Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
File: 4tNxxKeqqFX4zDsa6oAilCCoDyA.mft (raw, json)
Hash identifier: 1jNswOCWuF5KjSu8gDgcr3eaJJIOk1fEppu/BkzOIe0=
Subject key identifier: F9:8D:B9:0F:87:CE:51:46:9D:E0:2F:5E:D1:1F:CA:23:05:35:1D:66
Authority key identifier: E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
Certificate issuer: /CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Certificate serial: 019D296119E92DC245A123070E0F5C6343CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 09:02:02 +0000
Manifest this update: Thu 26 Mar 2026 09:02:02 +0000
Manifest next update: Fri 27 Mar 2026 09:02:02 +0000
Files and hashes: 1: 4tNxxKeqqFX4zDsa6oAilCCoDyA.crl (hash: KLuQ9SlhMFtYIHUPqry0WUmIs3O1KwAE27KVPKS/aLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:19:e9:2d:c2:45:a1:23:07:0e:0f:5c:63:43:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Validity
Not Before: Mar 26 09:02:02 2026 GMT
Not After : Mar 27 09:02:02 2026 GMT
Subject: CN=f98db90f87ce51469de02f5ed11fca2305351d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:51:60:ac:6b:71:93:b7:e7:d3:12:cf:84:
53:69:30:44:96:5b:21:04:91:ac:d1:74:18:23:38:
06:b8:bf:5f:d1:ac:4b:35:15:aa:35:21:9a:a1:d9:
cb:58:80:e8:7e:90:3a:21:02:b7:20:b6:15:64:37:
8c:dc:fb:e6:48:90:06:f7:eb:ae:aa:6b:ca:3f:4e:
41:9d:f3:e8:96:d3:56:52:a0:bf:2a:22:55:89:a9:
70:ed:6d:a3:ad:a1:ca:de:f3:41:32:d8:11:a7:21:
1b:77:6e:fe:32:e6:dd:76:fb:51:f4:db:83:c7:2a:
d8:be:f2:b7:b4:3a:e9:a7:8a:39:85:a6:e3:97:da:
6a:4e:36:14:e2:2c:f6:3a:6c:d6:44:82:d0:c3:d9:
98:55:a1:1e:dd:ea:1b:f8:86:f7:67:bb:20:81:9d:
22:ca:26:92:43:34:ce:af:0c:54:eb:4c:a4:65:d1:
64:2f:0e:6b:4e:ba:ca:39:51:df:c6:2f:83:2d:e9:
47:8b:da:c5:ee:e4:04:ee:f9:3c:e2:ce:65:83:5b:
56:94:08:f0:b1:f6:3e:60:9e:4d:28:05:3f:b8:b1:
16:72:f3:50:3a:31:ad:87:5d:de:b9:8c:95:bd:1c:
78:07:06:03:ec:fe:f0:d2:00:39:bb:f4:24:f2:05:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8D:B9:0F:87:CE:51:46:9D:E0:2F:5E:D1:1F:CA:23:05:35:1D:66
X509v3 Authority Key Identifier:
keyid:E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d5:2d:bb:04:fc:20:3a:cf:30:74:31:ed:28:9d:fd:3a:28:
e7:9e:c9:58:98:b9:74:4e:fe:0b:c4:a7:11:87:eb:3e:23:69:
46:1b:1a:74:f6:40:28:ee:03:01:3c:04:8a:a1:f8:2b:a3:71:
cb:7f:51:97:80:2f:d7:6f:4c:c1:67:4f:12:13:b7:61:2d:be:
b6:b7:9f:33:23:27:47:29:63:4a:8f:96:62:38:1d:c8:04:bf:
a4:ef:99:60:65:e2:37:a1:9b:7c:5c:57:72:2a:41:0d:91:ae:
1a:6c:1a:c4:08:44:68:5c:94:f4:19:7e:16:7b:49:67:ac:4d:
8e:fa:51:9a:6f:bd:fd:41:36:3c:0a:61:08:b5:77:3c:8d:a8:
e1:3f:aa:84:ea:4f:5b:08:83:4d:6f:77:0a:2c:d9:81:81:27:
af:ef:93:c4:c2:68:1a:e9:29:62:b7:fe:51:18:2f:18:7f:54:
dd:f8:95:06:74:46:e0:00:96:80:56:1b:e2:71:a1:53:1b:b5:
42:f6:7c:90:ee:0a:f9:57:b4:eb:49:1b:ba:f9:46:e9:d7:4f:
3b:f0:db:fd:7b:61:f3:db:6a:ed:93:74:de:4f:cc:d0:4d:70:
b0:10:83:72:34:1b:c5:e0:b1:dc:d8:65:ce:8b:b2:95:6c:c2:
45:24:50:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYRnpLcJFoSMHDg9cY0POMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDM3MWM0YTdhYWE4NTVmOGNjM2IxYWVhODAyMjk0MjBh
ODBmMjAwHhcNMjYwMzI2MDkwMjAyWhcNMjYwMzI3MDkwMjAyWjAzMTEwLwYDVQQD
EyhmOThkYjkwZjg3Y2U1MTQ2OWRlMDJmNWVkMTFmY2EyMzA1MzUxZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRlRYKxrcZO359MSz4RTaTBEllsh
BJGs0XQYIzgGuL9f0axLNRWqNSGaodnLWIDofpA6IQK3ILYVZDeM3PvmSJAG9+uu
qmvKP05BnfPoltNWUqC/KiJVialw7W2jraHK3vNBMtgRpyEbd27+MubddvtR9NuD
xyrYvvK3tDrpp4o5habjl9pqTjYU4iz2OmzWRILQw9mYVaEe3eob+Ib3Z7sggZ0i
yiaSQzTOrwxU60ykZdFkLw5rTrrKOVHfxi+DLelHi9rF7uQE7vk84s5lg1tWlAjw
sfY+YJ5NKAU/uLEWcvNQOjGth13euYyVvRx4BwYD7P7w0gA5u/Qk8gXMYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmNuQ+HzlFGneAvXtEfyiMFNR1mMB8GA1UdIwQY
MBaAFOLTccSnqqhV+Mw7GuqAIpQgqA8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHROeHhLZXFxRlg0ekRzYTZvQWlsQ0NvRHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mZWFhMzAtMTQyYS00ZmUwLWFhYjkt
OTA3YTU4Yzk5NGMyLzEvNHROeHhLZXFxRlg0ekRzYTZvQWlsQ0NvRHlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mZWFhMzAtMTQyYS00ZmUwLWFhYjktOTA3YTU4Yzk5NGMy
LzEvNHROeHhLZXFxRlg0ekRzYTZvQWlsQ0NvRHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntUtuwT8
IDrPMHQx7Sid/Too557JWJi5dE7+C8SnEYfrPiNpRhsadPZAKO4DATwEiqH4K6Nx
y39Rl4Av129MwWdPEhO3YS2+trefMyMnRyljSo+WYjgdyAS/pO+ZYGXiN6GbfFxX
cipBDZGuGmwaxAhEaFyU9Bl+FntJZ6xNjvpRmm+9/UE2PAphCLV3PI2o4T+qhOpP
WwiDTW93CizZgYEnr++TxMJoGukpYrf+URgvGH9U3fiVBnRG4ACWgFYb4nGhUxu1
QvZ8kO4K+Ve060kbuvlG6ddPO/Db/Xth89tq7ZN03k/M0E1wsBCDcjQbxeCx3Nhl
zouylWzCRSRQuA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:37 2026 by rpki-client