Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
File: 4n5m5APTHHlYM1KYFo3mCiFcDA8.mft (raw, json)
Hash identifier: KtAg6GoCTAlqkeCr0SYSHM1/Yz5cK+Da9+TDkWzdzho=
Subject key identifier: 3D:B5:19:B0:5F:01:9A:C5:98:AF:1B:21:A3:D9:D3:E2:56:93:7F:46
Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
Certificate issuer: /CN=e27e66e403d31c7958335298168de60a215c0c0f
Certificate serial: 019D27DFA89F6DEAA9EE020AEEF8ABD3B617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
Manifest number: 07E7
Signing time: Thu 26 Mar 2026 02:01:02 +0000
Manifest this update: Thu 26 Mar 2026 02:01:02 +0000
Manifest next update: Fri 27 Mar 2026 02:01:02 +0000
Files and hashes: 1: 4n5m5APTHHlYM1KYFo3mCiFcDA8.crl (hash: EmFrZ1Va496BtIf4aaPz2vt2pISWRF86W1029CWNBew=)
2: xeT78wcPTTpFTx_ZDSn-jPOj960.roa (hash: YEu+TOkba5EcfR4vL4O+vAIH2BMk3hjKJVmwS8XvNmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a8:9f:6d:ea:a9:ee:02:0a:ee:f8:ab:d3:b6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f
Validity
Not Before: Mar 26 02:01:02 2026 GMT
Not After : Mar 27 02:01:02 2026 GMT
Subject: CN=3db519b05f019ac598af1b21a3d9d3e256937f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:35:0e:09:1c:00:b1:85:1a:ab:ba:93:9d:
89:9d:54:17:4a:ae:ec:76:3e:fd:05:67:6a:1b:76:
f9:2d:50:7f:d8:2b:83:a5:f8:5f:8d:c3:a6:5c:13:
09:9d:00:bf:98:e1:bc:f0:0c:46:68:ca:48:6b:2f:
81:c2:9f:7e:4d:55:20:0f:db:90:cf:d5:16:a0:da:
2b:ba:18:d5:89:51:70:19:fb:f5:1a:8e:68:74:71:
ef:53:bd:64:23:71:4a:cf:d7:2e:3b:f0:f6:7e:8a:
e4:12:6e:d9:4e:28:7f:0a:e9:66:bd:cd:9c:a1:df:
b1:58:f7:95:f6:22:14:fa:c8:56:30:94:aa:cf:74:
92:9c:2c:84:55:b4:64:09:c8:f8:49:16:d2:2f:25:
47:76:75:bc:4a:da:a9:73:96:0d:2a:ff:7b:8a:13:
96:a5:04:a3:7d:e5:4f:5d:d2:37:f5:01:57:43:0c:
92:12:e5:75:b0:cf:c8:24:41:71:e4:a2:99:e5:4e:
b3:6e:9a:8a:c3:17:f4:6e:76:49:34:d1:83:ec:d8:
11:49:b7:c5:2c:c3:b8:62:01:77:6e:ea:e7:f4:4f:
aa:e4:be:d4:82:95:30:d3:23:1a:f1:ad:2e:64:ab:
c4:d7:23:b0:a1:b4:38:1b:6b:79:d7:16:3b:a5:40:
03:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B5:19:B0:5F:01:9A:C5:98:AF:1B:21:A3:D9:D3:E2:56:93:7F:46
X509v3 Authority Key Identifier:
keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:13:f2:d6:8c:a2:f6:ee:f5:04:d0:4c:da:dc:fe:ef:4c:06:
