Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json)
Hash identifier: 6K6vFwsdJrNKzooRWmE5JKFy1NzeLNW9r0g+xcL1e7U=
Subject key identifier: 1E:E6:80:21:E0:53:82:B2:65:AA:E0:E8:03:45:C3:0D:43:E0:FD:E1
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial: 019D2996CC9DB1EADB0E56B2D0EC12185607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
Manifest number: 0B3D
Signing time: Thu 26 Mar 2026 10:00:41 +0000
Manifest this update: Thu 26 Mar 2026 10:00:41 +0000
Manifest next update: Fri 27 Mar 2026 10:00:41 +0000
Files and hashes: 1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: 9kL6T8MpQqaCJr5HW4IuSCqUbU/BucFmXBR1wu7Km3g=)
2: YTHqy1jXNV7dNzrAO_RbGYRTCcA.roa (hash: zJ9iDYD1yuxkbyK8khRTA4UqxwT49qevZssCV62H0OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:cc:9d:b1:ea:db:0e:56:b2:d0:ec:12:18:56:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Validity
Not Before: Mar 26 10:00:41 2026 GMT
Not After : Mar 27 10:00:41 2026 GMT
Subject: CN=1ee68021e05382b265aae0e80345c30d43e0fde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:20:7f:c8:73:a9:1c:5f:e7:1f:0a:b3:d6:
c4:56:e9:c2:b7:92:7a:3e:6d:38:15:1f:96:6a:92:
fb:34:cb:28:18:bb:ee:75:76:a1:f9:8a:03:5f:44:
b4:f0:d6:31:21:af:2b:20:8b:e2:5d:7b:a3:03:39:
83:1d:e7:f0:8c:d1:28:15:c0:dd:08:bd:99:a2:7c:
50:b9:b8:da:e6:8f:07:5b:24:e4:93:42:ec:ae:d1:
33:bb:bc:8b:2f:8f:0a:06:16:d9:e0:eb:42:bf:a3:
1c:4d:71:2c:5a:71:71:1b:fd:ac:d9:f2:94:5a:52:
6f:4a:f2:d5:e5:02:c4:1f:0a:01:74:9f:5d:1d:41:
cd:7c:dd:1b:d1:64:f0:5b:f8:dc:62:20:90:b1:f7:
ff:83:31:5f:34:4b:a4:8f:7f:cd:24:65:cc:29:a9:
98:42:b6:73:1b:b1:53:44:e7:37:24:3c:8d:8d:91:
a8:db:2e:30:6a:93:65:9a:d3:9c:63:04:62:7f:eb:
95:5c:d4:84:46:22:66:33:05:ff:bf:e6:76:dc:ce:
d0:37:bf:bc:dc:c8:63:d3:10:92:38:28:63:9a:eb:
16:c2:90:2d:53:09:8a:13:78:2b:81:d0:02:f7:97:
da:ac:52:6c:a7:24:a5:88:c5:8e:69:6f:83:24:c6:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E6:80:21:E0:53:82:B2:65:AA:E0:E8:03:45:C3:0D:43:E0:FD:E1
X509v3 Authority Key Identifier:
keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fd:73:e6:9c:ef:e3:85:95:fc:d6:85:f8:2b:81:c7:b7:a8:
3c:42:a1:16:b1:aa:cd:1a:e9:44:ab:cb:8d:cb:5f:29:de:e3:
d1:be:d1:de:cc:84:ba:c4:90:5f:c0:f7:50:f0:85:4a:2b:e2:
42:65:d1:9d:b0:3b:f3:0a:c2:ba:68:ab:ab:e8:86:70:75:5b:
54:d7:a5:07:3a:58:88:bb:fc:d0:0f:6b:fa:14:6d:10:a6:a9:
17:8f:06:6c:c0:16:44:66:1c:7a:f0:a5:3e:dd:8f:41:08:ec:
5f:83:db:35:08:ac:4a:1f:3c:62:48:fa:26:51:c7:21:0e:ac:
67:8c:bd:a0:c1:a3:b2:07:6f:45:30:8b:09:64:3c:a8:78:ee:
ac:04:87:08:d6:a1:40:e6:1f:0f:0b:76:32:fc:b8:92:db:6b:
db:46:3f:83:9c:4e:52:86:d2:57:ba:b5:72:b7:05:f2:4a:9d:
6d:87:a6:3f:d2:0b:7c:5f:1c:07:b0:2a:00:94:f9:93:5f:81:
37:10:9e:d7:59:3a:e9:cf:0f:fa:7a:5b:33:b2:ff:a4:b6:0c:
8d:e3:02:dd:45:72:44:dc:0d:4f:14:a2:2a:a1:f3:0f:2d:8c:
3f:88:44:eb:11:57:f1:27:79:a8:85:fb:37:36:58:74:19:47:
dc:43:f5:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plsydserbDlay0OwSGFYHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMzQ5NGUwY2MxMmM3NWFlZDFkMDFkZWIxNWJlNGUyNjYy
YjQ4NWEwHhcNMjYwMzI2MTAwMDQxWhcNMjYwMzI3MTAwMDQxWjAzMTEwLwYDVQQD
EygxZWU2ODAyMWUwNTM4MmIyNjVhYWUwZTgwMzQ1YzMwZDQzZTBmZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVUgf8hzqRxf5x8Ks9bEVunCt5J6
Pm04FR+WapL7NMsoGLvudXah+YoDX0S08NYxIa8rIIviXXujAzmDHefwjNEoFcDd
CL2ZonxQubja5o8HWyTkk0LsrtEzu7yLL48KBhbZ4OtCv6McTXEsWnFxG/2s2fKU
WlJvSvLV5QLEHwoBdJ9dHUHNfN0b0WTwW/jcYiCQsff/gzFfNEukj3/NJGXMKamY
QrZzG7FTROc3JDyNjZGo2y4wapNlmtOcYwRif+uVXNSERiJmMwX/v+Z23M7QN7+8
3Mhj0xCSOChjmusWwpAtUwmKE3grgdAC95farFJspySliMWOaW+DJMZelwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7mgCHgU4KyZarg6ANFww1D4P3hMB8GA1UdIwQY
MBaAFOI0lODMEsda7R0B3rFb5OJmK0haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUt
MjI3NDBiZjJkNWVhLzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUtMjI3NDBiZjJkNWVh
LzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPf1z5pzv
44WV/NaF+CuBx7eoPEKhFrGqzRrpRKvLjctfKd7j0b7R3syEusSQX8D3UPCFSivi
QmXRnbA78wrCumirq+iGcHVbVNelBzpYiLv80A9r+hRtEKapF48GbMAWRGYcevCl
Pt2PQQjsX4PbNQisSh88Ykj6JlHHIQ6sZ4y9oMGjsgdvRTCLCWQ8qHjurASHCNah
QOYfDwt2Mvy4kttr20Y/g5xOUobSV7q1crcF8kqdbYemP9ILfF8cB7AqAJT5k1+B
NxCe11k66c8P+npbM7L/pLYMjeMC3UVyRNwNTxSiKqHzDy2MP4hE6xFX8Sd5qIX7
NzZYdBlH3EP1/A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:03 2026 by rpki-client