Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
File: P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft (raw, json)
Hash identifier: 15J8da5aUMA6dsefjcBjeo9HTyxQbubeuDK0W2LzMI0=
Subject key identifier: B0:F8:50:A3:E4:E4:F7:59:0E:FA:5D:CE:9F:46:FA:65:C2:4A:C2:58
Authority key identifier: 3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8
Certificate issuer: /CN=3f8138fea066d6f504436001cc9d7f339db734c8
Certificate serial: 019D265F4317A6B53BDABC9415093C230B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
Manifest number: 0508
Signing time: Wed 25 Mar 2026 19:01:10 +0000
Manifest this update: Wed 25 Mar 2026 19:01:10 +0000
Manifest next update: Thu 26 Mar 2026 19:01:10 +0000
Files and hashes: 1: 56OuJAFLxYLycHQelVfe38ZXJQ4.roa (hash: nQFqa95YTGbs99rbUDdgmLON/4oj050R+MJmxkQyzH8=)
2: P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl (hash: T2n8vXw0W5Hyv5m3sjcfGyhsFxz4DAid7NrcYQyXotM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:43:17:a6:b5:3b:da:bc:94:15:09:3c:23:0b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8138fea066d6f504436001cc9d7f339db734c8
Validity
Not Before: Mar 25 19:01:10 2026 GMT
Not After : Mar 26 19:01:10 2026 GMT
Subject: CN=b0f850a3e4e4f7590efa5dce9f46fa65c24ac258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9a:4a:c1:9c:9d:0a:ab:32:df:9b:e6:bf:9e:
6b:1b:87:a8:da:11:13:44:81:14:dc:5e:25:77:f1:
04:38:59:8c:4b:20:03:09:e4:34:19:ef:56:29:51:
2a:96:26:a8:fd:f1:9d:08:7a:84:89:5f:d3:b8:b3:
5b:ef:e8:1b:56:76:35:9a:8a:75:9a:cf:aa:27:d5:
03:80:b1:4a:86:a8:a6:1c:b0:ec:9c:f4:83:fb:07:
68:c6:d5:62:f5:c6:55:fc:b9:c1:7b:10:55:c4:05:
6e:45:e4:bd:f2:2a:6f:c0:71:45:f6:ad:2a:ca:0d:
31:ed:46:23:f9:dc:3f:e2:ec:16:a3:56:e5:3e:08:
09:34:11:ab:c5:d1:3f:c2:42:66:a0:21:e2:ab:04:
3d:79:bf:d6:3f:f7:28:a6:6b:41:23:fa:8e:c2:8f:
84:7f:69:49:ca:93:2c:52:37:8c:dc:7a:35:54:a2:
5a:e0:a0:ce:ed:da:2b:50:3d:13:22:96:f5:c5:f6:
e3:3d:26:cb:32:95:c7:d1:4f:cb:00:61:d2:56:39:
e4:4f:2e:03:21:0e:43:6f:82:04:2b:0c:ae:e5:5e:
61:8c:11:d1:cf:b9:95:d6:bc:46:e8:48:4f:99:12:
49:34:3a:bc:c7:a6:08:83:cd:2e:e1:a2:70:36:70:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F8:50:A3:E4:E4:F7:59:0E:FA:5D:CE:9F:46:FA:65:C2:4A:C2:58
X509v3 Authority Key Identifier:
keyid:3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7f:00:b0:3d:8c:39:b8:ab:66:17:1e:96:f4:c2:fd:ea:d5:
fa:b0:b0:1d:f7:e5:7a:8a:cf:14:bc:4c:bb:26:f2:a1:01:a0:
