Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
File: C_4rJzg320FmbWipe8esN9zJbyA.mft (raw, json)
Hash identifier: YNpGIIN70abNljP5rlJ4ibdk44iahgM2Lc9DwVU+rug=
Subject key identifier: BC:74:49:07:75:26:32:A3:80:FD:64:48:9C:BF:63:B6:B2:EA:81:1E
Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
Certificate issuer: /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Certificate serial: 019D25F1050B366329CAA5BCC2C1773F2B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
Manifest number: 0654
Signing time: Wed 25 Mar 2026 17:00:45 +0000
Manifest this update: Wed 25 Mar 2026 17:00:45 +0000
Manifest next update: Thu 26 Mar 2026 17:00:45 +0000
Files and hashes: 1: 6ABbzKC7xD3f15f1nL7ehPPdv8g.roa (hash: vm92m0MvDsKxhJur0/wyRBU4n09f3ypTfzNsc2DUitY=)
2: C_4rJzg320FmbWipe8esN9zJbyA.crl (hash: 3eEiQZhFGVqY2dNuSQp3r8mMGjJMYfv/3HvlVVWYmoU=)
3: uWma75PdV6AVC83aCG-d5GXsBTA.roa (hash: l+sIuRGwU1mgUSZbtQoGfvEHgDWDmkYLosWZi/xYnJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:05:0b:36:63:29:ca:a5:bc:c2:c1:77:3f:2b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Validity
Not Before: Mar 25 17:00:45 2026 GMT
Not After : Mar 26 17:00:45 2026 GMT
Subject: CN=bc744907752632a380fd64489cbf63b6b2ea811e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:49:c6:a2:79:5d:9b:c2:d9:ba:15:2e:81:
da:7e:ea:c7:89:ab:ef:44:17:8b:a2:77:09:27:df:
62:9d:9b:e7:94:54:87:bd:ff:12:38:43:38:95:ab:
45:66:ac:bf:b5:8c:1c:ee:db:03:f1:12:81:57:59:
f2:cb:cf:23:1b:5c:1d:59:26:c5:33:16:bc:0f:fc:
0e:53:21:d4:60:28:11:bb:57:63:73:3e:56:73:be:
e5:80:31:b7:ec:fc:55:0a:fd:af:13:d9:f7:0b:85:
c6:c6:df:77:3a:1a:6e:f0:dd:0e:78:1c:0a:f1:44:
45:38:ce:8f:da:c5:6a:a8:7a:bc:b1:c0:4f:8b:a9:
86:97:84:45:15:74:4a:51:f7:08:d5:5f:5b:e2:7b:
48:e7:b0:56:66:8e:8d:4a:5f:dd:9e:1c:9f:a9:96:
c7:f6:bd:9b:82:15:dc:a5:82:45:7a:e1:f7:c4:04:
88:ef:28:3b:9c:dc:9e:de:b9:61:3c:d5:2f:3b:f6:
e1:1f:68:1d:ea:08:08:6b:1f:e8:2b:08:3d:1e:0a:
26:69:52:b0:5c:ec:ee:f0:49:c7:ca:4e:6a:47:26:
1d:ae:9e:5e:4e:66:ae:d7:83:9c:9f:6d:58:92:fa:
52:20:fc:65:c7:fc:f7:98:fb:95:12:fc:48:ae:65:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:74:49:07:75:26:32:A3:80:FD:64:48:9C:BF:63:B6:B2:EA:81:1E
X509v3 Authority Key Identifier:
keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fc:e9:4d:51:15:11:ac:95:0f:a3:21:85:d6:b3:93:4a:7a:
