Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File: u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier: F0ni60B6+QegJALTdPAdB/CUrbDXdTE8BxuhjW5zc0E=
Subject key identifier: AA:B9:AE:51:45:55:18:D0:E8:14:77:CC:FA:A5:2A:68:6C:98:52:A8
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer: /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial: 019D273AAF008779E24665E51F833537806A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number: 1280
Signing time: Wed 25 Mar 2026 23:00:50 +0000
Manifest this update: Wed 25 Mar 2026 23:00:50 +0000
Manifest next update: Thu 26 Mar 2026 23:00:50 +0000
Files and hashes: 1: e7qW7ktzFbhQzttwga3E9zXgNCo.roa (hash: ROhx5VIRKogH2P7o1oUw2zoKl8d9a5YmW7HEMyeGDjI=)
2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: xbM/UDo6H9jf/6RdsvPtXBfJ8+PUJXmoscBjIdi9spA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:af:00:87:79:e2:46:65:e5:1f:83:35:37:80:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Validity
Not Before: Mar 25 23:00:50 2026 GMT
Not After : Mar 26 23:00:50 2026 GMT
Subject: CN=aab9ae51455518d0e81477ccfaa52a686c9852a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:3b:fe:80:6e:47:9e:4f:ed:57:17:6b:8e:
c9:25:86:b8:60:4f:c7:4a:46:56:ee:bf:92:3b:93:
fb:e6:84:5f:db:68:3b:eb:75:85:30:ac:16:04:3e:
65:45:b5:40:35:ab:4f:04:a1:fe:53:fc:6f:df:4b:
a6:c0:3b:fd:92:0b:1e:01:31:38:13:27:be:b3:cc:
60:39:a1:bd:e7:98:d7:80:ec:d2:16:66:3c:dd:82:
00:22:a0:b9:01:e5:3a:19:08:e7:41:40:ed:25:7f:
3e:5e:19:fa:83:a9:d1:89:cd:1f:1b:fe:67:75:e4:
73:fe:af:f5:81:ab:50:39:69:54:16:8b:2b:ab:b7:
a3:c5:7f:4a:37:2f:09:6f:35:11:33:a9:09:fa:93:
f7:6e:c2:97:d3:6f:2c:8a:08:67:88:2f:16:04:16:
2b:05:60:e8:9e:9b:3d:39:b7:2b:2a:fa:43:a5:74:
c6:08:e7:bf:72:82:53:56:95:b8:88:63:a8:19:3c:
42:91:5a:4e:0c:47:6c:62:bc:16:8d:de:e4:1e:3d:
49:7b:5e:ec:66:7c:3b:b1:eb:c9:be:1a:69:4f:3a:
de:d8:54:d5:17:7a:67:9c:b8:0f:a9:ea:e2:1e:72:
fb:21:df:21:a3:e3:80:a9:df:f1:6b:c0:c3:17:f8:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B9:AE:51:45:55:18:D0:E8:14:77:CC:FA:A5:2A:68:6C:98:52:A8
X509v3 Authority Key Identifier:
keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:be:7f:4e:88:43:58:e6:7a:5e:d1:01:ad:17:74:c6:43:a1:
ee:b4:f8:8a:c9:87:f0:d5:0e:5e:fe:33:96:69:51:6e:60:c0:
a7:79:72:bb:83:3a:56:46:f5:9b:47:6f:04:2d:2c:e7:e1:1c:
85:30:a0:b9:71:97:22:01:c2:b1:1b:e1:52:e2:ec:a9:d6:66:
f3:4d:38:ea:cb:e0:5d:e3:20:46:bd:dd:f4:5b:b1:82:e4:76:
a7:79:83:6a:89:94:f4:66:d3:2b:85:95:22:d6:e2:78:6f:0e:
3b:73:3a:3e:2f:2a:1b:2a:5b:f8:65:39:2f:9d:e0:83:8f:fc:
33:b6:6c:ee:d4:1f:2f:fb:56:11:be:fa:8a:7f:9b:d6:ee:0f:
95:fa:17:d9:be:9a:89:1e:52:48:76:49:36:a3:4b:3a:be:46:
09:35:c4:4d:9e:35:9f:95:a1:c5:b6:5a:e8:4d:a5:32:be:86:
d7:2c:ac:da:12:b1:15:9a:3c:a2:dc:10:3c:92:16:b7:71:7c:
9f:ea:e3:81:42:72:a6:fc:bc:cc:89:27:3d:56:7e:95:29:c4:
42:81:23:10:98:44:16:77:c5:cf:23:c7:bb:40:e2:52:d6:f7:
0d:c1:ea:13:89:87:11:ee:f8:62:c2:5a:cf:fe:6e:38:b7:60:
b1:b8:85:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOq8Ah3niRmXlH4M1N4BqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODJiOGQzYzFiMGY3OGMzYTE5ZjYxNjRlYjI4MjFlMjMw
Y2ZlNGUwHhcNMjYwMzI1MjMwMDUwWhcNMjYwMzI2MjMwMDUwWjAzMTEwLwYDVQQD
EyhhYWI5YWU1MTQ1NTUxOGQwZTgxNDc3Y2NmYWE1MmE2ODZjOTg1MmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMY7/oBuR55P7VcXa47JJYa4YE/H
SkZW7r+SO5P75oRf22g763WFMKwWBD5lRbVANatPBKH+U/xv30umwDv9kgseATE4
Eye+s8xgOaG955jXgOzSFmY83YIAIqC5AeU6GQjnQUDtJX8+Xhn6g6nRic0fG/5n
deRz/q/1gatQOWlUFosrq7ejxX9KNy8JbzURM6kJ+pP3bsKX028sighniC8WBBYr
BWDonps9ObcrKvpDpXTGCOe/coJTVpW4iGOoGTxCkVpODEdsYrwWjd7kHj1Je17s
Znw7sevJvhppTzre2FTVF3pnnLgPqeriHnL7Id8ho+OAqd/xa8DDF/hRPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq5rlFFVRjQ6BR3zPqlKmhsmFKoMB8GA1UdIwQY
MBaAFLuCuNPBsPeMOhn2Fk6ygh4jDP5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQt
YTEzZjQ0ODFiYzZjLzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQtYTEzZjQ0ODFiYzZj
LzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt75/TohD
WOZ6XtEBrRd0xkOh7rT4ismH8NUOXv4zlmlRbmDAp3lyu4M6Vkb1m0dvBC0s5+Ec
hTCguXGXIgHCsRvhUuLsqdZm80046svgXeMgRr3d9FuxguR2p3mDaomU9GbTK4WV
ItbieG8OO3M6Pi8qGypb+GU5L53gg4/8M7Zs7tQfL/tWEb76in+b1u4PlfoX2b6a
iR5SSHZJNqNLOr5GCTXETZ41n5WhxbZa6E2lMr6G1yys2hKxFZo8otwQPJIWt3F8
n+rjgUJypvy8zIknPVZ+lSnEQoEjEJhEFnfFzyPHu0DiUtb3DcHqE4mHEe74YsJa
z/5uOLdgsbiFAQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:18:09 2026 by rpki-client