Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier: jrHS4GyuTcunDDdn5E2f/OZcrhHJ2uJvZ0nvOizq7H4=
Subject key identifier: 86:B9:99:4A:F9:63:07:84:0E:C9:6B:AF:29:76:79:87:31:63:31:DC
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial: 019D24A768C31010B600311556865BA92FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number: 18E9
Signing time: Wed 25 Mar 2026 11:00:44 +0000
Manifest this update: Wed 25 Mar 2026 11:00:44 +0000
Manifest next update: Thu 26 Mar 2026 11:00:44 +0000
Files and hashes: 1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: lXQWAVzqnv83NUY+rZjfZfS/gNgJNFGn2MVTdfRJdmg=)
2: 8zN3DL4PO6-yBNZ449UXA_Bb-7k.roa (hash: LvqdZ49Tca0IVN8laPxyS4D4ERVu3hSaW9N67623Uts=)
3: Iir0TCJvEjSlAaycZZGnx4PF9Gc.asa (hash: 4LzaB4uHCD+cW4z7Pu5qioLqpA0LrFeMNw2vl3XMFVY=)
4: MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa (hash: 0p22EPcUlrbZ/XQd/L2Yz+06mVzq0rpNkXwnhd7vOv8=)
5: QPupw3rP2f5Jivi4SxaBbGE6eqM.roa (hash: KP++DGfsZGB7GL9ySK3Y6Xgm2FRgB01XieKkXEEpykk=)
6: lIx0KubEd0NAwKbnWvfavDgfMLw.roa (hash: Z1acY8ho4rEFuqnBBBvS7eEzd1qsRchpuvE7DncwSZE=)
7: ql3vqr1zYIaiPZLR54AHsL7ukAE.roa (hash: NYzCia9uixmAZoiKyWTL4nuIIf69H+HSXVKOLeUMj5c=)
8: yIoTvJJYIR2DNvrmk-NbH6cPask.roa (hash: oUH0ut41s6oEH273QOq+dzXsq0k279TftL1vgV4Jygw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:68:c3:10:10:b6:00:31:15:56:86:5b:a9:2f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Validity
Not Before: Mar 25 11:00:44 2026 GMT
Not After : Mar 26 11:00:44 2026 GMT
Subject: CN=86b9994af96307840ec96baf29767987316331dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:e1:28:6a:b4:2c:05:f1:0b:4e:f2:26:41:
60:13:80:57:41:72:1a:bd:bb:39:6a:e0:84:68:4f:
31:f8:86:0c:37:31:1a:6d:22:a9:1e:e8:3d:4b:4c:
3e:e5:f1:99:c3:c4:4f:1b:c3:87:9d:f5:96:f2:5c:
34:8f:59:aa:96:d7:f2:58:33:7a:2c:e9:fa:6b:9d:
32:48:34:37:52:92:3f:bf:d8:a9:c7:e5:71:f6:d8:
fd:40:23:0a:2b:b7:38:98:cf:b4:d0:ca:ba:af:ad:
e0:42:b7:a5:61:c3:65:46:4b:0c:bf:a7:ad:9f:a2:
d1:4d:89:b5:b9:52:af:4e:67:08:ca:51:5f:f8:6f:
09:77:68:bc:c9:c4:cc:fe:39:87:ba:97:6b:ed:4b:
fa:5b:df:3e:39:81:09:bd:e6:25:36:0f:e6:97:00:
0d:e2:51:74:dd:fc:18:64:38:9e:5f:1e:c6:e7:1a:
f2:81:3e:79:27:83:50:9a:45:29:a0:e4:d8:a5:da:
34:8a:a4:c1:24:2f:83:aa:21:fb:61:b5:5b:6c:eb:
af:a0:07:65:c3:7f:8a:6b:7b:46:fe:78:2d:09:7b:
d6:fc:17:3f:c2:33:e6:0f:d2:8d:38:15:27:6a:69:
26:7a:67:00:69:4c:71:5d:fe:f2:a8:24:ce:73:f4:
