Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: v6kKscnVk/6FwZjNVkyhiEqZ6S0NQ3uYHxSH3R2dV14=
Subject key identifier: 2F:06:6B:C8:A9:9D:CC:6E:5A:4D:CE:62:90:6F:28:D3:85:A4:CB:56
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 019D2A3B8F0464B5EB80AD5B9E0A3651DDF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 083E
Signing time: Thu 26 Mar 2026 13:00:39 +0000
Manifest this update: Thu 26 Mar 2026 13:00:39 +0000
Manifest next update: Fri 27 Mar 2026 13:00:39 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: /DNK+izq22IYzYdp1f9T+MgJwbvZkcQ6a7jaXG6DfsE=)
2: G2elpiRe3mLE21vYizlf0cxzEYA.roa (hash: Eg0ncyWZplHxiExP5Yc2JBQmHWqje615/1fpu2tFHEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:8f:04:64:b5:eb:80:ad:5b:9e:0a:36:51:dd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Mar 26 13:00:39 2026 GMT
Not After : Mar 27 13:00:39 2026 GMT
Subject: CN=2f066bc8a99dcc6e5a4dce62906f28d385a4cb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:a0:de:5a:fa:75:38:b9:26:19:78:d2:82:
53:04:37:0f:e8:eb:b0:f7:1b:a5:56:b0:ee:53:cd:
88:50:33:13:b4:dd:7c:c5:48:3b:6c:2a:14:28:3c:
a9:4d:80:ca:cb:b7:9b:46:04:10:b3:05:9f:99:32:
0d:75:b5:31:b1:9c:4f:ab:a1:f5:d4:ee:12:0d:17:
7b:10:81:03:b1:f1:6b:94:09:db:1a:fb:60:56:26:
3e:fc:13:e8:d5:79:b3:c3:5b:f3:9b:88:6a:79:2a:
12:cb:69:03:b8:d4:f1:da:ed:ab:ed:4d:4b:ac:fb:
21:33:95:09:b6:5a:be:9a:e0:5d:81:41:81:cf:94:
08:52:6e:a2:3a:71:9e:82:fb:e4:b5:61:de:02:8d:
c3:36:68:6d:15:14:41:c3:a8:b9:75:7b:0d:2b:0b:
83:1a:a3:73:0f:89:ee:87:f1:09:65:fc:92:3f:0d:
e1:b4:ca:0c:11:77:26:b7:0f:9e:6a:ca:5f:10:6a:
41:80:11:f1:ce:4c:cb:f6:c1:77:ba:23:70:1c:d3:
9d:06:f2:da:84:1f:62:38:9a:b5:fa:b3:78:e9:4f:
22:c0:ca:4d:79:b5:d4:65:22:bf:75:31:de:10:ed:
88:5c:52:9a:da:10:95:96:e5:e5:84:ae:85:82:75:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:06:6B:C8:A9:9D:CC:6E:5A:4D:CE:62:90:6F:28:D3:85:A4:CB:56
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:57:60:f6:dd:37:6d:5b:21:ab:ea:00:92:12:5f:3a:12:71:
6e:db:ca:21:3e:05:7a:59:24:3c:2a:dc:99:62:27:8b:4e:7d:
66:bd:e9:02:61:70:a4:f4:d4:4e:42:ed:f5:0c:c9:f5:db:1b:
c5:6c:0f:55:cd:f3:a0:f0:fd:48:d5:da:f3:be:6a:ef:33:f8:
72:0a:55:f1:91:c4:b6:34:41:41:36:b6:10:9d:0e:92:2d:04:
28:9b:44:a8:fc:ff:56:68:7e:a3:93:0a:9e:a2:d1:e0:d7:74:
3e:23:d0:3b:91:fe:3b:3f:62:ad:da:c2:f6:f8:fe:85:4a:51:
41:1d:29:65:cd:e0:a5:8c:92:0e:a9:6c:32:e4:91:f8:67:e7:
bf:c2:59:e5:6e:fb:1c:82:0f:14:d4:94:ba:64:85:69:4f:47:
3d:df:76:97:b5:2f:f7:55:52:11:a0:98:c9:f1:2c:15:14:5a:
13:26:6c:3e:b4:9e:90:8c:26:27:32:df:48:0f:3b:05:47:ae:
f3:ba:2c:bf:53:89:2c:4d:60:29:52:73:56:c5:aa:f2:55:21:
c9:80:15:da:32:9f:a8:c9:20:c4:95:52:74:a5:d4:25:a7:68:
45:d5:3b:2c:92:ba:da:21:2a:f4:47:0d:6d:74:ba:ce:2e:b9:
b9:b1:94:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO48EZLXrgK1bngo2Ud31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOGE4NmNjYmY1NjdiZDlhMjgyZmRkZjc1ZjBiN2Y1NTQy
MjIyZDIwHhcNMjYwMzI2MTMwMDM5WhcNMjYwMzI3MTMwMDM5WjAzMTEwLwYDVQQD
EygyZjA2NmJjOGE5OWRjYzZlNWE0ZGNlNjI5MDZmMjhkMzg1YTRjYjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz2g3lr6dTi5Jhl40oJTBDcP6Ouw
9xulVrDuU82IUDMTtN18xUg7bCoUKDypTYDKy7ebRgQQswWfmTINdbUxsZxPq6H1
1O4SDRd7EIEDsfFrlAnbGvtgViY+/BPo1Xmzw1vzm4hqeSoSy2kDuNTx2u2r7U1L
rPshM5UJtlq+muBdgUGBz5QIUm6iOnGegvvktWHeAo3DNmhtFRRBw6i5dXsNKwuD
GqNzD4nuh/EJZfySPw3htMoMEXcmtw+easpfEGpBgBHxzkzL9sF3uiNwHNOdBvLa
hB9iOJq1+rN46U8iwMpNebXUZSK/dTHeEO2IXFKa2hCVluXlhK6FgnWWrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8Ga8ipncxuWk3OYpBvKNOFpMtWMB8GA1UdIwQY
MBaAFOKKhsy/VnvZooL933Xwt/VUIiLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jODkwMGMtZjNkMi00NTdjLWIzOGIt
NmQ3NjUwY2EzZDA0LzEvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9jODkwMGMtZjNkMi00NTdjLWIzOGItNmQ3NjUwY2EzZDA0
LzEvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHldg9t03
bVshq+oAkhJfOhJxbtvKIT4FelkkPCrcmWIni059Zr3pAmFwpPTUTkLt9QzJ9dsb
xWwPVc3zoPD9SNXa875q7zP4cgpV8ZHEtjRBQTa2EJ0Oki0EKJtEqPz/Vmh+o5MK
nqLR4Nd0PiPQO5H+Oz9irdrC9vj+hUpRQR0pZc3gpYySDqlsMuSR+Gfnv8JZ5W77
HIIPFNSUumSFaU9HPd92l7Uv91VSEaCYyfEsFRRaEyZsPrSekIwmJzLfSA87BUeu
87osv1OJLE1gKVJzVsWq8lUhyYAV2jKfqMkgxJVSdKXUJadoRdU7LJK62iEq9EcN
bXS6zi65ubGU8g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:15:31 2026 by rpki-client