Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
File: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft (raw, json)
Hash identifier: Met/Bp7B1ZNQWw8FbeQKtxsyttkMrNYRciCPxEkZw9k=
Subject key identifier: 88:94:1F:AA:57:DD:77:5E:2C:82:5D:1C:DC:85:61:B1:71:84:DC:0F
Authority key identifier: E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6
Certificate issuer: /CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
Certificate serial: 019D27A8FE185E0DEC9DFE79EB8F3A749B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
Manifest number: 0325
Signing time: Thu 26 Mar 2026 01:01:19 +0000
Manifest this update: Thu 26 Mar 2026 01:01:19 +0000
Manifest next update: Fri 27 Mar 2026 01:01:19 +0000
Files and hashes: 1: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl (hash: VtpR7ecMJcnCNrm2CvDzNtDrmAKbOdvscRfB8OXy0F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:fe:18:5e:0d:ec:9d:fe:79:eb:8f:3a:74:9b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
Validity
Not Before: Mar 26 01:01:19 2026 GMT
Not After : Mar 27 01:01:19 2026 GMT
Subject: CN=88941faa57dd775e2c825d1cdc8561b17184dc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:26:ad:1a:ba:2d:9c:fb:89:91:eb:1d:da:
50:64:8c:06:d7:9c:eb:62:9b:ba:cb:ff:cc:62:b6:
d5:41:85:0d:81:e4:16:92:36:99:cd:60:8a:d8:dd:
04:8a:63:67:cf:05:34:3a:2f:76:48:61:c7:f3:e3:
78:e8:a7:32:9d:47:aa:20:ea:6b:96:c5:01:bd:a5:
f0:de:cc:76:88:19:71:02:93:cc:a0:35:3f:a1:9f:
42:dd:3c:82:f7:6a:67:a1:68:99:9a:45:8f:ba:d9:
21:45:e9:ee:70:82:0e:31:8b:3e:91:8e:f6:3e:49:
a7:88:11:aa:a0:f4:13:25:91:44:0b:70:f6:8f:67:
92:cd:39:0a:89:70:97:55:91:f4:4b:4a:b0:cb:87:
ec:0f:22:09:40:80:c1:11:42:4b:ee:c6:5e:7a:c2:
2d:c7:52:e0:ca:05:65:5c:f0:29:cb:2c:79:f0:f2:
df:ea:2f:df:38:fa:0b:92:36:59:e3:58:8a:c7:97:
72:12:8c:cd:e5:f4:10:06:2d:a3:16:05:28:ef:a2:
39:82:71:d2:1e:4e:7e:58:6e:36:3f:a7:55:9f:19:
f2:62:e7:0d:bd:ee:ac:44:a6:ad:99:96:42:65:48:
90:e2:c5:fb:cd:45:bb:c5:8e:ac:b8:c8:70:e6:ce:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:94:1F:AA:57:DD:77:5E:2C:82:5D:1C:DC:85:61:B1:71:84:DC:0F
X509v3 Authority Key Identifier:
keyid:E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2d:d4:2f:c8:7f:f8:f3:e6:86:3e:7e:9e:25:43:02:84:25:
e2:eb:1d:71:a1:59:c4:59:97:7f:06:17:13:c9:2a:3d:59:d0:
8d:2d:4e:df:0c:e9:49:87:36:1d:3d:04:f6:a5:d0:18:0f:ce:
31:19:ea:99:2c:35:b4:5e:65:9a:ac:8f:34:96:83:68:b4:6b:
cb:75:c6:94:75:78:86:61:c3:d5:fe:1c:59:95:d8:6a:56:81:
d1:7c:11:73:c0:b7:ff:3e:dd:45:32:ef:dc:f4:e2:fd:57:30:
30:31:6b:e5:be:84:d8:aa:be:ac:d2:25:ba:6c:7f:2c:29:db:
19:d6:92:2a:85:3c:03:01:67:4c:e6:9a:f2:3f:3d:b9:44:81:
63:56:f0:90:23:f7:b7:98:d9:0b:db:8a:d0:72:28:b0:37:bf:
3a:75:b6:de:57:e0:35:cb:f2:d6:3d:6c:70:3e:f0:e6:09:4e:
c2:32:6c:84:25:d4:78:11:f0:ca:ce:3d:1e:c2:0e:a0:ca:ca:
02:38:b0:00:a5:41:0b:0e:17:9d:61:b4:51:c6:73:65:25:af:
4b:53:b0:51:10:18:3f:47:3c:59:de:0f:85:e5:c6:eb:84:77:
1b:39:bb:90:2a:ae:52:98:03:e1:6e:37:a1:be:1c:81:2e:11:
59:3b:d1:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqP4YXg3snf556486dJueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMWJjODc0YWZjMjk5Y2YxMGU1YjE3ZGM4YTQzYTI0ZmI5
YzRhZTYwHhcNMjYwMzI2MDEwMTE5WhcNMjYwMzI3MDEwMTE5WjAzMTEwLwYDVQQD
Eyg4ODk0MWZhYTU3ZGQ3NzVlMmM4MjVkMWNkYzg1NjFiMTcxODRkYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjkmrRq6LZz7iZHrHdpQZIwG15zr
Ypu6y//MYrbVQYUNgeQWkjaZzWCK2N0EimNnzwU0Oi92SGHH8+N46KcynUeqIOpr
lsUBvaXw3sx2iBlxApPMoDU/oZ9C3TyC92pnoWiZmkWPutkhRenucIIOMYs+kY72
PkmniBGqoPQTJZFEC3D2j2eSzTkKiXCXVZH0S0qwy4fsDyIJQIDBEUJL7sZeesIt
x1LgygVlXPApyyx58PLf6i/fOPoLkjZZ41iKx5dyEozN5fQQBi2jFgUo76I5gnHS
Hk5+WG42P6dVnxnyYucNve6sRKatmZZCZUiQ4sX7zUW7xY6suMhw5s5CWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiUH6pX3XdeLIJdHNyFYbFxhNwPMB8GA1UdIwQY
MBaAFOAbyHSvwpnPEOWxfcikOiT7nErmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NzQwNTktYWRiOC00ZTY5LTkxODAt
NWM4NTdhZjE5MTg4LzEvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80NzQwNTktYWRiOC00ZTY5LTkxODAtNWM4NTdhZjE5MTg4
LzEvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAji3UL8h/
+PPmhj5+niVDAoQl4usdcaFZxFmXfwYXE8kqPVnQjS1O3wzpSYc2HT0E9qXQGA/O
MRnqmSw1tF5lmqyPNJaDaLRry3XGlHV4hmHD1f4cWZXYalaB0XwRc8C3/z7dRTLv
3PTi/VcwMDFr5b6E2Kq+rNIlumx/LCnbGdaSKoU8AwFnTOaa8j89uUSBY1bwkCP3
t5jZC9uK0HIosDe/OnW23lfgNcvy1j1scD7w5glOwjJshCXUeBHwys49HsIOoMrK
AjiwAKVBCw4XnWG0UcZzZSWvS1OwURAYP0c8Wd4PheXG64R3Gzm7kCquUpgD4W43
ob4cgS4RWTvR8w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:34 2026 by rpki-client