7b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B9:99:4A:F9:63:07:84:0E:C9:6B:AF:29:76:79:87:31:63:31:DC
X509v3 Authority Key Identifier:
keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a4:3e:b6:69:08:be:a8:5a:29:b7:cf:93:5e:b1:03:e1:63:
a8:39:0a:a7:ac:34:5b:b8:1b:06:73:9d:98:8b:88:99:2b:8b:
7e:04:af:e9:af:ba:b1:7a:3f:b2:82:2f:91:5d:8d:63:36:10:
61:bb:4a:29:21:9f:72:c6:e6:51:fc:66:cf:0c:83:79:6d:e1:
3f:e5:f0:8f:57:03:d9:cd:c5:9d:6c:3b:1c:f2:1c:2b:71:b2:
e9:9a:ba:3d:ad:62:58:8f:e3:80:94:2e:01:5f:e6:b3:0a:4d:
35:a9:c2:33:43:2c:2f:6a:23:c8:5a:82:3c:26:d4:30:13:c1:
8a:cb:37:07:b0:50:70:a0:ea:ba:af:73:f6:f1:31:88:e2:6d:
2f:91:53:57:b2:33:ea:95:21:d9:1d:a6:a1:8e:83:9e:9a:49:
95:7a:4c:60:90:ce:28:a3:7b:e6:f3:b1:9d:9e:24:4f:65:68:
81:5a:3a:a6:1d:f7:2a:2d:4a:5c:c6:e5:0e:25:7b:23:5e:c3:
d1:14:bd:c0:15:8b:34:71:df:ea:aa:a9:c1:9d:90:b7:d5:5a:
9c:54:87:d8:36:19:ce:68:24:aa:3e:9f:80:83:69:d1:9b:9f:
9c:c6:53:ed:ac:ef:20:87:55:2d:89:34:22:a2:39:87:8a:f6:
01:aa:0f:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0kp2jDEBC2ADEVVoZbqS/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3
MWJlZjQwHhcNMjYwMzI1MTEwMDQ0WhcNMjYwMzI2MTEwMDQ0WjAzMTEwLwYDVQQD
Eyg4NmI5OTk0YWY5NjMwNzg0MGVjOTZiYWYyOTc2Nzk4NzMxNjMzMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04jhKGq0LAXxC07yJkFgE4BXQXIa
vbs5auCEaE8x+IYMNzEabSKpHug9S0w+5fGZw8RPG8OHnfWW8lw0j1mqltfyWDN6
LOn6a50ySDQ3UpI/v9ipx+Vx9tj9QCMKK7c4mM+00Mq6r63gQrelYcNlRksMv6et
n6LRTYm1uVKvTmcIylFf+G8Jd2i8ycTM/jmHupdr7Uv6W98+OYEJveYlNg/mlwAN
4lF03fwYZDieXx7G5xrygT55J4NQmkUpoOTYpdo0iqTBJC+DqiH7YbVbbOuvoAdl
w3+Ka3tG/ngtCXvW/Bc/wjPmD9KNOBUnamkmemcAaUxxXf7yqCTOc/R7PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIa5mUr5YweEDslrryl2eYcxYzHcMB8GA1UdIwQY
MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt
ZTQyYTU4MDY0YTYzLzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz
LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaQ+tmkI
vqhaKbfPk16xA+FjqDkKp6w0W7gbBnOdmIuImSuLfgSv6a+6sXo/soIvkV2NYzYQ
YbtKKSGfcsbmUfxmzwyDeW3hP+Xwj1cD2c3FnWw7HPIcK3Gy6Zq6Pa1iWI/jgJQu
AV/mswpNNanCM0MsL2ojyFqCPCbUMBPBiss3B7BQcKDquq9z9vExiOJtL5FTV7Iz
6pUh2R2moY6DnppJlXpMYJDOKKN75vOxnZ4kT2VogVo6ph33Ki1KXMblDiV7I17D
0RS9wBWLNHHf6qqpwZ2Qt9VanFSH2DYZzmgkqj6fgINp0ZufnMZT7azvIIdVLYk0
IqI5h4r2AaoP8g==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:19:29 2026 by rpki-client