ac:01:a7:14:91:ea:8a:76:f4:8c:8c:d8:51:05:61:ad:53:ae:
cb:18:f3:bb:a6:67:50:da:87:05:0c:b7:cd:d9:d7:fb:ac:c2:
21:47:ad:37:b5:c4:2c:c0:3a:ec:81:fd:d5:a2:e2:6c:65:8b:
16:87:e5:c8:54:00:b2:0d:95:b4:f1:de:03:69:ba:b2:78:d6:
f3:d5:9a:ad:a5:34:b6:5c:8f:9f:2d:bd:1a:18:89:55:0b:ea:
85:ce:22:62:69:21:7b:52:67:22:fe:bb:21:81:76:8e:9a:27:
38:e4:f7:5a:aa:5a:93:66:e1:c8:60:ac:21:a6:2d:e4:6a:97:
8d:ce:5d:82:37:c4:70:17:00:db:27:8e:e5:96:31:7d:63:d9:
a9:89:97:96:62:32:23:ec:10:c7:f6:de:96:9e:8c:c7:78:30:
a2:ff:a0:17:9a:ce:ab:37:7e:36:a2:aa:f6:3d:20:ca:e5:99:
31:8c:39:3a:8b:8b:ac:f4:0b:0b:a2:04:60:bd:59:c3:fd:ae:
d3:3a:60:47:cd:09:2b:59:77:ef:57:8a:7a:be:c5:1c:43:dc:
f5:76:7d:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX0MXprU72ryUFQk8IwtMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmODEzOGZlYTA2NmQ2ZjUwNDQzNjAwMWNjOWQ3ZjMzOWRi
NzM0YzgwHhcNMjYwMzI1MTkwMTEwWhcNMjYwMzI2MTkwMTEwWjAzMTEwLwYDVQQD
EyhiMGY4NTBhM2U0ZTRmNzU5MGVmYTVkY2U5ZjQ2ZmE2NWMyNGFjMjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZpKwZydCqsy35vmv55rG4eo2hET
RIEU3F4ld/EEOFmMSyADCeQ0Ge9WKVEqliao/fGdCHqEiV/TuLNb7+gbVnY1mop1
ms+qJ9UDgLFKhqimHLDsnPSD+wdoxtVi9cZV/LnBexBVxAVuReS98ipvwHFF9q0q
yg0x7UYj+dw/4uwWo1blPggJNBGrxdE/wkJmoCHiqwQ9eb/WP/copmtBI/qOwo+E
f2lJypMsUjeM3Ho1VKJa4KDO7dorUD0TIpb1xfbjPSbLMpXH0U/LAGHSVjnkTy4D
IQ5Db4IEKwyu5V5hjBHRz7mV1rxG6EhPmRJJNDq8x6YIg80u4aJwNnDQPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLD4UKPk5PdZDvpdzp9G+mXCSsJYMB8GA1UdIwQY
MBaAFD+BOP6gZtb1BENgAcydfzOdtzTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDRFNF9xQm0xdlVFUTJBQnpKMV9NNTIzTk1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8yNjE4ZjgtMTI2NC00MDExLTliODgt
ZTMyN2U1MjI3MDY2LzEvUDRFNF9xQm0xdlVFUTJBQnpKMV9NNTIzTk1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8yNjE4ZjgtMTI2NC00MDExLTliODgtZTMyN2U1MjI3MDY2
LzEvUDRFNF9xQm0xdlVFUTJBQnpKMV9NNTIzTk1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcX8AsD2M
ObirZhcelvTC/erV+rCwHffleorPFLxMuybyoQGgrAGnFJHqinb0jIzYUQVhrVOu
yxjzu6ZnUNqHBQy3zdnX+6zCIUetN7XELMA67IH91aLibGWLFoflyFQAsg2VtPHe
A2m6snjW89WaraU0tlyPny29GhiJVQvqhc4iYmkhe1JnIv67IYF2jponOOT3Wqpa
k2bhyGCsIaYt5GqXjc5dgjfEcBcA2yeO5ZYxfWPZqYmXlmIyI+wQx/belp6Mx3gw
ov+gF5rOqzd+NqKq9j0gyuWZMYw5OouLrPQLC6IEYL1Zw/2u0zpgR80JK1l371eK
er7FHEPc9XZ97Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:22 2026 by rpki-client