Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier: xw6xJA1/xPHVUS3KiO6ADpgev1dVHYZkT0frsWI2H50=
Subject key identifier: 4F:F3:A5:4A:6F:38:25:39:BE:AF:1A:2E:EA:B8:59:14:75:0B:C3:A9
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial: 019D29CE7E065E68A53B61FF18E1463DEB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number: 0F58
Signing time: Thu 26 Mar 2026 11:01:31 +0000
Manifest this update: Thu 26 Mar 2026 11:01:31 +0000
Manifest next update: Fri 27 Mar 2026 11:01:31 +0000
Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: Rm2jBqCeszwO8To/MZZIkdMUQRq8PX7mjNi2VML9NTI=)
2: sIZQ5tszAsQWV3tSj16L1GSVX6c.roa (hash: UbS6Ylynq2ME7l06L5T3TkFEta0v6LJ++TVobQTXGgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:7e:06:5e:68:a5:3b:61:ff:18:e1:46:3d:eb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Validity
Not Before: Mar 26 11:01:31 2026 GMT
Not After : Mar 27 11:01:31 2026 GMT
Subject: CN=4ff3a54a6f382539beaf1a2eeab85914750bc3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:bd:2c:d4:eb:3f:da:f6:81:1b:70:91:64:
5a:4e:a3:5c:a5:56:20:13:05:f1:7a:50:93:fd:23:
9b:7d:06:38:80:72:3f:61:ce:bc:1c:ac:22:3e:d7:
1f:c6:6c:89:0d:fa:89:3b:75:3e:45:09:41:64:ba:
59:f2:93:44:17:09:60:f1:47:86:eb:76:2f:06:6e:
c1:f7:89:58:36:7a:48:b1:18:c2:eb:c8:fe:96:ab:
bf:3d:90:b4:7d:64:57:08:ad:79:d6:c9:a2:aa:01:
44:55:f2:c5:6d:1c:b6:ae:b2:1c:2e:12:4a:c8:42:
d2:7f:52:97:f3:33:ae:b5:66:ce:81:e4:6e:d4:fb:
6b:15:4a:73:0a:0d:f6:4a:f8:41:eb:a2:d6:80:87:
94:6a:89:aa:96:5c:14:63:75:4d:46:d0:7b:31:74:
86:36:0a:91:f3:d9:d3:a9:ab:db:75:76:30:ee:e2:
95:6b:2e:ba:e5:82:96:d7:e0:eb:4a:1e:c3:65:80:
b8:d3:b2:17:65:59:fb:33:9d:2a:ad:03:0f:71:55:
79:64:d6:2e:9d:2d:da:23:1f:66:c8:f2:8c:e6:8b:
77:1f:ce:2e:03:8c:77:52:0b:f4:e1:2e:74:ff:ac:
71:b7:5e:55:02:86:13:52:9b:9b:61:75:4d:f0:e7:
2d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F3:A5:4A:6F:38:25:39:BE:AF:1A:2E:EA:B8:59:14:75:0B:C3:A9
X509v3 Authority Key Identifier:
keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:14:8a:45:ad:2e:f5:1b:69:a4:0e:33:38:c4:57:95:03:a8:
49:e9:3b:eb:a1:ee:fe:00:96:69:02:ce:b2:3b:44:53:7f:f8:
a0:0d:2d:c4:51:59:71:dd:b3:a5:82:24:ea:24:5d:16:d9:02:
bc:28:e2:76:ab:0b:93:6a:f0:9e:3c:39:8c:31:fd:34:11:07:
6b:06:30:ac:a1:5c:3f:7e:c7:6d:f7:6a:69:5d:c8:0f:c2:8e:
05:48:5f:3f:78:f1:6d:4e:85:34:23:17:d0:9d:39:9c:2f:92:
a9:6b:90:f9:da:d4:fe:89:f0:e2:47:9f:b3:a8:9c:b1:54:00:
53:29:07:4c:9b:a5:fe:51:31:9d:a9:f8:1c:a4:28:9c:30:82:
c5:0c:60:95:28:4d:93:01:d0:23:80:88:93:b5:83:e2:8f:1e:
ce:a6:86:24:58:bc:2f:22:cc:05:67:23:88:a5:39:4a:5b:8f:
11:1b:b9:bc:1d:17:bb:3e:7b:da:92:23:ef:45:c8:2e:1e:00:
af:93:f5:4b:1a:a6:dd:a3:7e:c8:cf:2d:90:5a:a7:03:d6:84:
21:3b:2c:22:f6:ca:b0:9a:9d:47:6f:4a:4b:08:63:f0:10:e5:
94:71:91:14:7f:bb:98:43:78:94:57:a6:28:6b:49:a6:25:72:
74:56:d6:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzn4GXmilO2H/GOFGPeuEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMmNmYzdkYThmYTc0YTE2ZGQzOGMxN2MyMGEwMTkyY2Ji
MmQzZmUwHhcNMjYwMzI2MTEwMTMxWhcNMjYwMzI3MTEwMTMxWjAzMTEwLwYDVQQD
Eyg0ZmYzYTU0YTZmMzgyNTM5YmVhZjFhMmVlYWI4NTkxNDc1MGJjM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1By9LNTrP9r2gRtwkWRaTqNcpVYg
EwXxelCT/SObfQY4gHI/Yc68HKwiPtcfxmyJDfqJO3U+RQlBZLpZ8pNEFwlg8UeG
63YvBm7B94lYNnpIsRjC68j+lqu/PZC0fWRXCK151smiqgFEVfLFbRy2rrIcLhJK
yELSf1KX8zOutWbOgeRu1PtrFUpzCg32SvhB66LWgIeUaomqllwUY3VNRtB7MXSG
NgqR89nTqavbdXYw7uKVay665YKW1+DrSh7DZYC407IXZVn7M50qrQMPcVV5ZNYu
nS3aIx9myPKM5ot3H84uA4x3Ugv04S50/6xxt15VAoYTUpubYXVN8OctQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/zpUpvOCU5vq8aLuq4WRR1C8OpMB8GA1UdIwQY
MBaAFOEs/H2o+nShbdOMF8IKAZLLstP+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQt
MjI3MmI0ZGJhYTYyLzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9hNmFlZmYtOWI5YS00YzE4LTk0NzQtMjI3MmI0ZGJhYTYy
LzEvNFN6OGZhajZkS0Z0MDR3WHdnb0Jrc3V5MF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxSKRa0u
9RtppA4zOMRXlQOoSek766Hu/gCWaQLOsjtEU3/4oA0txFFZcd2zpYIk6iRdFtkC
vCjidqsLk2rwnjw5jDH9NBEHawYwrKFcP37HbfdqaV3ID8KOBUhfP3jxbU6FNCMX
0J05nC+SqWuQ+drU/onw4kefs6icsVQAUykHTJul/lExnan4HKQonDCCxQxglShN
kwHQI4CIk7WD4o8ezqaGJFi8LyLMBWcjiKU5SluPERu5vB0Xuz572pIj70XILh4A
r5P1Sxqm3aN+yM8tkFqnA9aEITssIvbKsJqdR29KSwhj8BDllHGRFH+7mEN4lFem
KGtJpiVydFbWBQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:40 2026 by rpki-client