Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
File: 4VE2_v81dO-bImLeWbBqIZCPqz4.mft (raw, json)
Hash identifier: id846Kvcd/NpfTzbLyMhMsct5B9cunG5KE5Xi4ksyos=
Subject key identifier: 38:F8:AF:82:0E:49:C4:30:C1:A9:CD:07:F7:72:6F:45:F9:C7:65:E6
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 019D25BAD2A2BB4B4B41264EDBE94B69008A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
Manifest number: 144B
Signing time: Wed 25 Mar 2026 16:01:33 +0000
Manifest this update: Wed 25 Mar 2026 16:01:33 +0000
Manifest next update: Thu 26 Mar 2026 16:01:33 +0000
Files and hashes: 1: 033QtyC04i1KKhAboDVI-UWSdrM.roa (hash: nHTeYoLr0Xk0cugSP1GZyQRAxYMhx6XvtwWfpcfCUqU=)
2: 4VE2_v81dO-bImLeWbBqIZCPqz4.crl (hash: ff5q+sLIQc9WNxqCi43lFWaSZ/d+EBD3rcvZWbMcBTQ=)
3: 6ASQk4Y7CI6ASkE0wQBheaqnf5A.asa (hash: H7jwtkFJLcpI5vTaQ7HL/g1XQv3iBkHAjj1YfjncfUE=)
4: BuaO7x7CizzehjR3wAMfxPM-upw.asa (hash: /l4j7MBdQud4LEWwCc4v0bKpr2n3ZZy/m+CkXbPi6pA=)
5: IO5mUJfpT1xU43YlzKHSEsPH-sM.roa (hash: eQXB16Lc63zu32ovMGwxvRTwr/w6x80LNOqhE2sjF08=)
6: J2nnsl4hy2WE-qoC70S5KQsrADI.roa (hash: 31L418Se3H5NxhFPerS0cbyc5yLfPuyzYUI2VkqYY9Q=)
7: U8_wzZE8n8bfCc5My7nsBIg3MGg.roa (hash: 0pUs+FOERfMRc5PwTXXbnvoGjgKD10riM+7V7dCl1Cc=)
8: tnBkR8qwS1hNlMZc7734TqbrFRE.asa (hash: EltXP1kfWq4RRj0QlyeQxvXD4q59DhdbDR/9rseLyBM=)
9: xK8Uva9pKu8SiEzAfAFxiyy7kf4.roa (hash: d6gMqqQgOngwVzvKSMbg+S1gXWQvMt1hGMdLmOwF4eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:d2:a2:bb:4b:4b:41:26:4e:db:e9:4b:69:00:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Mar 25 16:01:33 2026 GMT
Not After : Mar 26 16:01:33 2026 GMT
Subject: CN=38f8af820e49c430c1a9cd07f7726f45f9c765e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:02:96:21:c9:aa:7b:44:fa:89:df:05:10:cb:
95:19:82:12:04:48:32:aa:16:3e:94:57:95:68:bf:
e3:67:39:be:54:2e:07:0d:b7:a9:ff:b0:e2:46:93:
41:55:4d:aa:0d:4d:e0:75:b5:22:2d:0b:c2:3b:ef:
e0:c1:e1:52:b8:d8:12:50:92:28:11:35:36:f8:3b:
3d:66:ee:c9:c5:69:07:a8:c8:7f:a2:c6:57:ca:b1:
53:b8:da:13:b7:5a:6d:50:5f:4f:14:88:86:dc:8e:
cc:83:8d:e0:51:90:e5:37:0b:5a:25:d2:78:88:ec:
03:22:e2:43:28:e4:a6:94:a2:1d:6b:f0:97:70:b9:
ca:ca:40:32:07:56:33:36:f2:87:c5:3b:ad:9e:1d:
67:7b:d8:1a:66:ae:53:f7:2e:d2:e1:3a:99:7c:a2:
03:9a:36:42:1b:a2:b1:35:e9:d0:41:90:9b:03:a1:
fe:d7:a8:1c:46:9a:d2:03:a9:05:6e:bd:92:ba:77:
07:87:08:0b:e2:32:ca:4b:95:70:d9:e8:b9:83:b8:
11:79:71:d2:8e:e9:11:ad:82:99:83:55:e5:48:11:
31:6f:13:c7:b2:94:a6:48:97:13:32:29:d2:18:b2:
