Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
File: 4Rzmt92aasCzJLpa2HOwr0ajktQ.mft (raw, json)
Hash identifier: bIKj36qKFYZzlSATXksNMByN28YZQSmFGcx5KI+wkco=
Subject key identifier: C3:97:2A:C4:C5:3E:5C:C7:18:12:60:1A:B2:8B:BC:0D:09:55:F6:46
Authority key identifier: E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
Certificate issuer: /CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Certificate serial: 019D29CDCABCCB82581752F8A9937BB60EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
Manifest number: 029B
Signing time: Thu 26 Mar 2026 11:00:45 +0000
Manifest this update: Thu 26 Mar 2026 11:00:45 +0000
Manifest next update: Fri 27 Mar 2026 11:00:45 +0000
Files and hashes: 1: 4Rzmt92aasCzJLpa2HOwr0ajktQ.crl (hash: ZQ7HM4t99iDjJZkfQ0Nmi5m698XGng2JX4sT5rIk6pM=)
2: 8mGjCH9xqFpZOCJZc787zSGC4EE.roa (hash: kpbH01pKQ8NTLrxbYMEWBBlk5pUCb7DZ0viTFQjgJ0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:ca:bc:cb:82:58:17:52:f8:a9:93:7b:b6:0e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Validity
Not Before: Mar 26 11:00:45 2026 GMT
Not After : Mar 27 11:00:45 2026 GMT
Subject: CN=c3972ac4c53e5cc71812601ab28bbc0d0955f646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:61:a4:1a:81:88:94:99:9b:04:b5:0a:9b:
b6:32:67:ec:41:0b:c7:85:d9:14:8e:49:74:44:e8:
fa:8a:87:58:88:d9:2f:d7:83:15:7d:91:4b:bd:e8:
d1:be:ef:9b:e3:86:6a:99:74:3d:37:46:d8:92:20:
dc:d2:b7:6e:03:92:9b:14:7e:d9:9f:f2:d7:19:df:
83:93:74:53:4b:93:9d:ff:7f:f8:b1:74:23:a6:bd:
b0:76:16:f7:50:7b:0a:16:a4:39:58:d1:8f:e6:9b:
cb:cb:24:3f:70:06:a2:e6:4e:03:55:c6:36:e4:af:
8b:f0:48:88:d8:cc:17:8c:af:dc:c3:ae:5a:e7:21:
27:f8:d4:f3:83:05:55:09:cf:a2:ee:d8:ec:1d:f5:
55:cf:0a:0c:dc:46:16:5a:a7:2f:29:b7:89:55:f9:
51:82:a2:1c:7c:72:c4:3e:42:0d:6a:db:e8:32:40:
d8:92:9d:82:94:c6:4c:8d:21:f7:36:54:35:20:74:
38:7c:85:5d:19:17:da:60:a7:af:1a:24:c2:7f:8f:
6c:6d:9b:8d:91:c1:6c:bc:11:03:ac:fa:08:25:6d:
a0:6e:85:af:78:03:8b:ea:ce:8e:7f:d2:fb:19:94:
97:d6:af:e5:71:c2:1b:7b:38:9e:e8:53:0d:c0:da:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:97:2A:C4:C5:3E:5C:C7:18:12:60:1A:B2:8B:BC:0D:09:55:F6:46
X509v3 Authority Key Identifier:
keyid:E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c4:7c:03:d7:94:29:ff:ce:b2:c7:f5:17:2f:c5:5d:57:c3:
