Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
File: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft (raw, json)
Hash identifier: Nvm2e0fsctbLp0+/r81NX4tP/w3nWI+IBeaHBX7HY1s=
Subject key identifier: 42:D1:C2:63:CC:20:C9:65:C0:7F:01:EE:B6:93:7A:E0:8C:97:5C:DB
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Certificate issuer: /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial: 019D258329EC18A2B4E73509461E6690DC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
Manifest number: 0589
Signing time: Wed 25 Mar 2026 15:00:45 +0000
Manifest this update: Wed 25 Mar 2026 15:00:45 +0000
Manifest next update: Thu 26 Mar 2026 15:00:45 +0000
Files and hashes: 1: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl (hash: H+HUOYTQmP8uBojXLhYf/pyz9bi1XsFgvqWzOY9M9tM=)
2: 9m6XpGENN_Zc7gu4DZLgz-bFG_8.roa (hash: /mTzPbGMqBx+64njFbuyJLyG64tSV59h469Ll6ebv7Y=)
3: KEIqtKdHOr2xFwyul2M4Mj3OCXg.roa (hash: 3sxiPnrD0Gc6fzs8KkM4ayt1dKyCeKq1vgI2Ien7IrU=)
4: a7LWLvfWgtFn-hlQ7rePCg-poYE.roa (hash: VgwZIwqUK5p5zdClmFKprg0jOARykjuW1KNUaPMDVgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:29:ec:18:a2:b4:e7:35:09:46:1e:66:90:dc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Validity
Not Before: Mar 25 15:00:45 2026 GMT
Not After : Mar 26 15:00:45 2026 GMT
Subject: CN=42d1c263cc20c965c07f01eeb6937ae08c975cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:25:d1:18:40:0b:d9:3b:46:4d:e5:f4:1f:
ce:86:b7:6d:f9:c3:41:c8:b6:aa:bb:4c:21:eb:63:
c3:97:fb:c7:c3:bf:03:8f:a7:b5:b1:98:96:cf:76:
c9:f1:b1:90:17:0f:6f:05:a2:9b:c1:e8:f4:23:bb:
07:c1:d4:b0:ee:19:a9:16:bb:4f:94:db:54:a9:95:
93:26:59:16:3c:43:96:a2:8d:c8:ba:61:87:06:4b:
f5:6f:d4:72:9b:85:15:8c:2a:c6:1a:dc:2b:be:bd:
42:8e:cf:0a:af:98:ca:cd:dd:7a:68:bc:f7:c3:92:
7c:f0:d4:c6:03:ce:86:b9:52:a4:81:c9:e7:7a:d1:
92:10:49:79:eb:34:5c:dd:8a:40:b8:99:79:31:ed:
a5:ad:a8:67:05:17:b5:d1:40:00:c1:4d:17:03:c2:
a8:2c:1d:bc:5f:a2:e7:89:27:aa:0d:0f:35:11:01:
d8:60:30:65:8f:0c:c5:5c:d1:6c:e8:db:be:16:1b:
9a:3d:e7:20:b1:f8:09:e6:ae:0d:57:91:79:d3:14:
07:03:a3:a1:a1:a7:dc:54:ec:51:ff:d0:64:83:de:
63:c4:19:fe:d4:62:e5:62:cd:bc:5f:85:8b:d1:32:
90:e8:2e:93:98:bd:bf:7b:c5:15:ff:a4:08:40:22:
62:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D1:C2:63:CC:20:C9:65:C0:7F:01:EE:B6:93:7A:E0:8C:97:5C:DB
X509v3 Authority Key Identifier:
keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a1:ba:85:92:70:e1:26:9c:d1:f9:31:58:96:58:dc:c0:7e:
2a:4a:5b:05:b2:7e:c9:36:f5:30:43:0a:06:3b:82:04:0c:7a:
6e:f9:91:20:bb:6d:1d:84:47:f5:23:1d:d4:41:2e:45:42:6c:
14:ca:90:5f:c7:9d:27:21:d1:67:ad:9d:90:66:68:e8:a1:a5:
6e:59:b7:5a:b1:b1:11:1d:87:aa:81:7c:cb:3d:d6:59:5e:37:
af:e4:0c:0d:9a:b2:84:32:9f:de:b8:08:56:be:58:83:c3:cf:
02:51:57:b0:84:87:9f:87:03:cb:0e:85:36:e1:7c:b5:44:1e:
6a:3b:f1:1b:6c:6e:8b:d0:52:32:45:6b:99:a8:31:19:46:77:
40:d2:9f:89:d4:df:ba:03:8b:3e:3f:fd:6b:2d:cf:a1:ff:98:
7e:ea:c7:6d:35:90:b7:32:7a:0e:ea:4d:1e:ff:8a:61:35:e1:
7e:86:29:e2:31:41:30:0f:67:53:e3:45:d2:ff:56:80:70:88:
20:52:ee:8a:ba:bd:e4:bc:7b:e7:f5:a7:a9:dc:3a:c6:df:72:
e0:1b:b5:ea:c3:ae:8e:80:0d:3a:3d:8d:ac:36:98:bb:37:e3:
1c:a3:82:53:8e:f8:44:68:72:48:2c:62:eb:14:25:e1:fe:45:
85:70:03:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lgynsGKK05zUJRh5mkNxRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNjBiMGE1NWE4N2E2NmU5MGE3NDYzYTAxZGE2NDE0ZmMw
MzRkM2QwHhcNMjYwMzI1MTUwMDQ1WhcNMjYwMzI2MTUwMDQ1WjAzMTEwLwYDVQQD
Eyg0MmQxYzI2M2NjMjBjOTY1YzA3ZjAxZWViNjkzN2FlMDhjOTc1Y2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5El0RhAC9k7Rk3l9B/Ohrdt+cNB
yLaqu0wh62PDl/vHw78Dj6e1sZiWz3bJ8bGQFw9vBaKbwej0I7sHwdSw7hmpFrtP
lNtUqZWTJlkWPEOWoo3IumGHBkv1b9Rym4UVjCrGGtwrvr1Cjs8Kr5jKzd16aLz3
w5J88NTGA86GuVKkgcnnetGSEEl56zRc3YpAuJl5Me2lrahnBRe10UAAwU0XA8Ko
LB28X6LniSeqDQ81EQHYYDBljwzFXNFs6Nu+FhuaPecgsfgJ5q4NV5F50xQHA6Oh
oafcVOxR/9Bkg95jxBn+1GLlYs28X4WL0TKQ6C6TmL2/e8UV/6QIQCJiiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELRwmPMIMllwH8B7raTeuCMl1zbMB8GA1UdIwQY
MBaAFOJgsKVah6ZukKdGOgHaZBT8A009MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xYmNiMTEtMzQxZC00YWRlLTk2YjEt
ZDIyNjlmNDBmM2QzLzEvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xYmNiMTEtMzQxZC00YWRlLTk2YjEtZDIyNjlmNDBmM2Qz
LzEvNG1Dd3BWcUhwbTZRcDBZNkFkcGtGUHdEVFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6G6hZJw
4Sac0fkxWJZY3MB+KkpbBbJ+yTb1MEMKBjuCBAx6bvmRILttHYRH9SMd1EEuRUJs
FMqQX8edJyHRZ62dkGZo6KGlblm3WrGxER2HqoF8yz3WWV43r+QMDZqyhDKf3rgI
Vr5Yg8PPAlFXsISHn4cDyw6FNuF8tUQeajvxG2xui9BSMkVrmagxGUZ3QNKfidTf
ugOLPj/9ay3Pof+YfurHbTWQtzJ6DupNHv+KYTXhfoYp4jFBMA9nU+NF0v9WgHCI
IFLuirq95Lx75/Wnqdw6xt9y4Bu16sOujoANOj2NrDaYuzfjHKOCU474RGhySCxi
6xQl4f5FhXAD3g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:09 2026 by rpki-client