6b:37:6b:06:65:af:93:ac:34:b8:3b:4d:fc:2c:25:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F8:AF:82:0E:49:C4:30:C1:A9:CD:07:F7:72:6F:45:F9:C7:65:E6
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:aa:79:78:d1:0e:13:83:3d:08:68:7a:4d:8f:7f:40:a1:40:
93:f9:12:68:a4:11:9b:67:1c:1c:16:8b:8b:ff:24:29:f7:52:
bd:91:59:fc:ac:1d:a4:4a:ef:5c:bb:3d:f2:a9:f9:17:66:bb:
d9:99:78:7d:55:cd:9a:dc:63:92:b8:2b:18:48:ca:ac:48:26:
79:e9:d1:70:3a:7d:ee:d1:54:c1:9a:d6:25:dc:66:b3:c9:af:
6a:b9:93:55:29:82:d2:23:a0:dd:83:3f:ca:51:2a:ea:2e:11:
1b:16:7a:25:cb:e9:1c:ab:72:66:aa:2d:f0:1e:97:d9:a4:31:
8b:34:64:cd:73:50:cb:90:2d:6d:c4:6c:96:2e:e2:66:04:48:
0a:7b:92:61:0a:d5:9b:97:06:25:1f:99:17:f7:b2:bd:8c:02:
57:ee:43:79:5b:f4:9b:1e:af:a5:f8:d4:f1:47:25:d8:75:12:
99:dd:0a:c4:4a:3d:ea:80:98:50:6d:e1:24:d9:38:f2:0d:8a:
c2:a4:64:94:f6:83:7b:31:41:39:d1:70:0e:62:92:f5:f7:09:
92:04:4c:54:91:37:26:5e:fb:65:94:c5:30:98:1e:1f:9c:92:
59:cb:cf:d8:61:1f:51:ea:a8:67:22:69:88:e3:77:7f:f3:6b:
76:d0:b6:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lutKiu0tLQSZO2+lLaQCKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTEzNmZlZmYzNTc0ZWY5YjIyNjJkZTU5YjA2YTIxOTA4
ZmFiM2UwHhcNMjYwMzI1MTYwMTMzWhcNMjYwMzI2MTYwMTMzWjAzMTEwLwYDVQQD
EygzOGY4YWY4MjBlNDljNDMwYzFhOWNkMDdmNzcyNmY0NWY5Yzc2NWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9QKWIcmqe0T6id8FEMuVGYISBEgy
qhY+lFeVaL/jZzm+VC4HDbep/7DiRpNBVU2qDU3gdbUiLQvCO+/gweFSuNgSUJIo
ETU2+Ds9Zu7JxWkHqMh/osZXyrFTuNoTt1ptUF9PFIiG3I7Mg43gUZDlNwtaJdJ4
iOwDIuJDKOSmlKIda/CXcLnKykAyB1YzNvKHxTutnh1ne9gaZq5T9y7S4TqZfKID
mjZCG6KxNenQQZCbA6H+16gcRprSA6kFbr2SuncHhwgL4jLKS5Vw2ei5g7gReXHS
jukRrYKZg1XlSBExbxPHspSmSJcTMinSGLJrN2sGZa+TrDS4O038LCVzMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDj4r4IOScQwwanNB/dyb0X5x2XmMB8GA1UdIwQY
MBaAFOFRNv7/NXTvmyJi3lmwaiGQj6s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMt
MDQxMzEyMjQyZmYzLzEvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMtMDQxMzEyMjQyZmYz
LzEvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqp5eNEO
E4M9CGh6TY9/QKFAk/kSaKQRm2ccHBaLi/8kKfdSvZFZ/KwdpErvXLs98qn5F2a7
2Zl4fVXNmtxjkrgrGEjKrEgmeenRcDp97tFUwZrWJdxms8mvarmTVSmC0iOg3YM/
ylEq6i4RGxZ6JcvpHKtyZqot8B6X2aQxizRkzXNQy5AtbcRsli7iZgRICnuSYQrV
m5cGJR+ZF/eyvYwCV+5DeVv0mx6vpfjU8Ucl2HUSmd0KxEo96oCYUG3hJNk48g2K
wqRklPaDezFBOdFwDmKS9fcJkgRMVJE3Jl77ZZTFMJgeH5ySWcvP2GEfUeqoZyJp
iON3f/NrdtC26Q==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:54 2026 by rpki-client