Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
File: A4r4Z5VBejWE1hY3UgmnLv7iRis.mft (raw, json)
Hash identifier: 7jFyFisd0iIBPb8JGMkxsdUrQ5vVVjPKoDqrPlMd72g=
Subject key identifier: 51:87:49:F5:8A:B5:B6:D2:D0:2D:6C:70:5B:E6:54:97:53:8D:34:03
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial: 019D284D7AE508C5DA1EE76395C6D0F7BC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
Manifest number: 100E
Signing time: Thu 26 Mar 2026 04:00:59 +0000
Manifest this update: Thu 26 Mar 2026 04:00:59 +0000
Manifest next update: Fri 27 Mar 2026 04:00:59 +0000
Files and hashes: 1: A4r4Z5VBejWE1hY3UgmnLv7iRis.crl (hash: NhepJnjucntFmf9eEP6dVocRCy/SAiyTOP6tRXvmzd8=)
2: P8lLsIJFaz5OtjjsvyeSFKNA-G0.roa (hash: pK1WHbm9edlGMAEyCeOYN0vXHVxBHzJs1SGDL7Mo6QQ=)
3: agPmj-1yZOqdW-zJe9GpIqUN03w.roa (hash: ToCg4vQlYxypC6RWyLP+F3bLTdA7lp0Hnkzv9RyJf4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:7a:e5:08:c5:da:1e:e7:63:95:c6:d0:f7:bc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038af86795417a3584d616375209a72efee2462b
Validity
Not Before: Mar 26 04:00:59 2026 GMT
Not After : Mar 27 04:00:59 2026 GMT
Subject: CN=518749f58ab5b6d2d02d6c705be65497538d3403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:62:d9:f6:21:60:9c:45:9d:d9:8e:28:4c:d2:
a8:e1:2e:53:5a:4b:6d:c6:a2:84:2b:16:4e:ba:48:
51:50:a1:91:49:7a:eb:d9:37:05:15:bb:a8:8b:fc:
e9:f1:0d:bb:f2:82:cb:1c:f4:ce:eb:91:0c:1e:fd:
41:0c:a2:b8:cf:82:e3:63:46:70:0b:e2:f1:52:d4:
fe:15:09:ef:1b:ff:cb:ba:bc:74:21:24:aa:9b:38:
c5:96:b8:7a:31:41:0a:68:a5:8f:fb:41:dd:3d:5e:
76:28:24:a5:e3:c3:15:d2:8f:69:22:82:17:d9:a8:
c6:13:a3:22:56:40:9d:74:a0:4d:87:1b:46:65:5e:
9b:98:09:dd:9f:0a:36:08:23:d7:db:74:5c:ab:cf:
19:e7:5b:69:d5:41:3f:dd:5b:6b:43:a9:d4:1a:7d:
53:50:81:4d:85:51:0d:7c:7d:7f:10:37:b9:7c:e2:
b8:01:d1:70:14:61:d2:29:f4:ba:78:ff:5d:21:ca:
51:ab:f0:b6:19:fd:d9:f2:47:a1:14:04:41:27:cf:
26:86:2b:c1:43:8a:07:12:d1:37:97:5d:3f:9a:64:
48:9f:99:7f:e0:8d:4a:88:61:3e:57:4b:11:02:21:
8e:9c:c8:77:0e:80:be:6c:19:58:f6:65:7b:b7:c6:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:87:49:F5:8A:B5:B6:D2:D0:2D:6C:70:5B:E6:54:97:53:8D:34:03
X509v3 Authority Key Identifier:
keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:28:06:e3:cb:a7:9d:4a:45:ce:db:10:6e:e3:7f:c4:ae:a5:
0a:42:1a:05:84:a7:97:5a:99:9d:03:01:5a:d2:fa:ad:c2:0f:
