Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File: 4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier: kfPKk0j9jeSX5A71zoAPTnerqaWgABF9gKpcex0scrg=
Subject key identifier: 5F:17:16:D5:6D:1B:EB:94:E7:86:84:62:29:55:D4:0C:5A:90:B7:2A
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer: /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial: 019D2BF37CAE6B71A0CCBB3F91569CF35358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number: 080C
Signing time: Thu 26 Mar 2026 21:01:10 +0000
Manifest this update: Thu 26 Mar 2026 21:01:10 +0000
Manifest next update: Fri 27 Mar 2026 21:01:10 +0000
Files and hashes: 1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: j5ukggVFxmTRu3ChDaWia/AQ7pnOyhgLpflDNrjfoEQ=)
2: PhborNJW4v901OmJBHlugkCPu9Q.roa (hash: Woe0vtydZEfAzh9wNFeDl+e4gU+OEGllk8tizf6C77U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:7c:ae:6b:71:a0:cc:bb:3f:91:56:9c:f3:53:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
Validity
Not Before: Mar 26 21:01:10 2026 GMT
Not After : Mar 27 21:01:10 2026 GMT
Subject: CN=5f1716d56d1beb94e78684622955d40c5a90b72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:05:8a:4c:aa:84:ee:e5:c8:a7:1b:c3:8f:
46:83:0b:1e:0c:fe:9e:14:90:cc:6e:be:be:e6:42:
34:29:31:03:75:b0:8e:06:02:a4:22:66:f5:e2:2d:
3c:f3:a5:a3:88:91:38:3b:53:4f:07:69:8f:d0:bf:
d3:78:d3:d7:f7:c1:57:91:84:7c:20:80:56:81:7c:
9f:cf:1e:a4:7f:77:3e:e9:2d:bf:df:77:03:3e:bd:
2d:68:06:37:19:50:5f:cb:c1:37:36:86:94:af:cd:
be:18:61:2d:71:bb:28:a5:45:f3:d9:c3:e0:32:37:
20:5b:e7:5a:40:a6:55:fa:c5:08:f8:e3:7b:ef:14:
de:56:05:3c:86:1d:d7:57:79:7a:64:74:dd:51:5a:
28:8b:28:9c:09:28:e7:94:ef:eb:f4:35:28:54:9d:
ff:b7:f1:d5:69:6d:4b:03:9d:02:a6:d3:9c:84:ea:
fa:c5:0f:9f:10:52:9d:48:29:6f:a2:6c:05:35:3e:
1e:2a:15:f9:42:37:95:c1:2d:2f:f3:2e:3a:3a:fa:
84:67:4c:26:54:5a:73:24:4b:c3:43:cf:66:fe:7e:
11:05:bc:29:c4:09:b1:14:e0:db:21:e3:4d:17:44:
1c:92:f2:20:b4:4f:65:16:4e:67:ad:d8:50:32:41:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:17:16:D5:6D:1B:EB:94:E7:86:84:62:29:55:D4:0C:5A:90:B7:2A
X509v3 Authority Key Identifier:
keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:17:7e:f4:9f:51:fb:1c:24:99:a0:71:e8:14:ca:72:77:7a:
4b:f9:c7:df:e9:12:58:78:a9:a3:22:e3:00:ca:a1:06:6c:58:
8f:36:1c:56:1e:b4:38:fa:3e:4d:ea:b5:e1:f3:ed:6d:d0:0c:
45:f6:1c:86:35:c2:70:1b:6e:59:93:51:cb:ec:59:77:86:a3:
17:fc:98:a3:39:e2:f9:a6:c0:f6:a8:cd:eb:7a:01:18:d6:fa:
8a:6b:23:5e:16:13:7a:eb:b0:5f:10:d6:04:3f:a3:76:18:18:
bf:d4:09:7e:83:e4:9e:01:a1:e1:27:92:7a:c3:35:dc:53:4f:
a3:76:9b:37:19:18:06:fb:08:c9:36:ee:c9:56:7f:c6:77:0b:
58:8d:49:66:e2:e6:34:78:8f:9a:91:e8:53:c7:5a:25:bb:1a:
a1:32:6d:42:82:f3:2f:5d:fb:81:28:ec:52:52:7e:46:5c:82:
eb:9a:d3:a5:cb:87:e9:b3:d7:94:8f:d5:e2:12:73:07:a7:3a:
04:e3:27:46:69:45:f6:06:b9:1c:5a:ab:2c:0b:ba:a5:a7:22:
d6:e4:47:0d:a1:0a:5a:c5:1e:eb:a0:4d:54:de:95:ec:24:b9:
8a:84:69:25:ac:32:17:cd:be:dc:42:78:84:a9:50:29:84:b3:
45:8a:79:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0r83yua3GgzLs/kVac81NYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTg2MzFlZGI0ODExMzIzMjVhMWQxODZmYmRlMDFmYTE1
Nzc5MTAwHhcNMjYwMzI2MjEwMTEwWhcNMjYwMzI3MjEwMTEwWjAzMTEwLwYDVQQD
Eyg1ZjE3MTZkNTZkMWJlYjk0ZTc4Njg0NjIyOTU1ZDQwYzVhOTBiNzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsIFikyqhO7lyKcbw49GgwseDP6e
FJDMbr6+5kI0KTEDdbCOBgKkImb14i0886WjiJE4O1NPB2mP0L/TeNPX98FXkYR8
IIBWgXyfzx6kf3c+6S2/33cDPr0taAY3GVBfy8E3NoaUr82+GGEtcbsopUXz2cPg
MjcgW+daQKZV+sUI+ON77xTeVgU8hh3XV3l6ZHTdUVooiyicCSjnlO/r9DUoVJ3/
t/HVaW1LA50CptOchOr6xQ+fEFKdSClvomwFNT4eKhX5QjeVwS0v8y46OvqEZ0wm
VFpzJEvDQ89m/n4RBbwpxAmxFODbIeNNF0QckvIgtE9lFk5nrdhQMkH3EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8XFtVtG+uU54aEYilV1AxakLcqMB8GA1UdIwQY
MBaAFOKoYx7bSBEyMlodGG+94B+hV3kQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YWMwNTYtYmFhNC00YzcxLWI5NDAt
NDZkNmJhZWZkYWIxLzEvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82YWMwNTYtYmFhNC00YzcxLWI5NDAtNDZkNmJhZWZkYWIx
LzEvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxd+9J9R
+xwkmaBx6BTKcnd6S/nH3+kSWHipoyLjAMqhBmxYjzYcVh60OPo+Teq14fPtbdAM
RfYchjXCcBtuWZNRy+xZd4ajF/yYozni+abA9qjN63oBGNb6imsjXhYTeuuwXxDW
BD+jdhgYv9QJfoPkngGh4SeSesM13FNPo3abNxkYBvsIyTbuyVZ/xncLWI1JZuLm
NHiPmpHoU8daJbsaoTJtQoLzL137gSjsUlJ+RlyC65rTpcuH6bPXlI/V4hJzB6c6
BOMnRmlF9ga5HFqrLAu6paci1uRHDaEKWsUe66BNVN6V7CS5ioRpJawyF82+3EJ4
hKlQKYSzRYp5oA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:03:37 2026 by rpki-client