88:88:e4:d3:62:ec:d7:4b:9d:5a:4e:78:1d:c6:87:79:0a:fb:
7d:28:f7:de:ea:e5:23:45:19:9d:62:53:61:9e:fb:3b:4c:c0:
4b:7a:a5:21:68:57:a3:22:bc:80:cc:29:8e:59:30:62:e7:b5:
ed:29:08:6c:10:79:45:9c:47:de:82:e5:25:ac:9d:31:08:b4:
ad:88:69:9a:f1:86:42:27:1c:a5:6c:18:62:b5:71:b3:c1:d6:
29:ef:6b:83:b1:95:78:86:29:b8:17:e0:1f:20:71:9a:d6:b2:
e6:b1:97:de:dc:02:2a:a5:7a:fa:89:98:8a:bc:b7:db:05:06:
e2:cd:d6:f5:3f:3f:e4:81:6f:07:dd:06:de:c8:f1:04:0a:fd:
2b:21:30:e4:b8:3c:a0:86:e0:20:50:93:48:02:a4:ba:b7:50:
45:20:09:e4:1d:dd:ca:5d:64:b7:c9:1a:47:39:a9:76:e2:86:
89:86:49:0e:27:43:69:07:4d:a0:14:55:14:5f:c8:63:19:d4:
d9:1a:43:42:df:c9:2a:e4:6b:de:84:db:3e:19:53:86:f1:44:
de:52:7d:33:aa:29:28:b0:d9:c1:45:0d:97:d6:db:f1:ec:86:
a0:f5:64:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzcq8y4JYF1L4qZN7tg67MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMWNlNmI3ZGQ5YTZhYzBiMzI0YmE1YWQ4NzNiMGFmNDZh
MzkyZDQwHhcNMjYwMzI2MTEwMDQ1WhcNMjYwMzI3MTEwMDQ1WjAzMTEwLwYDVQQD
EyhjMzk3MmFjNGM1M2U1Y2M3MTgxMjYwMWFiMjhiYmMwZDA5NTVmNjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bxhpBqBiJSZmwS1Cpu2MmfsQQvH
hdkUjkl0ROj6iodYiNkv14MVfZFLvejRvu+b44ZqmXQ9N0bYkiDc0rduA5KbFH7Z
n/LXGd+Dk3RTS5Od/3/4sXQjpr2wdhb3UHsKFqQ5WNGP5pvLyyQ/cAai5k4DVcY2
5K+L8EiI2MwXjK/cw65a5yEn+NTzgwVVCc+i7tjsHfVVzwoM3EYWWqcvKbeJVflR
gqIcfHLEPkINatvoMkDYkp2ClMZMjSH3NlQ1IHQ4fIVdGRfaYKevGiTCf49sbZuN
kcFsvBEDrPoIJW2gboWveAOL6s6Of9L7GZSX1q/lccIbezie6FMNwNq0ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOXKsTFPlzHGBJgGrKLvA0JVfZGMB8GA1UdIwQY
MBaAFOEc5rfdmmrAsyS6WthzsK9Go5LUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82MWRiNGUtM2VmYy00NjJkLWFiMWYt
ZTU5MGU2YjRjZDBlLzEvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy82MWRiNGUtM2VmYy00NjJkLWFiMWYtZTU5MGU2YjRjZDBl
LzEvNFJ6bXQ5MmFhc0N6SkxwYTJIT3dyMGFqa3RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsR8A9eU
Kf/Ossf1Fy/FXVfDiIjk02Ls10udWk54HcaHeQr7fSj33urlI0UZnWJTYZ77O0zA
S3qlIWhXoyK8gMwpjlkwYue17SkIbBB5RZxH3oLlJaydMQi0rYhpmvGGQiccpWwY
YrVxs8HWKe9rg7GVeIYpuBfgHyBxmtay5rGX3twCKqV6+omYiry32wUG4s3W9T8/
5IFvB90G3sjxBAr9KyEw5Lg8oIbgIFCTSAKkurdQRSAJ5B3dyl1kt8kaRzmpduKG
iYZJDidDaQdNoBRVFF/IYxnU2RpDQt/JKuRr3oTbPhlThvFE3lJ9M6opKLDZwUUN
l9bb8eyGoPVkGg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:17 2026 by rpki-client