72:b7:3e:c6:76:5b:3d:b3:30:71:7e:63:f4:ca:48:14:04:ec:
31:e7:44:f0:bf:66:8f:45:d4:45:fe:ae:f9:cc:24:d6:70:cb:
a6:aa:f7:52:0c:83:5a:9b:22:e0:ff:cc:a8:95:0c:ea:f1:fa:
a6:63:37:58:b4:ae:0b:76:f5:c0:bc:16:c9:76:2b:1c:82:36:
e2:15:56:98:d6:c7:b2:60:be:2e:5f:fe:ad:35:a4:81:9f:3b:
67:fc:c5:67:b0:26:a3:d1:30:88:5c:7f:89:04:1f:ae:48:67:
97:c5:7e:28:1d:25:2c:e1:d6:7a:54:8b:70:7c:c4:68:8b:f7:
75:ce:54:9c:d5:d6:04:f7:8e:62:6c:1b:d8:38:4b:d3:18:5d:
b4:a4:28:4c:8e:9e:71:9b:f3:d3:82:ab:b7:ea:43:98:22:6a:
a0:b4:1d:98:1d:e0:cd:cd:1b:00:65:56:18:8a:ac:84:3c:8e:
50:51:73:ec:de:5e:39:1b:7b:38:2a:47:8f:84:62:63:36:6a:
42:4a:c9:34:7e:bb:0d:f4:8f:fe:fd:dc:e8:7e:63:ae:b6:6f:
90:5b:d2:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTXrlCMXaHudjlcbQ97w/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOGFmODY3OTU0MTdhMzU4NGQ2MTYzNzUyMDlhNzJlZmVl
MjQ2MmIwHhcNMjYwMzI2MDQwMDU5WhcNMjYwMzI3MDQwMDU5WjAzMTEwLwYDVQQD
Eyg1MTg3NDlmNThhYjViNmQyZDAyZDZjNzA1YmU2NTQ5NzUzOGQzNDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22LZ9iFgnEWd2Y4oTNKo4S5TWktt
xqKEKxZOukhRUKGRSXrr2TcFFbuoi/zp8Q278oLLHPTO65EMHv1BDKK4z4LjY0Zw
C+LxUtT+FQnvG//Lurx0ISSqmzjFlrh6MUEKaKWP+0HdPV52KCSl48MV0o9pIoIX
2ajGE6MiVkCddKBNhxtGZV6bmAndnwo2CCPX23Rcq88Z51tp1UE/3VtrQ6nUGn1T
UIFNhVENfH1/EDe5fOK4AdFwFGHSKfS6eP9dIcpRq/C2Gf3Z8kehFARBJ88mhivB
Q4oHEtE3l10/mmRIn5l/4I1KiGE+V0sRAiGOnMh3DoC+bBlY9mV7t8a0uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGHSfWKtbbS0C1scFvmVJdTjTQDMB8GA1UdIwQY
MBaAFAOK+GeVQXo1hNYWN1IJpy7+4kYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTRyNFo1VkJlaldFMWhZM1VnbW5MdjdpUmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81N2U0MTktNDJmNC00ZDhjLWI2YjQt
NDMxZjI3YTYyZWQ4LzEvQTRyNFo1VkJlaldFMWhZM1VnbW5MdjdpUmlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81N2U0MTktNDJmNC00ZDhjLWI2YjQtNDMxZjI3YTYyZWQ4
LzEvQTRyNFo1VkJlaldFMWhZM1VnbW5MdjdpUmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArSgG48un
nUpFztsQbuN/xK6lCkIaBYSnl1qZnQMBWtL6rcIPcrc+xnZbPbMwcX5j9MpIFATs
MedE8L9mj0XURf6u+cwk1nDLpqr3UgyDWpsi4P/MqJUM6vH6pmM3WLSuC3b1wLwW
yXYrHII24hVWmNbHsmC+Ll/+rTWkgZ87Z/zFZ7Amo9EwiFx/iQQfrkhnl8V+KB0l
LOHWelSLcHzEaIv3dc5UnNXWBPeOYmwb2DhL0xhdtKQoTI6ecZvz04Krt+pDmCJq
oLQdmB3gzc0bAGVWGIqshDyOUFFz7N5eORt7OCpHj4RiYzZqQkrJNH67DfSP/v3c
6H5jrrZvkFvSBg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:49 2026 by rpki-client