Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
File: 4VaISXYX6PCmBpCvqz75TBGrbXI.mft (raw, json)
Hash identifier: JjIYUG5KhQCgZboVXghBK2fKHc04tBBswIRE+1YfTqU=
Subject key identifier: F3:94:8C:44:99:A2:2B:AF:66:93:45:39:1E:7F:AE:29:71:CE:F1:98
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Certificate issuer: /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial: 019D265FC9AB871D10C374DE6FA1A16056AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
Manifest number: 0344
Signing time: Wed 25 Mar 2026 19:01:44 +0000
Manifest this update: Wed 25 Mar 2026 19:01:44 +0000
Manifest next update: Thu 26 Mar 2026 19:01:44 +0000
Files and hashes: 1: 4VaISXYX6PCmBpCvqz75TBGrbXI.crl (hash: 5OqHMkyldSVxyyPOIzXvmGwwQQtTD7r8dCDtb8Kg1bs=)
2: Ycg5CHfQUVLtZxBBEajvZgdPLH4.asa (hash: C4h/41NakJ4AYiwVFglYi/Zm34hQAwe8DrOUagPNUVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c9:ab:87:1d:10:c3:74:de:6f:a1:a1:60:56:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Validity
Not Before: Mar 25 19:01:44 2026 GMT
Not After : Mar 26 19:01:44 2026 GMT
Subject: CN=f3948c4499a22baf669345391e7fae2971cef198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:5c:22:5b:5c:2d:cb:11:1e:96:e5:19:2d:
73:e8:da:dc:5e:1f:78:7c:90:97:ea:bd:bb:e6:21:
a5:48:e0:13:80:63:3d:81:1d:f4:ee:6f:e5:c3:38:
ed:4d:b1:02:ae:eb:2d:e2:6d:50:ac:2b:6a:7e:18:
16:c9:ed:0f:1c:2e:93:f4:64:5a:eb:5a:2a:32:5d:
9d:9b:15:7d:a5:6d:ae:ac:91:18:ee:0c:19:bd:c4:
85:cc:c6:0d:e0:8d:34:b4:93:90:bd:12:50:2a:01:
26:8e:fa:8a:e9:5a:49:e8:91:61:b9:e1:a0:ed:7c:
e3:e1:82:96:7f:c2:92:a4:0b:31:fc:9a:05:86:f2:
57:98:43:e1:d1:50:1b:bb:05:bd:1e:12:b3:37:ce:
b7:99:8f:35:5e:43:df:2b:fb:e5:c2:df:0a:1d:19:
71:c8:24:94:e3:d5:df:c0:ef:21:f5:9d:fb:c5:79:
63:2c:bb:f1:dd:fd:e6:3d:23:54:fa:55:5d:30:07:
80:d5:09:d8:97:a0:b8:77:e4:65:44:d4:5c:ed:dd:
0e:38:58:ec:21:6c:84:15:51:ca:46:c8:03:6b:d4:
5f:9b:0a:1f:36:29:ca:30:36:e0:ab:ad:9a:54:10:
b3:2c:fe:1a:10:47:42:95:6b:e4:09:b1:fa:54:46:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:94:8C:44:99:A2:2B:AF:66:93:45:39:1E:7F:AE:29:71:CE:F1:98
X509v3 Authority Key Identifier:
keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2a:7f:6e:45:45:03:ed:83:11:16:36:d8:de:e0:3a:4c:0a:
9c:02:e9:19:0d:1b:03:54:10:3f:23:0b:1a:21:33:84:e5:31:
d6:84:80:e6:cb:fb:39:d1:18:33:54:be:f6:7c:9b:30:2f:17:
