Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b67173-f418-4414-b646-eff480de292c/1/ma4-RPvT5B5VGf7YzxRT5hOvxY0.mft
File: ma4-RPvT5B5VGf7YzxRT5hOvxY0.mft (raw, json)
Hash identifier: WKMpkL2qSnpiOOt/nu/dQLFrM8xpRKYlXYFk/BxZ9Ps=
Subject key identifier: 00:A0:93:BB:32:A8:2A:F7:EE:54:4E:E4:F7:CD:E7:B2:61:4D:1E:8F
Authority key identifier: 99:AE:3E:44:FB:D3:E4:1E:55:19:FE:D8:CF:14:53:E6:13:AF:C5:8D
Certificate issuer: /CN=99ae3e44fbd3e41e5519fed8cf1453e613afc58d
Certificate serial: 019D28F2E9E59469735E6B441A299C4B06E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ma4-RPvT5B5VGf7YzxRT5hOvxY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b67173-f418-4414-b646-eff480de292c/1/ma4-RPvT5B5VGf7YzxRT5hOvxY0.mft
Manifest number: 38
Signing time: Thu 26 Mar 2026 07:01:41 +0000
Manifest this update: Thu 26 Mar 2026 07:01:41 +0000
Manifest next update: Fri 27 Mar 2026 07:01:41 +0000
Files and hashes: 1: d3d-8DfBXkXh-CsoFFvbcgSBMGc.roa (hash: 8bWopo4EeW+xYrINja/gBls8HNZwloLWf9YEWg3g1+U=)
2: ma4-RPvT5B5VGf7YzxRT5hOvxY0.crl (hash: +dZTszkhYZm8Ptcwu3pk0Fko00eXWlsewjehNM2UJZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b67173-f418-4414-b646-eff480de292c/1/ma4-RPvT5B5VGf7YzxRT5hOvxY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b67173-f418-4414-b646-eff480de292c/1/ma4-RPvT5B5VGf7YzxRT5hOvxY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ma4-RPvT5B5VGf7YzxRT5hOvxY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:e9:e5:94:69:73:5e:6b:44:1a:29:9c:4b:06:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ae3e44fbd3e41e5519fed8cf1453e613afc58d
Validity
Not Before: Mar 26 07:01:41 2026 GMT
Not After : Mar 27 07:01:41 2026 GMT
Subject: CN=00a093bb32a82af7ee544ee4f7cde7b2614d1e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:9f:6f:a7:33:f9:82:5b:a8:73:ce:69:8e:
37:35:c0:38:ba:5c:bf:cb:a7:2d:4a:ef:03:70:29:
67:9b:00:84:1c:17:9a:5b:a2:88:08:9a:3b:9c:ed:
ed:89:56:ae:4e:ef:db:93:e5:54:81:13:ae:78:d0:
69:2e:86:b2:7a:eb:87:67:42:c4:30:02:ab:e0:21:
ac:77:c8:f3:8d:50:42:37:05:db:7b:ef:9e:46:d8:
1e:14:36:a3:7b:cc:52:a7:c4:00:43:91:84:e5:47:
e5:47:0d:b7:b6:57:a5:7d:55:8e:2a:aa:a6:f5:8d:
6b:1c:26:da:6a:45:6b:a8:7f:48:4a:87:ee:3e:d4:
fe:a1:d7:8e:f1:18:30:0f:32:78:0d:86:d3:97:31:
78:29:69:f4:e7:8c:a6:db:89:7e:66:5e:f5:cd:53:
b8:ec:2c:7d:d3:f1:bd:25:c6:72:06:0f:8a:0d:29:
47:86:ac:a9:7a:da:03:67:e0:9a:49:2f:55:56:bc:
33:4c:4b:52:bb:e0:1b:b1:d6:22:79:7b:ca:30:b9:
09:e4:f4:44:92:99:63:b0:31:fa:54:fb:0b:25:ba:
2c:03:d9:5f:47:8e:1a:2f:f5:b3:4a:79:ff:46:5f:
01:35:c7:07:fa:52:43:2f:84:a4:ca:50:75:70:aa:
4c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A0:93:BB:32:A8:2A:F7:EE:54:4E:E4:F7:CD:E7:B2:61:4D:1E:8F
X509v3 Authority Key Identifier:
