
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
File: 4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json)
Hash identifier: 7hNY6fOEcydBMfDpj6rYXi61N0EooFDVSU2SJirgqM4=
Subject key identifier: 2A:9E:0F:ED:C9:EA:7A:23:85:87:33:77:B4:95:2C:FF:A4:48:FC:E6
Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
Certificate issuer: /CN=e20f87dab96b50f76eea49b181ea94d26a205327
Certificate serial: 019D28167BAF653FCC56D9177E047D04A29D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:00:55 +0000
Manifest this update: Thu 26 Mar 2026 03:00:55 +0000
Manifest next update: Fri 27 Mar 2026 03:00:55 +0000
Files and hashes: 1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: 3r202c8kOUaDs0JGFxtyqnA2iM8jyNshmoN3PyqA9vw=)
2: FvV4UNNN1I3u5_f_mw8uvFShvcA.roa (hash: qoCza9pR6RXvspT8eRTV0uWK0mL3e+fmf3gOpC7a0Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:7b:af:65:3f:cc:56:d9:17:7e:04:7d:04:a2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327
Validity
Not Before: Mar 26 03:00:55 2026 GMT
Not After : Mar 27 03:00:55 2026 GMT
Subject: CN=2a9e0fedc9ea7a2385873377b4952cffa448fce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:48:94:76:3f:41:76:c7:ef:6e:6e:cb:d3:
3b:48:c8:d7:b6:2e:a3:94:87:a4:2b:e6:e2:8f:15:
e1:1d:d7:a7:d6:85:02:eb:b5:e2:e6:02:f0:7c:0d:
92:d2:3a:2f:43:b2:82:cf:7c:43:08:1e:52:c9:ec:
b2:9c:2b:5d:bf:b7:4c:4f:9e:88:94:a4:27:cd:f7:
e5:7d:4a:23:5c:41:6b:99:5a:ac:66:f8:b6:79:6a:
04:21:08:03:a8:c7:66:2a:32:f1:4d:e1:b7:0c:2c:
aa:89:48:d1:cb:13:0f:8c:63:1d:b6:7c:f6:fe:82:
af:21:37:9d:da:d4:06:80:b3:f5:45:17:e4:f8:86:
87:62:71:c8:8d:b7:dd:7d:cb:8f:62:15:a0:ea:92:
2e:60:ef:1e:86:71:29:8e:a7:5c:c0:29:51:f6:df:
93:51:87:95:0d:03:f4:d5:f9:f2:f1:04:1c:a1:5f:
00:af:11:92:ea:c6:e3:f6:57:81:08:18:c8:ed:f3:
98:7c:5e:94:7c:cd:7d:34:18:24:9e:ff:ab:36:75:
fb:ca:9e:d9:ab:bb:0a:69:13:32:72:01:26:80:f0:
16:72:a5:5e:c5:cc:aa:bc:50:50:aa:e0:d5:30:9e:
bb:e0:96:ae:e7:37:6b:26:e8:4a:ea:fa:55:de:8c:
e3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9E:0F:ED:C9:EA:7A:23:85:87:33:77:B4:95:2C:FF:A4:48:FC:E6
X509v3 Authority Key Identifier:
keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c7:42:18:f7:18:60:51:52:54:2f:22:d3:4d:b8:88:f0:83:
2d:91:da:75:c5:18:68:56:26:14:05:7f:79:08:29:4b:bb:84:
8d:87:20:e0:30:6b:c9:ef:2f:31:d2:b0:7d:cf:04:b1:ab:46:
88:d2:49:b8:cb:91:c5:2c:24:e2:4d:41:9e:f9:d9:52:7b:31:
54:42:fa:7b:56:cb:2e:92:7b:a9:79:e4:13:ac:60:2f:64:cd:
89:f9:14:5a:8f:44:75:64:47:2e:3d:cc:00:4d:97:db:ed:96:
e5:69:18:54:a9:0c:70:ae:73:b7:07:eb:08:24:4e:75:d0:dc:
35:b8:70:35:79:81:a7:42:6a:03:1f:8e:da:5f:bc:41:58:45:
ac:23:95:74:12:52:72:ef:2f:62:13:e8:96:a2:dc:c7:a5:70:
ab:59:65:0c:7c:75:79:2e:a0:ef:b8:18:2f:0d:95:b0:9b:1d:
10:2e:d8:2a:a7:70:4a:fe:9b:2b:30:25:24:02:5a:27:31:4f:
ca:63:63:9a:d0:db:49:93:89:11:0a:8e:1a:25:7d:5c:9a:d1:
df:21:37:fe:d1:6d:39:9b:22:bf:d9:3f:9a:d6:72:10:dd:a4:
06:f9:42:5b:c4:85:75:92:75:74:89:b1:85:47:ed:23:94:36:
7d:62:f0:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFnuvZT/MVtkXfgR9BKKdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMGY4N2RhYjk2YjUwZjc2ZWVhNDliMTgxZWE5NGQyNmEy
MDUzMjcwHhcNMjYwMzI2MDMwMDU1WhcNMjYwMzI3MDMwMDU1WjAzMTEwLwYDVQQD
EygyYTllMGZlZGM5ZWE3YTIzODU4NzMzNzdiNDk1MmNmZmE0NDhmY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05dIlHY/QXbH725uy9M7SMjXti6j
lIekK+bijxXhHden1oUC67Xi5gLwfA2S0jovQ7KCz3xDCB5SyeyynCtdv7dMT56I
lKQnzfflfUojXEFrmVqsZvi2eWoEIQgDqMdmKjLxTeG3DCyqiUjRyxMPjGMdtnz2
/oKvITed2tQGgLP1RRfk+IaHYnHIjbfdfcuPYhWg6pIuYO8ehnEpjqdcwClR9t+T
UYeVDQP01fny8QQcoV8ArxGS6sbj9leBCBjI7fOYfF6UfM19NBgknv+rNnX7yp7Z
q7sKaRMycgEmgPAWcqVexcyqvFBQquDVMJ674Jau5zdrJuhK6vpV3ozjHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqeD+3J6nojhYczd7SVLP+kSPzmMB8GA1UdIwQY
MBaAFOIPh9q5a1D3bupJsYHqlNJqIFMnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGctSDJybHJVUGR1NmtteGdlcVUwbW9nVXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zZmJhMDUtZGFlZC00M2I3LWI4NzAt
ZmEwMmMxMjY1ZDVlLzEvNGctSDJybHJVUGR1NmtteGdlcVUwbW9nVXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8zZmJhMDUtZGFlZC00M2I3LWI4NzAtZmEwMmMxMjY1ZDVl
LzEvNGctSDJybHJVUGR1NmtteGdlcVUwbW9nVXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcdCGPcY
YFFSVC8i0024iPCDLZHadcUYaFYmFAV/eQgpS7uEjYcg4DBrye8vMdKwfc8EsatG
iNJJuMuRxSwk4k1BnvnZUnsxVEL6e1bLLpJ7qXnkE6xgL2TNifkUWo9EdWRHLj3M
AE2X2+2W5WkYVKkMcK5ztwfrCCROddDcNbhwNXmBp0JqAx+O2l+8QVhFrCOVdBJS
cu8vYhPolqLcx6Vwq1llDHx1eS6g77gYLw2VsJsdEC7YKqdwSv6bKzAlJAJaJzFP
ymNjmtDbSZOJEQqOGiV9XJrR3yE3/tFtOZsiv9k/mtZyEN2kBvlCW8SFdZJ1dImx
hUftI5Q2fWLwzA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:01 2026 by rpki-client