Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft
File: 4YpwGxuHPrjfflleMt8fBxMJ4vE.mft (raw, json)
Hash identifier: jm47/ZwepP+4BgpN1yZ9MprwPEEumRDJFuJQ6SN6HJ8=
Subject key identifier: 5E:FF:B6:FA:07:53:30:6B:07:5A:9F:D8:8F:5C:C3:33:8D:44:94:A5
Authority key identifier: E1:8A:70:1B:1B:87:3E:B8:DF:7E:59:5E:32:DF:1F:07:13:09:E2:F1
Certificate issuer: /CN=e18a701b1b873eb8df7e595e32df1f071309e2f1
Certificate serial: 019D2703C457CE9E11B0428706B98306C0FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YpwGxuHPrjfflleMt8fBxMJ4vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft
Manifest number: B7
Signing time: Wed 25 Mar 2026 22:00:51 +0000
Manifest this update: Wed 25 Mar 2026 22:00:51 +0000
Manifest next update: Thu 26 Mar 2026 22:00:51 +0000
Files and hashes: 1: 4YpwGxuHPrjfflleMt8fBxMJ4vE.crl (hash: wCHqpTlREi58WqS6WQMx5XWdE+mZ6hMU+hRlTlxCDmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YpwGxuHPrjfflleMt8fBxMJ4vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c4:57:ce:9e:11:b0:42:87:06:b9:83:06:c0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18a701b1b873eb8df7e595e32df1f071309e2f1
Validity
Not Before: Mar 25 22:00:51 2026 GMT
Not After : Mar 26 22:00:51 2026 GMT
Subject: CN=5effb6fa0753306b075a9fd88f5cc3338d4494a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:dc:47:8b:f5:6b:f4:fc:3b:6b:85:d5:be:
e9:7a:f0:71:86:82:32:f7:42:2b:32:8b:eb:bb:29:
b2:d0:28:ab:82:6e:46:05:b0:1c:de:db:27:44:d9:
84:ba:e5:03:31:a5:53:fa:c0:b4:31:4a:b4:1b:a7:
7a:99:cb:47:e7:31:6e:c4:bc:d0:3f:0b:96:87:22:
bb:3e:80:fc:6c:38:0a:1f:14:13:fc:df:64:79:76:
5a:39:06:a8:d7:31:91:36:85:da:cf:ef:7d:32:eb:
37:72:ef:c9:0e:da:d2:3a:5c:84:68:ee:31:18:4c:
8d:b8:93:8b:66:98:fc:93:31:4e:c5:d9:65:7a:3b:
f9:4e:8d:de:a2:be:76:a3:8f:c8:da:df:e2:f3:03:
cb:dc:0b:06:88:eb:b2:1b:7c:d4:a4:84:e5:84:ff:
ab:e6:e1:ce:19:5f:69:4d:82:af:88:b4:aa:16:37:
b9:58:49:6f:f4:e1:82:f2:63:99:8e:ec:71:3b:87:
98:72:77:71:cc:54:d2:72:06:3a:0f:0e:c1:2f:f5:
70:ff:3d:ec:80:cc:30:28:e0:c0:59:8b:8a:2b:f4:
d9:e2:de:80:22:9d:9a:c2:4c:18:d5:4c:c7:6c:4b:
b4:5b:b1:35:79:d0:5f:0e:ac:90:bd:33:6c:0e:ce:
2a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FF:B6:FA:07:53:30:6B:07:5A:9F:D8:8F:5C:C3:33:8D:44:94:A5
X509v3 Authority Key Identifier:
keyid:E1:8A:70:1B:1B:87:3E:B8:DF:7E:59:5E:32:DF:1F:07:13:09:E2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YpwGxuHPrjfflleMt8fBxMJ4vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f6:da:c9:33:3c:85:f5:44:7e:5a:28:01:47:d5:45:27:2b:
fa:8e:63:d0:6c:f4:2c:6b:2e:4b:2f:d1:da:08:f9:90:c5:d5:
8e:2c:26:18:88:f9:29:1f:dc:71:19:20:db:30:a6:a9:8b:76:
21:3b:a4:1a:7a:b9:38:9d:c2:a1:62:4d:93:4a:b1:eb:37:af:
3a:8e:d9:b8:4e:2d:ac:41:7c:7d:01:53:a9:5c:0c:16:7a:ee:
4a:9a:0f:7d:16:91:2b:dd:f4:c4:39:c4:f8:23:6c:51:57:de:
65:42:ca:95:35:1c:63:7b:ec:1f:cd:85:0f:0d:15:aa:c1:b3:
8f:e4:22:06:5d:e3:1b:b3:72:bf:ca:a6:b4:9a:62:a0:55:df:
0e:5e:e1:21:9c:74:46:c7:fe:f2:0c:5b:ff:a6:52:e1:d8:a7:
7e:fe:21:c0:b3:a0:28:c0:7d:c8:be:4f:70:29:ca:65:b6:81:
74:d9:33:a6:b1:da:7f:38:55:4d:ac:15:46:4a:e2:49:a3:8b:
73:86:f6:b4:05:76:00:ea:36:a7:60:82:81:2c:cf:54:0b:21:
c9:8f:93:06:86:05:0a:ae:0c:e8:b7:c0:d6:b0:70:22:9e:b1:
61:26:51:4c:c7:92:7f:26:bf:63:14:e1:c0:15:4b:19:a3:6d:
51:00:31:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA8RXzp4RsEKHBrmDBsD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOGE3MDFiMWI4NzNlYjhkZjdlNTk1ZTMyZGYxZjA3MTMw
OWUyZjEwHhcNMjYwMzI1MjIwMDUxWhcNMjYwMzI2MjIwMDUxWjAzMTEwLwYDVQQD
Eyg1ZWZmYjZmYTA3NTMzMDZiMDc1YTlmZDg4ZjVjYzMzMzhkNDQ5NGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+vcR4v1a/T8O2uF1b7pevBxhoIy
90IrMovruymy0Cirgm5GBbAc3tsnRNmEuuUDMaVT+sC0MUq0G6d6mctH5zFuxLzQ
PwuWhyK7PoD8bDgKHxQT/N9keXZaOQao1zGRNoXaz+99Mus3cu/JDtrSOlyEaO4x
GEyNuJOLZpj8kzFOxdllejv5To3eor52o4/I2t/i8wPL3AsGiOuyG3zUpITlhP+r
5uHOGV9pTYKviLSqFje5WElv9OGC8mOZjuxxO4eYcndxzFTScgY6Dw7BL/Vw/z3s
gMwwKODAWYuKK/TZ4t6AIp2awkwY1UzHbEu0W7E1edBfDqyQvTNsDs4qlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7/tvoHUzBrB1qf2I9cwzONRJSlMB8GA1UdIwQY
MBaAFOGKcBsbhz64335ZXjLfHwcTCeLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlwd0d4dUhQcmpmZmxsZU10OGZCeE1KNHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80MjgwYWYtYjIxMi00OTY4LTlmOTIt
Yjc5NWNhY2IzYjkzLzEvNFlwd0d4dUhQcmpmZmxsZU10OGZCeE1KNHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi80MjgwYWYtYjIxMi00OTY4LTlmOTItYjc5NWNhY2IzYjkz
LzEvNFlwd0d4dUhQcmpmZmxsZU10OGZCeE1KNHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPbayTM8
hfVEflooAUfVRScr+o5j0Gz0LGsuSy/R2gj5kMXVjiwmGIj5KR/ccRkg2zCmqYt2
ITukGnq5OJ3CoWJNk0qx6zevOo7ZuE4trEF8fQFTqVwMFnruSpoPfRaRK930xDnE
+CNsUVfeZULKlTUcY3vsH82FDw0VqsGzj+QiBl3jG7Nyv8qmtJpioFXfDl7hIZx0
Rsf+8gxb/6ZS4dinfv4hwLOgKMB9yL5PcCnKZbaBdNkzprHafzhVTawVRkriSaOL
c4b2tAV2AOo2p2CCgSzPVAshyY+TBoYFCq4M6LfA1rBwIp6xYSZRTMeSfya/YxTh
wBVLGaNtUQAxYA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:03:00 2026 by rpki-client