keyid:99:AE:3E:44:FB:D3:E4:1E:55:19:FE:D8:CF:14:53:E6:13:AF:C5:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ma4-RPvT5B5VGf7YzxRT5hOvxY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b67173-f418-4414-b646-eff480de292c/1/ma4-RPvT5B5VGf7YzxRT5hOvxY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b67173-f418-4414-b646-eff480de292c/1/ma4-RPvT5B5VGf7YzxRT5hOvxY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e7:c7:cf:23:f4:4e:81:2b:e8:b1:2d:84:78:87:5e:df:ae:
13:ab:a5:cb:36:20:b2:28:52:6e:2c:11:37:e5:7f:af:f7:0a:
f3:66:20:c2:f9:c5:3b:83:23:49:72:53:9e:38:ec:16:80:14:
10:84:5b:73:d9:82:63:de:f4:6f:c8:eb:b8:20:b9:f8:d3:f8:
18:89:a6:6d:fe:7d:89:7c:c8:e8:6f:2b:6c:5b:ce:93:16:27:
d9:21:f4:c2:22:4e:ab:05:46:7d:27:12:b4:d9:8d:2e:ee:3d:
2c:d4:64:50:11:1b:07:5f:30:18:89:3d:af:7b:8b:a1:63:73:
38:7e:55:8d:00:b4:c6:ca:66:75:a2:62:03:fc:57:46:c6:e5:
e6:0d:a6:18:12:23:96:8a:9b:5b:b8:e2:ff:34:b4:ec:8a:3d:
05:f6:42:b5:fe:5d:5c:01:1d:05:ce:4d:7e:79:97:d5:2d:d6:
16:fd:80:c5:75:f4:c6:d4:98:f9:fe:17:b4:b8:40:74:b0:2f:
94:67:65:ec:64:23:f8:cc:c6:c7:fd:ae:45:fc:56:50:47:3f:
df:b3:d7:51:e5:6f:8b:02:e3:f8:c4:1c:58:26:8e:13:56:77:
9f:8d:6b:0e:4f:08:5d:6f:ad:8d:83:d1:35:92:14:fe:26:86:
fa:ac:90:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8unllGlzXmtEGimcSwbmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YWUzZTQ0ZmJkM2U0MWU1NTE5ZmVkOGNmMTQ1M2U2MTNh
ZmM1OGQwHhcNMjYwMzI2MDcwMTQxWhcNMjYwMzI3MDcwMTQxWjAzMTEwLwYDVQQD
EygwMGEwOTNiYjMyYTgyYWY3ZWU1NDRlZTRmN2NkZTdiMjYxNGQxZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL2fb6cz+YJbqHPOaY43NcA4uly/
y6ctSu8DcClnmwCEHBeaW6KICJo7nO3tiVauTu/bk+VUgROueNBpLoayeuuHZ0LE
MAKr4CGsd8jzjVBCNwXbe++eRtgeFDaje8xSp8QAQ5GE5UflRw23tlelfVWOKqqm
9Y1rHCbaakVrqH9ISofuPtT+odeO8RgwDzJ4DYbTlzF4KWn054ym24l+Zl71zVO4
7Cx90/G9JcZyBg+KDSlHhqypetoDZ+CaSS9VVrwzTEtSu+AbsdYieXvKMLkJ5PRE
kpljsDH6VPsLJbosA9lfR44aL/WzSnn/Rl8BNccH+lJDL4SkylB1cKpM3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACgk7syqCr37lRO5PfN57JhTR6PMB8GA1UdIwQY
MBaAFJmuPkT70+QeVRn+2M8UU+YTr8WNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWE0LVJQdlQ1QjVWR2Y3WXp4UlQ1aE92eFkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iNjcxNzMtZjQxOC00NDE0LWI2NDYt
ZWZmNDgwZGUyOTJjLzEvbWE0LVJQdlQ1QjVWR2Y3WXp4UlQ1aE92eFkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9iNjcxNzMtZjQxOC00NDE0LWI2NDYtZWZmNDgwZGUyOTJj
LzEvbWE0LVJQdlQ1QjVWR2Y3WXp4UlQ1aE92eFkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOfHzyP0
ToEr6LEthHiHXt+uE6ulyzYgsihSbiwRN+V/r/cK82YgwvnFO4MjSXJTnjjsFoAU
EIRbc9mCY970b8jruCC5+NP4GImmbf59iXzI6G8rbFvOkxYn2SH0wiJOqwVGfScS
tNmNLu49LNRkUBEbB18wGIk9r3uLoWNzOH5VjQC0xspmdaJiA/xXRsbl5g2mGBIj
loqbW7ji/zS07Io9BfZCtf5dXAEdBc5NfnmX1S3WFv2AxXX0xtSY+f4XtLhAdLAv
lGdl7GQj+MzGx/2uRfxWUEc/37PXUeVviwLj+MQcWCaOE1Z3n41rDk8IXW+tjYPR
NZIU/iaG+qyQLQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:04:58 2026 by rpki-client