Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
File: 4uSsYiT-GURCDcOpjdY6uuSvfgA.mft (raw, json)
Hash identifier: dStRC3CDMgF7JyvshTrFMWH/m35j+1i3xWGhI0hL96M=
Subject key identifier: 22:83:C8:71:7C:2E:E4:1C:63:A4:89:C0:2A:D4:AC:D6:60:E3:C2:D8
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial: 019D2816B66DA3500D05D5BD972B18AE5D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
Manifest number: 14B4
Signing time: Thu 26 Mar 2026 03:01:10 +0000
Manifest this update: Thu 26 Mar 2026 03:01:10 +0000
Manifest next update: Fri 27 Mar 2026 03:01:10 +0000
Files and hashes: 1: 1-TdHN98FGVFEolCtJz5D4Qn8oUU.roa (hash: XtPiDy65/rIGNdB1DOR8MKSXwZBD4oJVNpwQPU3xeNQ=)
2: 4uSsYiT-GURCDcOpjdY6uuSvfgA.crl (hash: HX/TiloxN38wCfT1hPJl9UY/DRwb3ERsnDrm6aIpAp4=)
3: RWwBA-mE5T1DeX90DO491TVULLY.roa (hash: MNPZj/RKM4/KkE55j9h8f2IORoXisvl/h9C3t/o3a6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b6:6d:a3:50:0d:05:d5:bd:97:2b:18:ae:5d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Validity
Not Before: Mar 26 03:01:10 2026 GMT
Not After : Mar 27 03:01:10 2026 GMT
Subject: CN=2283c8717c2ee41c63a489c02ad4acd660e3c2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7b:ab:c2:45:1f:2b:39:f9:9c:57:63:de:d8:
0f:ca:aa:8e:f3:6b:a9:ab:33:87:cb:92:d2:85:a7:
ee:48:4d:85:86:4a:fa:74:78:66:24:23:84:28:4b:
19:1a:b3:7b:b7:c2:e6:de:d4:38:17:40:a6:0c:0b:
37:27:89:5a:60:07:9d:ea:46:34:09:06:f3:3c:b3:
f9:13:06:8e:e7:26:02:59:fc:d0:5a:62:38:2b:5b:
33:05:cb:41:fe:2b:31:c0:ff:ac:68:a4:5e:7c:a5:
58:53:36:f4:3a:2b:01:ed:3d:0f:23:a0:d6:ad:dd:
9a:8b:c9:74:5d:61:68:17:ee:21:b1:8d:5d:64:e4:
37:cf:f1:2b:57:c6:60:07:a2:07:06:40:1e:ea:d4:
ac:0e:4c:1b:c0:ac:1c:4b:ec:d0:6d:47:10:ad:84:
ad:b2:8a:34:6c:ae:0e:9a:7f:3d:eb:8c:98:a7:7b:
ce:3d:18:2c:ff:a0:7b:25:e5:f4:18:70:5f:61:b8:
f5:3b:34:ca:b1:f5:e4:8d:fc:e0:50:47:15:37:bd:
fe:0f:8b:60:c3:36:3f:8d:7e:b6:74:f5:cf:47:21:
89:3d:e9:16:da:25:74:45:1d:d4:de:ed:55:7c:6d:
8c:ef:33:c1:a7:8b:13:54:b9:bb:3c:e9:b4:26:d2:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:83:C8:71:7C:2E:E4:1C:63:A4:89:C0:2A:D4:AC:D6:60:E3:C2:D8
X509v3 Authority Key Identifier:
keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:91:5a:d3:b3:c9:90:24:27:82:bd:b3:55:4c:b3:5b:53:55:
0e:9e:6d:a8:34:b5:28:b7:65:0e:6f:3c:f4:f0:cd:97:a6:7b:
68:1c:b0:19:64:1e:83:fd:ae:60:ec:3d:30:d8:9f:f0:aa:de:
