a:dd:8d:03:e9:30:28:5c:f3:2d:f6:ff:0d:f0:
30:1d:82:72:db:91:15:57:33:0b:7e:fd:20:96:4e:a2:84:ec:
9b:f2:3a:61:5a:21:0f:7d:82:24:54:db:5d:48:cb:57:10:e0:
ac:80:06:d0:f5:74:70:cb:2f:72:2f:2b:59:05:4e:a8:be:20:
8c:62:bf:8c:78:14:90:d6:45:5e:97:fc:90:ec:93:1c:f8:98:
7f:9e:f9:cb:fd:7c:07:cd:6a:04:a8:49:27:f6:ff:31:97:7f:
d2:bd:81:1d:df:af:1b:87:1f:c4:c3:99:a7:37:f1:6a:e6:1e:
32:95:2d:d8:e6:5b:24:9d:0e:66:e7:04:a0:97:a9:8a:f7:55:
29:12:19:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYYPtaFFhje6VWPd/p90wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZWE1OTM0NjQ4NThlMjkzOTUyMzQ1Y2Y0ZTk3NzkyYzg4
MTEwNTcwHhcNMjYwMzI2MDkwMjI5WhcNMjYwMzI3MDkwMjI5WjAzMTEwLwYDVQQD
Eyg5YjRlMmYxMTMwMGNjNGViODBjOWZhMDQ1ZGQzMmE4NWEzOGVkMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GPktSwm1kNoaSBDTSAVeWH5vRFu
Ebv3K425wbMqathml+apXmx/eYAfDksZp9RNV4dyIZQa3L0+VQYS/tF2lUcXB3lc
/EmBE9roe3gxXx1JVBPyvbA/fD+0Ex2lTTMDI8DS5Yaf44v4L38PRyH29mX/Cwqo
BzQPBVHxFzehCxVK4dIozcFrNql2Xt835Lndl35wNEWMVElRYpFBF0FjWXFrY9gC
m2m6Ezmnu7zZUIbtORpLJFwYOp/E3BH0VAXFRKeDRA6OZAS1sAB0mWbEKAieg3NN
sVwuz8I90gng3rL1LKQYhbgz4Gu2r0LH2p0xQCDHfjx3w3PMSblrAz5R2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtOLxEwDMTrgMn6BF3TKoWjjtFUMB8GA1UdIwQY
MBaAFOLqWTRkhY4pOVI0XPTpd5LIgRBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEt
NjJlNGJhZWU0ZmM1LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEtNjJlNGJhZWU0ZmM1
LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAeIGcyW
gDTsxklsaWlh7E8XR7HqkhwgdcdKF9MU2wuLzS4yzXwmBLiEMlPfh5P6EB2lHt8o
bYCBLL68zX4SqdR+ORX7n6v40q8inEURZ6dPMFGQUBuL78KYpyHLg4d69Iwzf4OD
qfO3ELMSbVvsw4rdjQPpMChc8y32/w3wMB2CctuRFVczC379IJZOooTsm/I6YVoh
D32CJFTbXUjLVxDgrIAG0PV0cMsvci8rWQVOqL4gjGK/jHgUkNZFXpf8kOyTHPiY
f575y/18B81qBKhJJ/b/MZd/0r2BHd+vG4cfxMOZpzfxauYeMpUt2OZbJJ0OZucE
oJepivdVKRIZ4g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:38 2026 by rpki-client