Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
File: MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft (raw, json)
Hash identifier: sorhoG6n6xV6aWKl0UPBaRrE2bxc5eGH7YgLGIqv600=
Subject key identifier: 3C:9E:4A:D6:B7:D0:EE:15:AA:AE:B6:73:EA:C8:72:54:32:ED:46:28
Authority key identifier: 30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
Certificate issuer: /CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Certificate serial: 019D265FE72BAF1B5B98670045957BF09AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
Manifest number: 0C7C
Signing time: Wed 25 Mar 2026 19:01:52 +0000
Manifest this update: Wed 25 Mar 2026 19:01:52 +0000
Manifest next update: Thu 26 Mar 2026 19:01:52 +0000
Files and hashes: 1: MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl (hash: X7jqQk2n6fvOnqvh7rYNxL9VY1lpXJhE2pUKpUuxkiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:e7:2b:af:1b:5b:98:67:00:45:95:7b:f0:9a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Validity
Not Before: Mar 25 19:01:52 2026 GMT
Not After : Mar 26 19:01:52 2026 GMT
Subject: CN=3c9e4ad6b7d0ee15aaaeb673eac8725432ed4628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:c2:61:67:49:64:30:69:79:b8:cf:0c:4f:
9d:18:03:a0:e3:98:47:49:4c:58:d2:29:ad:15:64:
71:d4:e9:67:52:92:a2:ab:6e:08:0e:39:0d:75:43:
09:c6:e4:22:72:3a:6f:30:ed:56:73:81:ea:d7:53:
66:b6:da:56:5b:c3:d8:ab:46:27:a6:79:a4:48:7f:
bf:14:b6:fe:2f:04:31:7b:1d:c8:4f:23:38:2c:ae:
d1:f1:d2:d2:04:61:c9:62:44:0c:73:09:2b:71:25:
20:9d:dd:42:63:07:1a:4c:f2:0e:1b:e5:f4:60:14:
92:97:86:e2:5c:53:12:90:06:71:bc:bd:34:0c:b3:
fe:69:9c:70:61:50:94:2b:e6:a2:a5:07:ab:1c:e1:
76:41:6c:1a:62:d0:d5:d0:b5:82:f4:50:2f:1c:3e:
2f:62:a4:4e:42:13:50:4a:2f:f9:49:71:cb:10:c6:
ef:0f:7c:27:e4:76:b4:bc:5d:5d:80:98:5c:b5:8b:
0e:c3:b7:e7:aa:57:89:10:6b:dd:08:bc:e1:3f:06:
a8:c7:ac:c4:b6:3a:dd:2c:20:e8:78:8b:bd:cf:00:
ee:36:a0:5a:91:da:82:92:1d:0d:74:73:69:11:7d:
26:b8:0c:8c:8b:9e:92:13:5b:0d:a0:c4:10:e9:13:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9E:4A:D6:B7:D0:EE:15:AA:AE:B6:73:EA:C8:72:54:32:ED:46:28
X509v3 Authority Key Identifier:
keyid:30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6f:e4:9c:56:6d:8a:99:de:d3:cc:2d:8b:dd:2a:4f:cf:32:
1a:80:fc:d3:44:4d:b3:4d:d5:1c:ab:57:3e:8a:9c:dc:d6:c5:
52:4d:ce:b2:0c:d9:e4:0a:3b:e0:97:b3:ed:fe:84:c7:e9:39:
f8:84:8b:a6:2e:28:90:80:e9:fe:00:ce:40:fe:a4:a5:b7:62:
b8:22:7a:85:f2:f1:e7:e9:f5:18:3a:d6:58:63:ad:1d:f1:51:
1c:ed:24:15:75:64:f8:45:00:77:2e:0d:d9:4e:a2:4b:be:c8:
fe:53:9e:a4:f5:00:bf:60:32:cf:4f:e9:0e:48:9f:e1:3e:83:
78:37:df:56:34:bd:22:25:ed:c5:7a:d7:d8:79:2d:67:58:88:
39:87:99:58:2c:f9:6b:f6:8e:ea:a5:76:77:6a:6d:7c:a4:c7:
63:83:fc:37:a2:fa:52:12:66:fe:db:9d:f4:8c:2b:02:90:ca:
61:76:fe:5b:58:3d:64:68:57:ea:12:18:14:da:07:00:14:1e:
63:9e:56:4e:65:78:c7:59:87:5b:39:0a:98:bc:52:e1:86:47:
e5:14:59:6a:66:3a:e6:aa:0c:8b:c8:c8:1e:97:dc:37:1e:ac:
56:fa:c5:b3:b0:8a:e2:1d:99:54:02:48:87:4b:fe:e3:91:e9:
b1:2a:3a:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX+crrxtbmGcARZV78Jr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMWUzZmNhNmYxMzYyOGU2ZWI4M2NmZmU1ZWQ4YTAxZWRk
NTllOGIwHhcNMjYwMzI1MTkwMTUyWhcNMjYwMzI2MTkwMTUyWjAzMTEwLwYDVQQD
EygzYzllNGFkNmI3ZDBlZTE1YWFhZWI2NzNlYWM4NzI1NDMyZWQ0NjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOXCYWdJZDBpebjPDE+dGAOg45hH
SUxY0imtFWRx1OlnUpKiq24IDjkNdUMJxuQicjpvMO1Wc4Hq11NmttpWW8PYq0Yn
pnmkSH+/FLb+LwQxex3ITyM4LK7R8dLSBGHJYkQMcwkrcSUgnd1CYwcaTPIOG+X0
YBSSl4biXFMSkAZxvL00DLP+aZxwYVCUK+aipQerHOF2QWwaYtDV0LWC9FAvHD4v
YqROQhNQSi/5SXHLEMbvD3wn5Ha0vF1dgJhctYsOw7fnqleJEGvdCLzhPwaox6zE
tjrdLCDoeIu9zwDuNqBakdqCkh0NdHNpEX0muAyMi56SE1sNoMQQ6RNFWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyeSta30O4Vqq62c+rIclQy7UYoMB8GA1UdIwQY
MBaAFDAeP8pvE2KObrg8/+XtigHt1Z6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85MmNlNGMtZjFjNS00YzhmLTk5ZGYt
ZDBkN2YyYjJhNWUwLzEvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC85MmNlNGMtZjFjNS00YzhmLTk5ZGYtZDBkN2YyYjJhNWUw
LzEvTUI0X3ltOFRZbzV1dUR6XzVlMktBZTNWbm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfm/knFZt
ipne08wti90qT88yGoD800RNs03VHKtXPoqc3NbFUk3OsgzZ5Ao74Jez7f6Ex+k5
+ISLpi4okIDp/gDOQP6kpbdiuCJ6hfLx5+n1GDrWWGOtHfFRHO0kFXVk+EUAdy4N
2U6iS77I/lOepPUAv2Ayz0/pDkif4T6DeDffVjS9IiXtxXrX2HktZ1iIOYeZWCz5
a/aO6qV2d2ptfKTHY4P8N6L6UhJm/tud9IwrApDKYXb+W1g9ZGhX6hIYFNoHABQe
Y55WTmV4x1mHWzkKmLxS4YZH5RRZamY65qoMi8jIHpfcNx6sVvrFs7CK4h2ZVAJI
h0v+45HpsSo6VQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:22 2026 by rpki-client