Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: cyItgg+w4dyz5kZXmBB403cAIG47CBBLjsTPOLsdC4c=
Subject key identifier: AC:A5:69:6B:91:2F:46:81:B1:E7:7D:34:53:3A:E6:D2:6F:91:EE:DB
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 019D2884C5C835D2CF119202F9B16D32FFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 1142
Signing time: Thu 26 Mar 2026 05:01:23 +0000
Manifest this update: Thu 26 Mar 2026 05:01:23 +0000
Manifest next update: Fri 27 Mar 2026 05:01:23 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: 2Vtg/ZdEUnvG3AJhxKk3qHKcOEWiTUFEnR/M+5j495E=)
2: uTD6khWcd31ZzRZAtfj7o4AtIHw.roa (hash: 69oOJR8ncC7sjtYVQ8SZHCT4Cq2KZtCn6uWehRleXPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c5:c8:35:d2:cf:11:92:02:f9:b1:6d:32:ff:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Mar 26 05:01:23 2026 GMT
Not After : Mar 27 05:01:23 2026 GMT
Subject: CN=aca5696b912f4681b1e77d34533ae6d26f91eedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:01:18:9b:d0:db:9e:29:bc:cc:8d:a0:3b:19:
cd:1b:97:92:7f:f7:05:8b:8e:ed:a6:be:05:fc:a7:
00:27:01:2c:f0:67:57:69:43:a7:a8:81:8e:73:8f:
58:d7:68:f8:77:b7:7b:1c:37:9f:83:ef:5a:96:3a:
6f:8b:fe:8a:d7:78:bc:38:7f:6e:45:81:39:f4:19:
d2:7d:ca:8d:4d:31:50:6c:f3:31:ee:f3:f3:66:cf:
6d:55:b6:6f:51:92:5c:b5:42:03:1c:ed:cb:eb:11:
30:4e:d3:e1:91:60:23:17:67:45:24:3e:08:26:73:
fc:d7:bd:e6:54:db:48:ca:21:59:22:d6:6c:79:26:
35:b2:0c:aa:4a:32:4f:d2:af:bb:ab:da:c3:41:df:
35:3c:a3:50:94:70:ad:27:27:8b:70:68:c2:3e:4d:
d6:89:90:54:9b:ee:99:eb:7c:4a:94:44:a7:52:50:
09:aa:66:1b:78:82:06:88:45:b0:e0:2c:58:94:74:
e5:76:7e:ed:a8:50:4d:30:04:38:88:15:63:12:80:
e6:39:68:a3:60:b8:2c:4d:75:a0:68:d5:f8:bc:30:
91:21:63:22:c2:41:e8:4b:70:31:35:04:87:f4:68:
c8:17:d4:c4:eb:b3:b0:8e:79:61:c6:06:60:d1:de:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A5:69:6B:91:2F:46:81:B1:E7:7D:34:53:3A:E6:D2:6F:91:EE:DB
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c6:b5:d5:23:a9:ad:64:06:11:60:6f:79:ef:aa:76:20:45:
6c:d8:90:73:32:4a:12:74:65:87:00:5f:1d:53:58:3f:9b:11:
89:c7:9a:e1:cf:04:83:91:d9:1c:9a:7c:f1:d8:50:1e:5f:03:
63:4f:48:81:7a:56:29:76:03:59:99:30:0c:77:f6:64:ef:aa:
8b:37:9f:73:15:8e:d9:c9:61:fa:6a:1d:bc:da:af:08:25:df:
bd:27:13:76:d6:82:fb:88:0f:4b:13:a3:47:cd:d1:b6:ac:34:
ea:1e:a9:db:20:1d:c2:5d:de:41:f0:b9:76:00:b0:3d:33:5b:
b0:87:72:91:ce:d0:fc:74:8d:5f:5f:ed:61:b0:ef:e7:5e:81:
02:82:0d:65:c3:9e:17:c3:e8:45:aa:0c:ca:4a:3e:e1:57:ac:
24:7b:11:91:74:bf:6e:b6:5a:c9:dc:3c:bf:e6:69:47:db:1e:
d1:03:60:40:7f:b0:ad:cf:37:7f:a0:b6:1b:ee:63:4c:51:0f:
8c:ea:53:05:af:c5:dc:9c:b0:b0:c2:67:46:03:0a:c0:0d:cb:
0c:83:ba:43:44:55:5b:c3:b9:f4:6e:26:4a:0f:e9:3f:85:66:
ca:1e:7d:5b:28:9e:1f:da:f5:05:3d:ef:d2:79:e3:5e:28:0d:
2d:97:bc:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohMXINdLPEZIC+bFtMv+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyODM0NDI5Nzc1ZTY1NTVlNTc0MjQ5MjI4NjI1NGIxZGE5
ZjE5MDMwHhcNMjYwMzI2MDUwMTIzWhcNMjYwMzI3MDUwMTIzWjAzMTEwLwYDVQQD
EyhhY2E1Njk2YjkxMmY0NjgxYjFlNzdkMzQ1MzNhZTZkMjZmOTFlZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QEYm9Dbnim8zI2gOxnNG5eSf/cF
i47tpr4F/KcAJwEs8GdXaUOnqIGOc49Y12j4d7d7HDefg+9aljpvi/6K13i8OH9u
RYE59BnSfcqNTTFQbPMx7vPzZs9tVbZvUZJctUIDHO3L6xEwTtPhkWAjF2dFJD4I
JnP8173mVNtIyiFZItZseSY1sgyqSjJP0q+7q9rDQd81PKNQlHCtJyeLcGjCPk3W
iZBUm+6Z63xKlESnUlAJqmYbeIIGiEWw4CxYlHTldn7tqFBNMAQ4iBVjEoDmOWij
YLgsTXWgaNX4vDCRIWMiwkHoS3AxNQSH9GjIF9TE67OwjnlhxgZg0d5LVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKylaWuRL0aBsed9NFM65tJvke7bMB8GA1UdIwQY
MBaAFOKDRCl3XmVV5XQkkihiVLHanxkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iNjQ2OGQtMTBlZC00ZDQ4LTgwM2Mt
ZWE5NzY2NWMxM2RmLzEvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9iNjQ2OGQtMTBlZC00ZDQ4LTgwM2MtZWE5NzY2NWMxM2Rm
LzEvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsa11SOp
rWQGEWBvee+qdiBFbNiQczJKEnRlhwBfHVNYP5sRicea4c8Eg5HZHJp88dhQHl8D
Y09IgXpWKXYDWZkwDHf2ZO+qizefcxWO2clh+modvNqvCCXfvScTdtaC+4gPSxOj
R83Rtqw06h6p2yAdwl3eQfC5dgCwPTNbsIdykc7Q/HSNX1/tYbDv516BAoINZcOe
F8PoRaoMyko+4VesJHsRkXS/brZaydw8v+ZpR9se0QNgQH+wrc83f6C2G+5jTFEP
jOpTBa/F3JywsMJnRgMKwA3LDIO6Q0RVW8O59G4mSg/pP4Vmyh59WyieH9r1BT3v
0nnjXigNLZe8zw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:51:55 2026 by rpki-client