Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
File: 4Uk5uDWV4u-2lFa83yOGalB59vU.mft (raw, json)
Hash identifier: Y3IcE7bq80at8BIuVljMzY5/L5vh+uLvYBsYW9JdrnU=
Subject key identifier: D0:AA:1A:2B:81:5E:E8:65:2D:87:F7:10:E6:1A:77:B4:45:B6:49:7D
Authority key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
Certificate issuer: /CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Certificate serial: 019D27040D0AF581ED730C6FFB91C28EB444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 22:01:09 +0000
Manifest this update: Wed 25 Mar 2026 22:01:09 +0000
Manifest next update: Thu 26 Mar 2026 22:01:09 +0000
Files and hashes: 1: 4Uk5uDWV4u-2lFa83yOGalB59vU.crl (hash: dExoSIHcellBDpfcgffbnOmd8c7glRKfxYU4C+lTlP8=)
2: AFD3LN3IxTOKfmEYuxEuR7wUjPc.roa (hash: 3fx4frrKprBnR59Ru38Fa8S145quoaM9IAirxeo8gyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:0d:0a:f5:81:ed:73:0c:6f:fb:91:c2:8e:b4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Validity
Not Before: Mar 25 22:01:09 2026 GMT
Not After : Mar 26 22:01:09 2026 GMT
Subject: CN=d0aa1a2b815ee8652d87f710e61a77b445b6497d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:14:1c:67:2d:1f:ef:e4:37:bd:b4:9a:d2:
33:23:d4:2f:f3:15:00:37:9d:65:68:d3:92:4f:c7:
1f:e0:bb:a1:8a:ab:30:1d:4e:f0:ee:d2:03:ce:47:
0d:44:4c:56:e2:2a:5c:06:86:f0:b2:a8:63:5b:4c:
52:86:55:6d:ab:be:3f:e0:b5:47:33:97:fc:01:73:
53:50:4b:02:75:42:77:f8:dc:b5:36:5b:72:61:63:
1d:1d:f9:e6:57:88:8e:d8:3d:f7:d2:f0:f2:09:77:
42:cd:4e:cb:89:e6:03:e1:b7:d3:a0:c8:fc:c0:5d:
ab:96:8b:36:8c:fe:7c:40:05:04:0e:7d:90:68:11:
7c:89:07:69:1e:6a:d4:09:2f:3f:bb:fa:c9:46:ce:
f4:03:da:e9:0c:3a:0e:eb:74:87:ab:3c:95:d2:b0:
02:3d:f0:5c:2c:11:ff:e0:74:75:f5:8f:d2:36:0e:
2e:60:4e:f8:3b:a2:08:21:3a:38:6c:c6:89:6a:4b:
89:6d:d0:5f:45:5a:f7:88:a4:83:bd:2a:40:e1:a0:
60:ab:76:e4:f3:cb:0b:97:bd:ee:f8:5f:8f:19:8e:
bf:28:49:da:96:12:b5:5f:4a:5e:7b:a8:16:6e:49:
c0:50:47:b7:26:aa:10:e9:4e:48:29:a1:0f:7c:11:
bd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AA:1A:2B:81:5E:E8:65:2D:87:F7:10:E6:1A:77:B4:45:B6:49:7D
X509v3 Authority Key Identifier:
keyid:E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:60:01:a5:a5:eb:d9:8a:a0:05:61:db:23:02:98:a0:08:57:
ef:d9:88:c6:fa:a9:9e:21:fd:f9:06:b5:6c:e7:db:79:fc:c5:
74:3c:3e:74:3d:39:47:f5:21:9b:9d:da:68:56:a2:d0:31:cf:
6f:aa:6a:2a:a3:65:a7:e4:8f:a8:06:b3:bf:93:ab:d2:2e:48:
29:c2:f7:62:cb:10:a1:a8:25:ea:a1:e9:5f:34:81:43:8d:cd:
37:50:b0:6b:22:c7:bc:0d:fc:9f:85:00:8d:03:76:8f:1f:a1:
11:83:f7:21:ff:45:ef:61:21:09:73:d6:f4:d0:ce:ef:0c:09:
3c:97:e5:d0:f5:c5:5a:14:8b:2a:96:3b:c2:39:76:e6:34:64:
21:d8:b4:f3:fd:b4:39:9b:ec:ba:0e:77:c9:45:de:2a:54:aa:
e4:2c:ff:51:a9:8b:34:e3:8a:61:d6:64:e7:ba:be:0a:8f:e5:
db:23:77:fd:52:fc:44:ff:e0:a0:ec:35:0d:ec:d7:33:67:8c:
5a:35:34:f4:25:62:b5:b9:84:93:e3:71:e4:7c:56:4b:36:8d:
b3:db:96:4f:7f:14:b4:20:1a:81:d0:1d:2f:ba:dd:68:89:bb:
eb:ac:de:39:6a:ac:35:ed:cc:6c:58:c6:dc:08:fd:33:52:b5:
cf:dc:18:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBA0K9YHtcwxv+5HCjrREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNDkzOWI4MzU5NWUyZWZiNjk0NTZiY2RmMjM4NjZhNTA3
OWY2ZjUwHhcNMjYwMzI1MjIwMTA5WhcNMjYwMzI2MjIwMTA5WjAzMTEwLwYDVQQD
EyhkMGFhMWEyYjgxNWVlODY1MmQ4N2Y3MTBlNjFhNzdiNDQ1YjY0OTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSIUHGctH+/kN720mtIzI9Qv8xUA
N51laNOST8cf4LuhiqswHU7w7tIDzkcNRExW4ipcBobwsqhjW0xShlVtq74/4LVH
M5f8AXNTUEsCdUJ3+Ny1NltyYWMdHfnmV4iO2D330vDyCXdCzU7LieYD4bfToMj8
wF2rlos2jP58QAUEDn2QaBF8iQdpHmrUCS8/u/rJRs70A9rpDDoO63SHqzyV0rAC
PfBcLBH/4HR19Y/SNg4uYE74O6IIITo4bMaJakuJbdBfRVr3iKSDvSpA4aBgq3bk
88sLl73u+F+PGY6/KEnalhK1X0pee6gWbknAUEe3JqoQ6U5IKaEPfBG9fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCqGiuBXuhlLYf3EOYad7RFtkl9MB8GA1UdIwQY
MBaAFOFJObg1leLvtpRWvN8jhmpQefb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mOTBmZGEtMDM0ZC00NGUwLWE4MTIt
Y2Q2MzBkYmMxZDE4LzEvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mOTBmZGEtMDM0ZC00NGUwLWE4MTItY2Q2MzBkYmMxZDE4
LzEvNFVrNXVEV1Y0dS0ybEZhODN5T0dhbEI1OXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2ABpaXr
2YqgBWHbIwKYoAhX79mIxvqpniH9+Qa1bOfbefzFdDw+dD05R/Uhm53aaFai0DHP
b6pqKqNlp+SPqAazv5Or0i5IKcL3YssQoagl6qHpXzSBQ43NN1CwayLHvA38n4UA
jQN2jx+hEYP3If9F72EhCXPW9NDO7wwJPJfl0PXFWhSLKpY7wjl25jRkIdi08/20
OZvsug53yUXeKlSq5Cz/UamLNOOKYdZk57q+Co/l2yN3/VL8RP/goOw1DezXM2eM
WjU09CVitbmEk+Nx5HxWSzaNs9uWT38UtCAagdAdL7rdaIm766zeOWqsNe3MbFjG
3Aj9M1K1z9wYnw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:12 2026 by rpki-client