Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: uitDPZMSEQqF8h1sxCQ1kYKiLQy0/VJxwEuZNrxLMog=
Subject key identifier: EA:1E:E7:C6:6E:B0:3A:F5:F1:B0:08:D6:A6:81:97:94:FA:C7:7B:D8
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 019E1CB55F1F0814E73D9D8B4EFA4D34C39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 1658
Signing time: Tue 12 May 2026 15:01:48 +0000
Manifest this update: Tue 12 May 2026 15:01:48 +0000
Manifest next update: Wed 13 May 2026 15:01:48 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: VdvwdHF3Jrm1K5NAneStE0xTljkbgR/3/4g/ylSPeGg=)
2: ZFPsdpNLJ5l0WxKp0MW2ehft5Vc.roa (hash: 9gNaT5xTEshkzEjpFa3J0fv6CbE+hBJqY5VddI2BOX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:5f:1f:08:14:e7:3d:9d:8b:4e:fa:4d:34:c3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: May 12 15:01:48 2026 GMT
Not After : May 13 15:01:48 2026 GMT
Subject: CN=ea1ee7c66eb03af5f1b008d6a6819794fac77bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:db:fd:83:98:90:69:6f:54:1c:f4:a7:9f:
88:e7:3d:ac:9b:0b:93:1d:16:83:bf:41:c8:d1:be:
e5:5d:57:01:50:ba:5e:2b:30:44:4e:89:a8:ba:0b:
94:b2:8b:58:e4:86:41:54:29:af:ca:19:a8:a3:31:
47:7a:8a:5f:5f:a7:25:b4:d0:0f:c0:ad:1c:19:16:
88:1e:a0:52:96:85:be:4f:de:35:b2:46:18:df:03:
ba:45:90:86:b2:09:df:63:a5:df:eb:52:04:8f:e8:
92:b8:04:f1:fe:af:1e:0c:91:1b:da:15:9d:f9:56:
78:5e:a2:d3:57:57:e7:0c:26:96:e4:a1:ce:32:09:
2b:cb:ee:e8:dc:1e:19:32:c6:3d:72:0b:fe:3d:05:
e5:22:9a:c4:09:1d:70:c8:2c:bf:1a:df:f7:83:ba:
c0:6c:5e:fe:d5:e8:48:c5:a5:62:df:e6:37:5f:2e:
63:c6:51:ba:0a:c1:ee:c0:14:99:86:0f:6c:f0:75:
7a:a2:c3:fb:b5:4b:66:29:53:1c:57:57:e1:19:d0:
6c:be:60:de:05:6a:80:d4:1b:8a:5c:f4:4f:b0:42:
9a:92:91:94:ae:36:f1:ce:f6:f9:e0:7d:fc:9b:9a:
ef:4b:3c:c6:88:ee:0c:34:6e:d7:65:6b:12:63:48:
1c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1E:E7:C6:6E:B0:3A:F5:F1:B0:08:D6:A6:81:97:94:FA:C7:7B:D8
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2a:19:e5:c7:06:0c:15:a7:e9:59:aa:dc:f2:81:11:82:6e:
b1:bd:48:e6:01:71:4a:e5:73:38:c1:b4:bf:77:06:8a:42:6a:
44:6c:62:49:40:ba:18:c0:27:14:d5:f1:b5:cc:05:01:05:8a:
1b:81:ae:fe:75:4e:51:bc:3b:52:c5:76:fd:74:06:79:b0:c9:
2e:19:f1:b4:30:de:90:06:82:44:3b:ac:47:35:6e:04:ec:4d:
f9:3a:18:f3:82:ab:2a:eb:da:5e:64:20:c4:e7:b0:3c:bf:aa:
7b:a8:b4:3e:06:88:b8:6f:39:a9:f9:19:46:6c:11:5c:8e:af:
0e:ae:7d:a5:b3:0a:c2:d7:53:25:1c:4e:79:c9:79:f2:3a:b0:
85:ed:07:2e:d2:4a:c1:70:92:23:02:41:56:7f:9b:b7:18:70:
f5:d1:0d:07:54:5d:6e:a1:06:a6:e0:c3:1d:62:b2:60:02:d5:
ed:b1:a1:23:c2:06:7a:12:bf:9a:cd:9f:d2:2d:de:bb:ad:d4:
a0:46:eb:1a:8f:6f:6e:99:19:88:af:db:e9:a9:b5:d6:66:ec:
d7:6b:a0:27:45:4c:75:a2:94:3d:fe:76:b5:d4:85:2a:81:9b:
08:a5:f5:04:b0:19:1f:4c:3a:af:8e:1a:04:0e:ec:b2:6c:ed:
70:25:a8:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctV8fCBTnPZ2LTvpNNMOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMWRmNmE4YWFhNzA0MWQ3MjUyODVkMGRkMGUxODBhNjQ5
YmMyMTMwHhcNMjYwNTEyMTUwMTQ4WhcNMjYwNTEzMTUwMTQ4WjAzMTEwLwYDVQQD
EyhlYTFlZTdjNjZlYjAzYWY1ZjFiMDA4ZDZhNjgxOTc5NGZhYzc3YmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wzb/YOYkGlvVBz0p5+I5z2smwuT
HRaDv0HI0b7lXVcBULpeKzBETomouguUsotY5IZBVCmvyhmoozFHeopfX6cltNAP
wK0cGRaIHqBSloW+T941skYY3wO6RZCGsgnfY6Xf61IEj+iSuATx/q8eDJEb2hWd
+VZ4XqLTV1fnDCaW5KHOMgkry+7o3B4ZMsY9cgv+PQXlIprECR1wyCy/Gt/3g7rA
bF7+1ehIxaVi3+Y3Xy5jxlG6CsHuwBSZhg9s8HV6osP7tUtmKVMcV1fhGdBsvmDe
BWqA1BuKXPRPsEKakpGUrjbxzvb54H38m5rvSzzGiO4MNG7XZWsSY0gcCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoe58ZusDr18bAI1qaBl5T6x3vYMB8GA1UdIwQY
MBaAFOId9qiqpwQdclKF0N0OGApkm8ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEt
NjJiYTNhNjg4NGM4LzEvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEtNjJiYTNhNjg4NGM4
LzEvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiioZ5ccG
DBWn6Vmq3PKBEYJusb1I5gFxSuVzOMG0v3cGikJqRGxiSUC6GMAnFNXxtcwFAQWK
G4Gu/nVOUbw7UsV2/XQGebDJLhnxtDDekAaCRDusRzVuBOxN+ToY84KrKuvaXmQg
xOewPL+qe6i0PgaIuG85qfkZRmwRXI6vDq59pbMKwtdTJRxOecl58jqwhe0HLtJK
wXCSIwJBVn+btxhw9dENB1RdbqEGpuDDHWKyYALV7bGhI8IGehK/ms2f0i3eu63U
oEbrGo9vbpkZiK/b6am11mbs12ugJ0VMdaKUPf52tdSFKoGbCKX1BLAZH0w6r44a
BA7ssmztcCWoAg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:20:49 2026 by rpki-client