42:f8:a9:f9:5f:57:55:cf:fc:4a:56:5c:a8:62:e4:6c:ca:34:
49:92:28:45:8a:38:48:68:3f:48:88:35:d4:75:54:39:7b:2e:
e9:74:62:ac:03:6b:a1:1e:0f:5f:4b:65:94:f3:6b:07:17:6c:
1d:68:7a:37:dd:d3:16:93:c5:ef:42:9a:98:85:75:aa:e3:94:
2e:5e:2f:82:65:50:1a:db:80:48:ba:3f:0d:68:52:6b:ee:d9:
6c:14:5e:9c:d3:70:99:3c:6c:ec:7d:dd:34:b9:4e:29:a3:7f:
41:e5:c6:83:1c:96:53:53:56:f6:64:5c:9b:ac:22:c1:fd:57:
16:2c:b3:b8:cb:b8:c8:a6:0f:3d:fa:95:f8:ba:03:2c:98:3d:
5f:b5:c5:06:4e:2e:f5:b6:cd:02:28:52:d4:c1:70:63:46:b4:
f1:88:bc:05:7e:37:e7:cf:54:81:49:4c:27:01:89:cc:1f:d9:
fa:51:c8:c8:09:ec:36:cc:ac:b2:a0:b1:95:31:fa:f2:fb:a7:
be:fa:ab:ec:3b:8d:44:87:f6:ae:b9:22:47:58:a8:32:82:43:
58:a3:bb:43:b0:5a:65:a9:43:12:3a:70:c0:a2:a7:a9:f1:b8:
20:8b:a4:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n36ifbeqp7gIK7vir07YXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyN2U2NmU0MDNkMzFjNzk1ODMzNTI5ODE2OGRlNjBhMjE1
YzBjMGYwHhcNMjYwMzI2MDIwMTAyWhcNMjYwMzI3MDIwMTAyWjAzMTEwLwYDVQQD
EygzZGI1MTliMDVmMDE5YWM1OThhZjFiMjFhM2Q5ZDNlMjU2OTM3ZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPo1DgkcALGFGqu6k52JnVQXSq7s
dj79BWdqG3b5LVB/2CuDpfhfjcOmXBMJnQC/mOG88AxGaMpIay+Bwp9+TVUgD9uQ
z9UWoNoruhjViVFwGfv1Go5odHHvU71kI3FKz9cuO/D2forkEm7ZTih/Culmvc2c
od+xWPeV9iIU+shWMJSqz3SSnCyEVbRkCcj4SRbSLyVHdnW8Stqpc5YNKv97ihOW
pQSjfeVPXdI39QFXQwySEuV1sM/IJEFx5KKZ5U6zbpqKwxf0bnZJNNGD7NgRSbfF
LMO4YgF3burn9E+q5L7UgpUw0yMa8a0uZKvE1yOwobQ4G2t51xY7pUADBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD21GbBfAZrFmK8bIaPZ0+JWk39GMB8GA1UdIwQY
MBaAFOJ+ZuQD0xx5WDNSmBaN5gohXAwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNmE5NzEtZjJmZC00ZjJkLTgzMDMt
NmU2ZTc2ZjM3OTQ2LzEvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8yNmE5NzEtZjJmZC00ZjJkLTgzMDMtNmU2ZTc2ZjM3OTQ2
LzEvNG41bTVBUFRISGxZTTFLWUZvM21DaUZjREE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBPy1oyi
9u71BNBM2tz+70wGQvip+V9XVc/8SlZcqGLkbMo0SZIoRYo4SGg/SIg11HVUOXsu
6XRirANroR4PX0tllPNrBxdsHWh6N93TFpPF70KamIV1quOULl4vgmVQGtuASLo/
DWhSa+7ZbBRenNNwmTxs7H3dNLlOKaN/QeXGgxyWU1NW9mRcm6wiwf1XFiyzuMu4
yKYPPfqV+LoDLJg9X7XFBk4u9bbNAihS1MFwY0a08Yi8BX43589UgUlMJwGJzB/Z
+lHIyAnsNsyssqCxlTH68vunvvqr7DuNRIf2rrkiR1ioMoJDWKO7Q7BaZalDEjpw
wKKnqfG4IIukLg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:27 2026 by rpki-client