c2:e6:77:13:0c:98:f2:44:50:b5:d6:11:ee:1c:02:a8:57:75:
8e:4f:4f:36:ca:46:93:07:fd:61:df:14:9b:18:fb:bc:f7:03:
e3:de:60:a6:5d:14:72:02:71:3d:74:bc:24:40:c2:da:da:1e:
19:49:7f:5d:d4:9d:52:da:aa:34:07:5b:fb:20:5e:9c:21:4f:
f7:7a:68:f8:d7:08:94:11:76:ad:ec:09:0e:d7:c9:ef:cf:90:
16:21:bc:c2:d4:31:00:5b:18:5a:5a:98:8a:04:ff:34:6d:de:
0c:40:c3:15:96:72:9c:15:18:a3:2b:0f:8b:b1:67:54:df:ca:
9c:56:27:49:33:8c:ef:9a:44:19:35:c4:f0:2e:05:3f:62:29:
c2:1c:cf:19:55:2d:04:73:d6:01:be:17:15:cc:c2:a3:1b:e6:
15:bd:59:26:6b:41:7b:19:fa:0b:ac:f6:ec:23:81:0e:57:30:
01:2b:25:8b:63:3f:6e:b7:09:f0:65:02:f7:72:b9:2e:7c:84:
89:3c:f8:34:f3:fb:a1:25:99:ee:e2:d3:59:ef:95:1f:08:9f:
8f:b0:89:10:75:f2:9b:9f:36:d2:cd:57:3e:b6:d8:22:46:74:
68:61:6e:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8QULNmMpyqW8wsF3PysdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZmUyYjI3MzgzN2RiNDE2NjZkNjhhOTdiYzdhYzM3ZGNj
OTZmMjAwHhcNMjYwMzI1MTcwMDQ1WhcNMjYwMzI2MTcwMDQ1WjAzMTEwLwYDVQQD
EyhiYzc0NDkwNzc1MjYzMmEzODBmZDY0NDg5Y2JmNjNiNmIyZWE4MTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz19JxqJ5XZvC2boVLoHafurHiavv
RBeLoncJJ99inZvnlFSHvf8SOEM4latFZqy/tYwc7tsD8RKBV1nyy88jG1wdWSbF
Mxa8D/wOUyHUYCgRu1djcz5Wc77lgDG37PxVCv2vE9n3C4XGxt93Ohpu8N0OeBwK
8URFOM6P2sVqqHq8scBPi6mGl4RFFXRKUfcI1V9b4ntI57BWZo6NSl/dnhyfqZbH
9r2bghXcpYJFeuH3xASI7yg7nNye3rlhPNUvO/bhH2gd6ggIax/oKwg9HgomaVKw
XOzu8EnHyk5qRyYdrp5eTmau14Ocn21YkvpSIPxlx/z3mPuVEvxIrmUJmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLx0SQd1JjKjgP1kSJy/Y7ay6oEeMB8GA1UdIwQY
MBaAFAv+Kyc4N9tBZm1oqXvHrDfcyW8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEt
ZWIxZTkxNjQ0ZjJkLzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9mZWI5MjctN2E4My00MDNhLWExYzEtZWIxZTkxNjQ0ZjJk
LzEvQ180ckp6ZzMyMEZtYldpcGU4ZXNOOXpKYnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfzpTVEV
EayVD6Mhhdazk0p6wuZ3EwyY8kRQtdYR7hwCqFd1jk9PNspGkwf9Yd8Umxj7vPcD
495gpl0UcgJxPXS8JEDC2toeGUl/XdSdUtqqNAdb+yBenCFP93po+NcIlBF2rewJ
DtfJ78+QFiG8wtQxAFsYWlqYigT/NG3eDEDDFZZynBUYoysPi7FnVN/KnFYnSTOM
75pEGTXE8C4FP2IpwhzPGVUtBHPWAb4XFczCoxvmFb1ZJmtBexn6C6z27COBDlcw
ASsli2M/brcJ8GUC93K5LnyEiTz4NPP7oSWZ7uLTWe+VHwifj7CJEHXym5820s1X
PrbYIkZ0aGFuBw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:58 2026 by rpki-client