Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: upHcY1nsW7qayiASUfuP/vLnL3FCKBq4iOlQc+y5Wqg=
Subject key identifier: 9B:D2:00:37:FB:BF:99:10:34:DE:E2:D0:1D:B7:8E:38:33:8B:0A:EA
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 019D265F0BE5EA1BB9915FD161738931E1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0F3E
Signing time: Wed 25 Mar 2026 19:00:56 +0000
Manifest this update: Wed 25 Mar 2026 19:00:56 +0000
Manifest next update: Thu 26 Mar 2026 19:00:56 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: KzsEKP3MrY3K5XcFIhzBCIlgqSi1DWRm+oame3POjfM=)
2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:0b:e5:ea:1b:b9:91:5f:d1:61:73:89:31:e1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Mar 25 19:00:56 2026 GMT
Not After : Mar 26 19:00:56 2026 GMT
Subject: CN=9bd20037fbbf991034dee2d01db78e38338b0aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:22:d5:fe:e7:94:cf:58:7a:eb:98:d0:b5:
59:53:5c:e9:ec:ee:a3:1a:61:84:8c:b1:28:9a:16:
92:64:6a:a2:d2:43:67:d0:68:ef:72:0f:eb:0d:49:
dc:f7:de:f1:78:dc:6e:aa:a1:53:bd:38:74:d0:d6:
62:db:24:72:a8:81:77:e0:9e:0b:93:6d:9b:bd:4d:
65:98:13:13:65:b5:18:bc:05:48:e1:71:e0:e2:57:
97:af:23:41:fd:d9:6b:59:ad:89:61:5f:71:95:aa:
8f:c6:83:66:83:b9:63:5c:5d:e0:99:c7:eb:df:8f:
3d:5f:6f:95:cf:b6:2d:da:a4:44:fa:04:07:51:d0:
db:28:f0:0c:5d:79:3b:f5:ce:d5:22:92:e1:cc:9f:
46:38:46:0e:0a:63:8a:89:9c:7c:c0:ad:4a:c0:43:
c8:9f:6f:a9:75:71:96:02:71:92:89:da:47:9b:9f:
21:91:38:29:98:36:ea:ef:36:df:39:b3:f1:3d:67:
06:e7:f5:30:50:7a:98:ff:97:b5:de:0e:5b:81:f2:
9b:d9:a2:cf:65:fe:20:08:44:ea:fe:9d:e1:53:db:
d7:ea:40:d6:b1:79:7d:cf:39:30:e5:41:f7:1f:16:
95:34:3f:ef:01:f1:fa:f6:b5:00:96:7e:73:0e:2c:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D2:00:37:FB:BF:99:10:34:DE:E2:D0:1D:B7:8E:38:33:8B:0A:EA
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:42:f1:ce:0b:bf:78:7d:3a:75:5a:ca:e9:d7:f1:91:f0:e9:
56:c8:81:67:4a:a2:24:9b:50:a9:65:20:3f:90:04:f8:2b:3b:
c2:50:f8:f5:06:cc:28:af:8a:e9:da:7e:e5:8a:4a:e3:a9:76:
19:15:73:62:4f:98:fc:7c:5f:b8:f6:40:a0:d3:84:45:12:08:
fa:fa:2c:68:c0:e8:d6:d2:a8:a9:8f:d1:23:04:a6:d9:ce:c7:
ab:98:fc:68:99:06:f7:9e:eb:1a:d4:6f:28:98:99:eb:e8:31:
13:09:9e:0b:9c:92:73:d3:54:9b:ac:38:0f:f0:ad:ec:bf:48:
a1:8b:4f:07:c3:9e:b5:c0:85:63:fb:b6:f7:58:34:4f:cf:7b:
00:42:d4:b6:1a:62:eb:af:7f:e1:cc:57:05:0e:4a:6c:89:5e:
86:9a:7d:03:8e:1d:d3:74:b8:32:96:4e:8a:34:32:a0:de:89:
02:a9:cb:3c:59:98:fd:fb:38:33:6a:ba:36:9f:01:0e:ef:56:
75:60:35:4d:81:1c:47:86:ae:c4:a1:e3:ab:b2:e8:f4:fc:fd:
24:bb:d4:09:ba:f9:1d:fe:c9:9f:be:8f:5a:bc:bd:7f:1d:7a:
c0:a5:07:c2:b8:5b:6c:21:13:86:47:e5:18:15:2a:19:00:d9:
04:f9:79:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXwvl6hu5kV/RYXOJMeGnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYWVkMTQ4NGU5NmU0YmY3OTkzZTliODY3YjM0YzM0ZDZh
OGFlMzYwHhcNMjYwMzI1MTkwMDU2WhcNMjYwMzI2MTkwMDU2WjAzMTEwLwYDVQQD
Eyg5YmQyMDAzN2ZiYmY5OTEwMzRkZWUyZDAxZGI3OGUzODMzOGIwYWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0Qi1f7nlM9YeuuY0LVZU1zp7O6j
GmGEjLEomhaSZGqi0kNn0Gjvcg/rDUnc997xeNxuqqFTvTh00NZi2yRyqIF34J4L
k22bvU1lmBMTZbUYvAVI4XHg4leXryNB/dlrWa2JYV9xlaqPxoNmg7ljXF3gmcfr
3489X2+Vz7Yt2qRE+gQHUdDbKPAMXXk79c7VIpLhzJ9GOEYOCmOKiZx8wK1KwEPI
n2+pdXGWAnGSidpHm58hkTgpmDbq7zbfObPxPWcG5/UwUHqY/5e13g5bgfKb2aLP
Zf4gCETq/p3hU9vX6kDWsXl9zzkw5UH3HxaVND/vAfH69rUAln5zDiyKEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvSADf7v5kQNN7i0B23jjgziwrqMB8GA1UdIwQY
MBaAFOGu0UhOluS/eZPpuGezTDTWqK42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MjNhOTMtOGJiZC00NGFjLTg4YmQt
NGU3YmNhNTVmODIxLzEvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81MjNhOTMtOGJiZC00NGFjLTg4YmQtNGU3YmNhNTVmODIx
LzEvNGE3UlNFNlc1TDk1ay1tNFo3Tk1OTmFvcmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0Lxzgu/
eH06dVrK6dfxkfDpVsiBZ0qiJJtQqWUgP5AE+Cs7wlD49QbMKK+K6dp+5YpK46l2
GRVzYk+Y/HxfuPZAoNOERRII+vosaMDo1tKoqY/RIwSm2c7Hq5j8aJkG957rGtRv
KJiZ6+gxEwmeC5ySc9NUm6w4D/Ct7L9IoYtPB8OetcCFY/u291g0T897AELUthpi
669/4cxXBQ5KbIlehpp9A44d03S4MpZOijQyoN6JAqnLPFmY/fs4M2q6Np8BDu9W
dWA1TYEcR4auxKHjq7Lo9Pz9JLvUCbr5Hf7Jn76PWry9fx16wKUHwrhbbCEThkfl
GBUqGQDZBPl5oQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:53 2026 by rpki-client