fd:90:7d:b6:58:83:ab:0a:52:21:be:33:69:e0:eb:49:9d:0e:
7b:03:e4:74:1b:ae:e3:ef:4c:a4:8b:ab:ce:a0:f6:0c:41:3c:
00:96:80:d5:04:40:c5:87:8a:df:93:f6:28:4b:16:c8:b2:1b:
92:a2:e2:ec:3d:4a:f7:3d:3d:96:5d:f4:93:79:5d:52:15:b2:
37:72:f3:12:28:0d:9f:41:fa:0f:9c:a8:c9:8a:4b:f4:24:be:
d1:8c:fd:76:82:c3:56:fe:ed:36:76:c6:d3:63:53:86:e9:09:
7d:b0:10:e0:ca:2a:01:b0:e5:6f:3e:3f:35:3a:de:3e:a0:93:
e1:fb:a5:ed:5f:27:e1:44:6e:1d:18:d2:3c:6e:0d:fb:55:1f:
d2:a0:24:cc:ef:7c:d0:b2:35:40:88:8b:48:2c:b8:2e:e3:8d:
a9:1d:ee:3d:8a:70:14:cc:71:8b:0f:08:18:1b:c3:5e:c2:2b:
16:07:d8:a0:e9:4e:9d:30:97:b6:d9:dc:27:db:3e:e2:1a:04:
0c:65:69:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX8mrhx0Qw3Teb6GhYFauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTY4ODQ5NzYxN2U4ZjBhNjA2OTBhZmFiM2VmOTRjMTFh
YjZkNzIwHhcNMjYwMzI1MTkwMTQ0WhcNMjYwMzI2MTkwMTQ0WjAzMTEwLwYDVQQD
EyhmMzk0OGM0NDk5YTIyYmFmNjY5MzQ1MzkxZTdmYWUyOTcxY2VmMTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuslcIltcLcsRHpblGS1z6NrcXh94
fJCX6r275iGlSOATgGM9gR307m/lwzjtTbECrust4m1QrCtqfhgWye0PHC6T9GRa
61oqMl2dmxV9pW2urJEY7gwZvcSFzMYN4I00tJOQvRJQKgEmjvqK6VpJ6JFhueGg
7Xzj4YKWf8KSpAsx/JoFhvJXmEPh0VAbuwW9HhKzN863mY81XkPfK/vlwt8KHRlx
yCSU49XfwO8h9Z37xXljLLvx3f3mPSNU+lVdMAeA1QnYl6C4d+RlRNRc7d0OOFjs
IWyEFVHKRsgDa9RfmwofNinKMDbgq62aVBCzLP4aEEdClWvkCbH6VEbIvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOUjESZoiuvZpNFOR5/rilxzvGYMB8GA1UdIwQY
MBaAFOFWiEl2F+jwpgaQr6s++UwRq21yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZhSVNYWVg2UENtQnBDdnF6NzVUQkdyYlhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82Yzg0NDYtNzlmZC00NTZlLTllNmIt
Y2EzYmIxZGZkYWE2LzEvNFZhSVNYWVg2UENtQnBDdnF6NzVUQkdyYlhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82Yzg0NDYtNzlmZC00NTZlLTllNmItY2EzYmIxZGZkYWE2
LzEvNFZhSVNYWVg2UENtQnBDdnF6NzVUQkdyYlhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAip/bkVF
A+2DERY22N7gOkwKnALpGQ0bA1QQPyMLGiEzhOUx1oSA5sv7OdEYM1S+9nybMC8X
/ZB9tliDqwpSIb4zaeDrSZ0OewPkdBuu4+9MpIurzqD2DEE8AJaA1QRAxYeK35P2
KEsWyLIbkqLi7D1K9z09ll30k3ldUhWyN3LzEigNn0H6D5yoyYpL9CS+0Yz9doLD
Vv7tNnbG02NThukJfbAQ4MoqAbDlbz4/NTrePqCT4ful7V8n4URuHRjSPG4N+1Uf
0qAkzO980LI1QIiLSCy4LuONqR3uPYpwFMxxiw8IGBvDXsIrFgfYoOlOnTCXttnc
J9s+4hoEDGVpzA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:07:35 2026 by rpki-client