Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
File: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft (raw, json)
Hash identifier: bJo1XAPPrcIJ+rHjv/M7jEqgzQW+6PVwzpaGwkeZnOM=
Subject key identifier: DF:F3:10:EA:04:CB:68:9D:72:19:C4:AC:1B:88:CA:79:AA:C4:22:A7
Authority key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
Certificate issuer: /CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Certificate serial: 019D2B855C6BC2977E2D546A7F9112371D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
Manifest number: 1320
Signing time: Thu 26 Mar 2026 19:00:53 +0000
Manifest this update: Thu 26 Mar 2026 19:00:53 +0000
Manifest next update: Fri 27 Mar 2026 19:00:53 +0000
Files and hashes: 1: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl (hash: Ts6A8L7tujc5Y5dgCvdh/aNVXOFZ0NFjFyWsBareQ7s=)
2: VO0q4nWrfOStAkTKpUu6a9s4iXM.roa (hash: RO1KxuAMQb5sndGW2US++WYwHmd5hwNX7clvLvt34WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:5c:6b:c2:97:7e:2d:54:6a:7f:91:12:37:1d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Validity
Not Before: Mar 26 19:00:53 2026 GMT
Not After : Mar 27 19:00:53 2026 GMT
Subject: CN=dff310ea04cb689d7219c4ac1b88ca79aac422a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:7c:7c:20:bb:d4:35:47:83:84:d7:25:12:
02:37:7b:53:8f:47:bc:9e:e6:10:f4:1b:ae:55:5c:
0b:39:93:07:f9:3b:2b:e9:97:03:7d:85:35:c9:80:
16:86:e9:14:37:89:d4:b3:af:6d:dd:35:61:12:21:
a3:5b:4f:5b:0e:1b:fe:55:05:2b:41:0c:eb:7c:2b:
8e:72:f9:b1:5b:e7:04:d8:0f:2d:d2:6d:d8:4d:05:
fc:c1:cb:bb:33:08:9e:3a:80:58:41:18:2c:4b:6f:
b3:07:56:5f:55:9b:59:c1:49:aa:82:6d:4e:6b:24:
c4:02:44:4f:d2:ca:1a:e2:f8:a9:3a:7c:4e:e7:9c:
ab:95:de:50:22:ba:71:d4:ff:05:2a:d8:76:23:4a:
1e:97:dd:b3:72:a1:b0:fb:02:61:87:5d:35:5c:c3:
7c:5d:ec:b7:29:0a:49:b4:bd:1e:b2:ce:f2:c4:11:
b5:85:17:a1:1c:d8:84:a5:b4:0d:93:ba:b7:56:66:
57:68:e3:73:f2:70:ef:5a:5d:f7:da:41:da:bc:a9:
5f:10:6a:de:d3:73:0a:95:ca:0f:c3:31:ac:f2:02:
15:e2:e4:ee:28:54:03:4f:96:8f:1f:63:d5:fd:70:
e6:57:8e:91:59:bb:da:5b:eb:7e:27:a3:db:e4:5f:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F3:10:EA:04:CB:68:9D:72:19:C4:AC:1B:88:CA:79:AA:C4:22:A7
X509v3 Authority Key Identifier:
keyid:E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7a:91:54:1d:ce:7c:82:13:3c:8a:89:05:8f:58:ee:7f:80:
0b:12:e7:95:74:e2:a9:a0:f5:b7:eb:0e:3a:f7:67:b5:3e:f1:
6a:99:9a:95:c1:9b:c2:19:ae:a8:a3:03:fc:09:ab:2f:2e:03:
49:1e:9a:1b:a9:77:94:87:9a:b7:f4:60:96:0f:f1:c5:f2:ec:
c9:ae:46:b4:09:c0:a2:69:01:aa:ed:54:ed:b9:ff:9d:8f:68:
7c:af:a5:b8:ba:74:cc:ed:ac:64:d9:90:85:a1:4a:e5:1b:02:
46:c7:3a:7d:9c:52:3e:c6:2c:c9:40:32:e6:b3:bd:c8:5f:5e:
62:ba:3f:99:76:45:2c:e4:81:f4:6a:7d:96:f5:b3:4b:ef:81:
85:d5:b8:16:a9:12:c9:e9:d1:c9:8b:a6:2f:1e:4d:c8:a6:a8:
01:9c:44:94:6d:6a:dc:27:c5:08:6f:70:ab:cf:0c:f4:52:df:
8d:9c:6c:fd:6c:91:24:b0:8e:9a:8a:bf:5f:09:c4:f1:08:2e:
df:42:86:24:eb:62:3f:30:1e:b0:8c:fd:e7:d8:80:30:b1:0e:
07:17:9f:3b:90:91:6f:fa:7d:3a:1c:4b:ea:80:b6:95:d5:9f:
f8:6d:ed:2d:be:90:39:3d:8c:37:1d:a3:ec:2d:b3:fa:0c:c4:
5d:1a:db:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhVxrwpd+LVRqf5ESNx0MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyM2E3NDYzMGE4NDI0Y2NkNWY1YmIwZjYwMjIwODk0NTI3
ZDczMmMwHhcNMjYwMzI2MTkwMDUzWhcNMjYwMzI3MTkwMDUzWjAzMTEwLwYDVQQD
EyhkZmYzMTBlYTA0Y2I2ODlkNzIxOWM0YWMxYjg4Y2E3OWFhYzQyMmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIt8fCC71DVHg4TXJRICN3tTj0e8
nuYQ9BuuVVwLOZMH+Tsr6ZcDfYU1yYAWhukUN4nUs69t3TVhEiGjW09bDhv+VQUr
QQzrfCuOcvmxW+cE2A8t0m3YTQX8wcu7MwieOoBYQRgsS2+zB1ZfVZtZwUmqgm1O
ayTEAkRP0soa4vipOnxO55yrld5QIrpx1P8FKth2I0oel92zcqGw+wJhh101XMN8
Xey3KQpJtL0ess7yxBG1hRehHNiEpbQNk7q3VmZXaONz8nDvWl332kHavKlfEGre
03MKlcoPwzGs8gIV4uTuKFQDT5aPH2PV/XDmV46RWbvaW+t+J6Pb5F9aowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/zEOoEy2idchnErBuIynmqxCKnMB8GA1UdIwQY
MBaAFOI6dGMKhCTM1fW7D2AiCJRSfXMsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81NDA4OTctZjRiNy00ODQ4LWIwN2It
OTZhYjIxNjk2OTc0LzEvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81NDA4OTctZjRiNy00ODQ4LWIwN2ItOTZhYjIxNjk2OTc0
LzEvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3qRVB3O
fIITPIqJBY9Y7n+ACxLnlXTiqaD1t+sOOvdntT7xapmalcGbwhmuqKMD/AmrLy4D
SR6aG6l3lIeat/Rglg/xxfLsya5GtAnAomkBqu1U7bn/nY9ofK+luLp0zO2sZNmQ
haFK5RsCRsc6fZxSPsYsyUAy5rO9yF9eYro/mXZFLOSB9Gp9lvWzS++BhdW4FqkS
yenRyYumLx5NyKaoAZxElG1q3CfFCG9wq88M9FLfjZxs/WyRJLCOmoq/XwnE8Qgu
30KGJOtiPzAesIz959iAMLEOBxefO5CRb/p9OhxL6oC2ldWf+G3tLb6QOT2MNx2j
7C2z+gzEXRrbTg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:36:22 2026 by rpki-client