15:84:0e:3a:ea:53:06:bd:8b:75:84:96:07:ff:95:0a:6d:8c:
fe:4f:ec:b4:f6:a1:15:7a:62:6f:b7:95:b2:5c:3b:4f:db:ed:
56:2d:68:61:4d:8c:80:11:98:e7:a5:2c:1c:c1:46:07:e1:8e:
2a:fc:59:c0:8f:76:a9:20:7b:bd:ac:b5:cc:96:b5:6c:a9:16:
8e:28:ec:69:b7:56:0c:8d:78:85:30:76:09:63:44:7d:ea:ff:
99:e8:54:10:83:0f:1c:31:6d:ac:ca:68:17:72:f2:4f:9c:85:
bb:af:47:c8:4e:d1:0a:12:da:55:3a:67:32:62:f3:67:33:94:
00:a1:3c:7e:7a:71:a8:86:c1:7f:64:a0:68:b6:fa:00:3a:58:
cf:85:b5:13:86:42:e2:c3:cd:53:07:73:57:18:96:ae:2a:07:
92:df:1d:a7:14:d1:3c:ce:8f:d7:51:36:17:c8:7e:ce:19:da:
10:62:16:fe:57:09:04:f8:ae:59:aa:6a:ec:29:62:fc:62:70:
9c:06:2a:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFrZto1ANBdW9lysYrl1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTRhYzYyMjRmZTE5NDQ0MjBkYzNhOThkZDYzYWJhZTRh
ZjdlMDAwHhcNMjYwMzI2MDMwMTEwWhcNMjYwMzI3MDMwMTEwWjAzMTEwLwYDVQQD
EygyMjgzYzg3MTdjMmVlNDFjNjNhNDg5YzAyYWQ0YWNkNjYwZTNjMmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnurwkUfKzn5nFdj3tgPyqqO82up
qzOHy5LShafuSE2Fhkr6dHhmJCOEKEsZGrN7t8Lm3tQ4F0CmDAs3J4laYAed6kY0
CQbzPLP5EwaO5yYCWfzQWmI4K1szBctB/isxwP+saKRefKVYUzb0OisB7T0PI6DW
rd2ai8l0XWFoF+4hsY1dZOQ3z/ErV8ZgB6IHBkAe6tSsDkwbwKwcS+zQbUcQrYSt
soo0bK4Omn8964yYp3vOPRgs/6B7JeX0GHBfYbj1OzTKsfXkjfzgUEcVN73+D4tg
wzY/jX62dPXPRyGJPekW2iV0RR3U3u1VfG2M7zPBp4sTVLm7POm0JtI+FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKDyHF8LuQcY6SJwCrUrNZg48LYMB8GA1UdIwQY
MBaAFOLkrGIk/hlEQg3DqY3WOrrkr34AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVTc1lpVC1HVVJDRGNPcGpkWTZ1dVN2ZmdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mNmJlMDMtNGY0NC00MzU0LWI5ZWIt
YmE0ZDA2ZGYwYmU1LzEvNHVTc1lpVC1HVVJDRGNPcGpkWTZ1dVN2ZmdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mNmJlMDMtNGY0NC00MzU0LWI5ZWItYmE0ZDA2ZGYwYmU1
LzEvNHVTc1lpVC1HVVJDRGNPcGpkWTZ1dVN2ZmdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5Fa07PJ
kCQngr2zVUyzW1NVDp5tqDS1KLdlDm889PDNl6Z7aBywGWQeg/2uYOw9MNif8Kre
FYQOOupTBr2LdYSWB/+VCm2M/k/stPahFXpib7eVslw7T9vtVi1oYU2MgBGY56Us
HMFGB+GOKvxZwI92qSB7vay1zJa1bKkWjijsabdWDI14hTB2CWNEfer/mehUEIMP
HDFtrMpoF3LyT5yFu69HyE7RChLaVTpnMmLzZzOUAKE8fnpxqIbBf2SgaLb6ADpY
z4W1E4ZC4sPNUwdzVxiWrioHkt8dpxTRPM6P11E2F8h+zhnaEGIW/lcJBPiuWapq
7Cli/GJwnAYqIQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:05:47 2026 by rpki-client