Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
File: 4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json)
Hash identifier: Qpqildv6gjYBi/5a5KuDUT9FmpJQ90+aWUUhiacyh0c=
Subject key identifier: 6C:62:59:F0:A8:20:15:42:FF:5C:3E:A0:72:32:1E:DF:EF:48:E2:B3
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial: 019D2B4E38BD4D961856288A01800E8D1D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
Manifest number: 09B5
Signing time: Thu 26 Mar 2026 18:00:39 +0000
Manifest this update: Thu 26 Mar 2026 18:00:39 +0000
Manifest next update: Fri 27 Mar 2026 18:00:39 +0000
Files and hashes: 1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: S6x2Wg4Dp6XeyTFVqwncP7o6yoiVn4B5N5ytp1GFQQ8=)
2: MPWn9lYh7Ig78eg1IuFu_hQVgcY.roa (hash: iyM+MzYg4hUTkqmFv32rNevlyEv/xOwD98IypdwiHXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:38:bd:4d:96:18:56:28:8a:01:80:0e:8d:1d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Validity
Not Before: Mar 26 18:00:39 2026 GMT
Not After : Mar 27 18:00:39 2026 GMT
Subject: CN=6c6259f0a8201542ff5c3ea072321edfef48e2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:87:01:90:9c:f5:27:85:9d:2c:5c:66:80:
97:5a:a9:59:fa:25:a5:82:24:f7:6c:f8:1a:ec:86:
e0:b2:b3:5f:60:0f:65:c3:79:dd:19:84:d0:f8:20:
6f:3b:9d:6e:e5:bf:70:14:e0:f5:dd:e0:56:6c:fb:
d0:40:37:5c:b0:26:69:6e:8e:e7:13:55:03:87:55:
f4:50:cd:8d:fe:c5:67:f6:91:a6:1c:d9:c4:80:d8:
37:43:c7:89:41:e8:d5:c9:b6:a7:62:bb:49:ff:8b:
87:33:eb:b0:d9:ff:7e:6a:47:06:fe:5e:0e:ab:30:
49:8f:14:4a:e2:95:b4:b1:c7:f4:03:69:30:74:8d:
ab:c9:5a:29:4a:00:50:f4:f8:35:0a:0f:8b:bc:5c:
43:5f:d7:da:33:b7:32:54:ad:d5:fd:2d:76:52:84:
95:51:c8:a2:0e:01:4c:14:98:74:7e:4f:ec:03:28:
9e:dc:5c:d2:80:9f:2f:19:3d:76:b6:46:b1:5c:28:
06:47:3a:1e:f3:86:eb:f9:e0:cc:6d:27:69:ab:c2:
15:d3:62:77:6d:27:1d:d5:13:25:49:ff:15:86:4e:
84:8b:d5:ba:ca:9f:d6:55:e2:e3:e9:2f:84:9d:ec:
4e:96:84:ff:fb:86:16:b1:7c:43:14:3c:d1:fa:db:
33:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:62:59:F0:A8:20:15:42:FF:5C:3E:A0:72:32:1E:DF:EF:48:E2:B3
X509v3 Authority Key Identifier:
keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:34:d0:59:45:42:bf:11:d8:1c:cc:8a:48:76:86:4b:be:57:
10:d8:e9:8a:ac:3e:c1:49:52:de:f9:10:e0:a7:ad:4a:1f:68:
53:35:fc:fd:bb:aa:96:ed:34:2a:77:02:1c:b6:92:68:78:66:
33:4b:34:0c:9a:62:2c:43:cc:7a:7f:06:9a:8f:9d:85:c0:29:
d4:4e:c5:47:02:2b:f2:a8:0f:1a:11:e4:8d:ab:6d:ab:c3:08:
8f:b4:1a:2c:00:20:6b:18:05:ea:b1:34:af:1c:e1:98:ad:c6:
01:fa:c1:49:fb:2e:d0:80:7e:38:a1:be:86:e2:fd:43:97:69:
86:0f:48:29:70:51:b5:94:4f:26:0d:79:bc:25:73:2a:99:27:
2f:f6:f6:c3:c0:52:1d:ab:b3:cf:4c:11:73:51:61:77:2c:b2:
3d:95:1d:ab:f5:8b:3d:49:b2:71:b5:cc:d5:c2:41:9a:82:4a:
59:5c:08:7b:a8:5e:a2:87:61:10:27:7b:9a:e6:fd:21:67:5e:
0a:22:06:05:bc:4b:f5:71:b0:62:9e:47:a3:d0:c2:62:d6:f1:
c2:85:62:b0:ff:85:d4:26:79:c4:8c:2e:1e:cc:e2:fa:1c:04:
1b:21:42:a0:e0:86:1d:17:17:50:ce:ec:f5:54:01:b8:a6:50:
db:c9:62:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTji9TZYYViiKAYAOjR09MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNmM4YWQyODUzOGVkZTBiNGM3ZTFhNzFlOWNhOTg5YTlm
MDNmMTAwHhcNMjYwMzI2MTgwMDM5WhcNMjYwMzI3MTgwMDM5WjAzMTEwLwYDVQQD
Eyg2YzYyNTlmMGE4MjAxNTQyZmY1YzNlYTA3MjMyMWVkZmVmNDhlMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+2HAZCc9SeFnSxcZoCXWqlZ+iWl
giT3bPga7IbgsrNfYA9lw3ndGYTQ+CBvO51u5b9wFOD13eBWbPvQQDdcsCZpbo7n
E1UDh1X0UM2N/sVn9pGmHNnEgNg3Q8eJQejVybanYrtJ/4uHM+uw2f9+akcG/l4O
qzBJjxRK4pW0scf0A2kwdI2ryVopSgBQ9Pg1Cg+LvFxDX9faM7cyVK3V/S12UoSV
UciiDgFMFJh0fk/sAyie3FzSgJ8vGT12tkaxXCgGRzoe84br+eDMbSdpq8IV02J3
bScd1RMlSf8Vhk6Ei9W6yp/WVeLj6S+EnexOloT/+4YWsXxDFDzR+tszaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxiWfCoIBVC/1w+oHIyHt/vSOKzMB8GA1UdIwQY
MBaAFOBsitKFOO3gtMfhpx6cqYmp8D8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDAwNmYtNTY3MC00MmE2LTg1YTkt
MzFiMmM2NjZiMmRjLzEvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9mMDAwNmYtNTY3MC00MmE2LTg1YTktMzFiMmM2NjZiMmRj
LzEvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzTQWUVC
vxHYHMyKSHaGS75XENjpiqw+wUlS3vkQ4KetSh9oUzX8/buqlu00KncCHLaSaHhm
M0s0DJpiLEPMen8Gmo+dhcAp1E7FRwIr8qgPGhHkjattq8MIj7QaLAAgaxgF6rE0
rxzhmK3GAfrBSfsu0IB+OKG+huL9Q5dphg9IKXBRtZRPJg15vCVzKpknL/b2w8BS
Hauzz0wRc1FhdyyyPZUdq/WLPUmycbXM1cJBmoJKWVwIe6heoodhECd7mub9IWde
CiIGBbxL9XGwYp5Ho9DCYtbxwoVisP+F1CZ5xIwuHszi+hwEGyFCoOCGHRcXUM7s
9VQBuKZQ28liVQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:10:37 2026 by rpki-client