Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
File: 4mi9DSXlWsGkKoTCo7nIkINh1uE.mft (raw, json)
Hash identifier: gyNrx33U5/1OeRziV3/Y6MvB7huZZI3aCLn7BZawoMg=
Subject key identifier: 99:32:6C:95:93:71:65:B8:0E:11:21:37:F0:85:CA:2D:5E:92:04:A7
Authority key identifier: E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
Certificate issuer: /CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Certificate serial: 019D2C60D7B2A7D1B91C91AFFDB935D9C54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
Manifest number: 61
Signing time: Thu 26 Mar 2026 23:00:37 +0000
Manifest this update: Thu 26 Mar 2026 23:00:37 +0000
Manifest next update: Fri 27 Mar 2026 23:00:37 +0000
Files and hashes: 1: 4mi9DSXlWsGkKoTCo7nIkINh1uE.crl (hash: 9tYEDtO9VBgxOV3u3tJEUVBDXh2DHyvkVEqbMkF1Cjk=)
2: JQH3U3cXJOwqHLIl-7Bwky7-HLY.roa (hash: SJWNpyd0W8U00MUBSeKEN8/PPIQ0TFlfn5di0BSI3Hg=)
3: K0Bz8gUXJ1GAp68K0LjDByi_SVk.roa (hash: CPs5nAdCCsQDzUUAym9dDL0dv2iUIo+oUoQLSVCUp9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:d7:b2:a7:d1:b9:1c:91:af:fd:b9:35:d9:c5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Validity
Not Before: Mar 26 23:00:37 2026 GMT
Not After : Mar 27 23:00:37 2026 GMT
Subject: CN=99326c95937165b80e112137f085ca2d5e9204a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:d4:ab:28:77:ba:12:1f:e8:3d:35:56:17:
ed:36:32:be:cf:92:d3:42:be:64:99:48:17:3f:86:
79:2a:cb:17:9b:77:b0:5e:25:a0:7a:35:a4:93:32:
30:05:83:e5:91:3b:be:b9:35:61:1d:8c:cd:d0:3f:
ef:bc:de:0e:29:2d:3b:cc:db:d3:cf:b4:80:82:aa:
26:a1:a3:93:05:f8:a1:d7:06:a7:16:fc:c8:e0:a2:
b1:c8:2b:c4:28:2f:75:df:a6:11:73:58:86:5a:d5:
15:0e:a6:de:e1:53:43:a1:3b:b5:b9:ea:2e:17:23:
fa:e5:3c:cb:89:4d:d4:eb:3c:be:0a:57:ae:c5:b4:
63:01:90:20:25:9c:3e:7a:07:ca:4d:21:e0:1a:d0:
c6:b8:a5:59:1e:c3:dc:dd:20:7e:8e:73:75:5d:3b:
43:6b:9c:7f:db:bf:b2:da:a2:c1:a8:be:fb:a2:6e:
be:a5:70:f2:d3:08:d9:75:3d:3d:98:ad:fc:23:cf:
e5:bc:a5:32:14:3b:c5:dd:16:bd:cf:50:e8:e1:65:
ad:cd:3c:40:22:c3:a5:9c:9d:3c:a7:e4:ae:6f:82:
87:18:0c:52:19:4a:11:23:85:2f:28:b2:3b:bf:cf:
e9:c4:91:e1:d8:89:6c:da:c3:d3:e7:90:c2:e2:16:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:32:6C:95:93:71:65:B8:0E:11:21:37:F0:85:CA:2D:5E:92:04:A7
X509v3 Authority Key Identifier:
keyid:E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:51:b0:5b:d7:2b:a8:2f:ff:cf:14:79:81:05:f4:ac:ba:c2:
cf:03:cb:ac:0a:4f:fb:82:33:a9:4c:8c:d1:9c:87:2b:23:f1:
4b:6d:61:d7:f3:57:e5:44:74:41:f8:40:e3:b4:78:33:e5:14:
8a:45:4f:4e:bd:12:99:8e:99:b5:72:05:95:d3:23:63:f9:c1:
be:56:56:99:d8:be:97:70:bb:df:3e:36:83:ca:3a:c5:01:24:
7c:6b:a2:ac:62:29:61:fe:a0:eb:d0:23:f1:f6:e8:0e:20:52:
84:2c:af:62:6a:b5:06:f6:44:b0:23:32:91:08:3f:9e:7a:75:
c7:5a:cb:d8:47:a2:0b:21:48:c2:02:a8:12:50:6f:70:11:b0:
5e:25:25:a8:e3:01:1c:a7:33:32:e5:61:8b:aa:a3:99:bc:6d:
93:ea:65:9e:35:e4:1d:7b:f4:cc:17:ba:b2:bf:58:b3:fe:b8:
31:f4:3a:b4:54:16:11:31:75:25:de:13:c0:dc:5e:69:b1:af:
61:b0:34:af:47:0b:63:d2:a5:82:50:87:ae:81:7b:20:9f:25:
39:35:e3:a6:28:68:2d:f7:6a:32:dc:e3:87:7b:82:64:80:1b:
af:39:6e:a7:5e:d2:da:d6:31:7f:49:27:5f:8f:96:cb:30:9e:
6b:ca:a5:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sYNeyp9G5HJGv/bk12cVKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNjhiZDBkMjVlNTVhYzFhNDJhODRjMmEzYjljODkwODM2
MWQ2ZTEwHhcNMjYwMzI2MjMwMDM3WhcNMjYwMzI3MjMwMDM3WjAzMTEwLwYDVQQD
Eyg5OTMyNmM5NTkzNzE2NWI4MGUxMTIxMzdmMDg1Y2EyZDVlOTIwNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2fUqyh3uhIf6D01VhftNjK+z5LT
Qr5kmUgXP4Z5KssXm3ewXiWgejWkkzIwBYPlkTu+uTVhHYzN0D/vvN4OKS07zNvT
z7SAgqomoaOTBfih1wanFvzI4KKxyCvEKC9136YRc1iGWtUVDqbe4VNDoTu1ueou
FyP65TzLiU3U6zy+CleuxbRjAZAgJZw+egfKTSHgGtDGuKVZHsPc3SB+jnN1XTtD
a5x/27+y2qLBqL77om6+pXDy0wjZdT09mK38I8/lvKUyFDvF3Ra9z1Do4WWtzTxA
IsOlnJ08p+Sub4KHGAxSGUoRI4UvKLI7v8/pxJHh2Ils2sPT55DC4hZk0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkybJWTcWW4DhEhN/CFyi1ekgSnMB8GA1UdIwQY
MBaAFOJovQ0l5VrBpCqEwqO5yJCDYdbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG1pOURTWGxXc0drS29UQ283bklrSU5oMXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kMmI4NmItMWFiOC00NTc0LWJlOGIt
OGMzMjJlNzQzN2U0LzEvNG1pOURTWGxXc0drS29UQ283bklrSU5oMXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kMmI4NmItMWFiOC00NTc0LWJlOGItOGMzMjJlNzQzN2U0
LzEvNG1pOURTWGxXc0drS29UQ283bklrSU5oMXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlGwW9cr
qC//zxR5gQX0rLrCzwPLrApP+4IzqUyM0ZyHKyPxS21h1/NX5UR0QfhA47R4M+UU
ikVPTr0SmY6ZtXIFldMjY/nBvlZWmdi+l3C73z42g8o6xQEkfGuirGIpYf6g69Aj
8fboDiBShCyvYmq1BvZEsCMykQg/nnp1x1rL2EeiCyFIwgKoElBvcBGwXiUlqOMB
HKczMuVhi6qjmbxtk+plnjXkHXv0zBe6sr9Ys/64MfQ6tFQWETF1Jd4TwNxeabGv
YbA0r0cLY9KlglCHroF7IJ8lOTXjpihoLfdqMtzjh3uCZIAbrzlup17S2tYxf0kn
X4+WyzCea8qlOg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:25:11 2026 by rpki-client