Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
File: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft (raw, json)
Hash identifier: wYwlcAnkdWvMtXTvsgHtIOrPQDtauGdf107qcK5WrIg=
Subject key identifier: 61:64:D1:98:E3:9D:FD:B2:EB:CD:CB:6E:66:10:9F:3D:14:D7:EA:0A
Authority key identifier: E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
Certificate issuer: /CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Certificate serial: 019D273AA8488203A473A596988EBC01AC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
Manifest number: 2B
Signing time: Wed 25 Mar 2026 23:00:48 +0000
Manifest this update: Wed 25 Mar 2026 23:00:48 +0000
Manifest next update: Thu 26 Mar 2026 23:00:48 +0000
Files and hashes: 1: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl (hash: iEqqjZtAEWsu/VTi4Gurw9BDc3ej3yKa38WrKN/LU40=)
2: x9acHITrBbqOx2e9ypYS952QsxQ.roa (hash: b6zhtsIkjF/mT1JMxCSolgKQVZ0ngXMbV1MvghbUubE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a8:48:82:03:a4:73:a5:96:98:8e:bc:01:ac:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Validity
Not Before: Mar 25 23:00:48 2026 GMT
Not After : Mar 26 23:00:48 2026 GMT
Subject: CN=6164d198e39dfdb2ebcdcb6e66109f3d14d7ea0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:16:d6:ff:02:86:c1:03:d3:12:19:a5:4d:73:
44:19:56:54:2a:d5:bb:ca:09:85:ba:2c:47:c2:e0:
57:da:22:61:89:7b:15:a2:4d:88:d0:3d:ba:03:9b:
0f:92:42:66:22:74:57:64:fd:ce:e7:66:d1:38:b6:
6b:46:28:a0:bc:3a:61:8b:87:0c:2f:11:fc:4a:e9:
3b:4f:fe:b0:1b:63:4f:aa:28:dc:40:47:77:f1:88:
d8:7d:9b:54:b9:6b:df:5b:39:ad:dd:58:42:6a:1a:
d1:27:36:49:98:fd:d3:1d:bc:dd:8a:39:66:cd:d8:
b2:f2:5d:d9:75:b6:a6:17:67:db:22:33:d7:b9:92:
b4:b2:7e:c9:41:b8:54:09:f6:a8:a3:da:e3:c9:27:
1d:73:be:42:56:29:1e:ef:71:1b:69:92:e7:ed:e7:
9f:58:e4:8a:39:27:bb:cf:b9:ac:05:3e:41:b5:ab:
02:bd:f5:f4:4d:22:5e:15:e6:4d:74:ce:80:2b:a3:
70:17:b4:e5:87:29:33:7c:20:c2:05:81:95:99:db:
26:a2:d6:d4:ba:7d:93:f1:c7:07:1c:7b:75:06:ea:
f2:2b:11:47:2a:02:03:11:a6:5f:10:2b:43:be:9f:
3e:b1:eb:f4:c8:18:a4:0e:74:33:4f:43:8b:c1:61:
c0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:64:D1:98:E3:9D:FD:B2:EB:CD:CB:6E:66:10:9F:3D:14:D7:EA:0A
X509v3 Authority Key Identifier:
keyid:E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:81:67:81:85:6f:96:a8:3d:5f:ce:e3:99:ec:75:a7:d9:17:
25:b9:69:b2:db:5e:ce:33:76:dd:9a:cf:ad:2a:96:37:8d:bc:
6a:bb:40:43:39:52:20:f5:d2:3b:8a:f1:85:0f:a8:49:b8:9c:
be:18:6d:ee:d3:9c:4a:93:f7:22:d6:ef:e1:5d:5c:18:d6:6f:
cc:8f:ce:72:a0:9e:06:a5:c3:f8:a5:22:f2:e1:2c:43:b6:f0:
4e:43:c0:1f:46:aa:67:0f:98:a6:42:32:d4:1b:5c:54:65:b8:
05:a5:dc:03:5b:a0:a2:d7:c1:7f:7f:12:1c:bc:76:71:50:70:
27:6e:c0:f1:f7:1c:db:b5:e0:11:f2:6d:f0:95:91:39:82:92:
e3:9f:79:45:30:64:58:eb:01:a1:85:4e:5e:8e:f4:54:a3:e9:
2d:46:7b:67:79:a7:a5:67:72:8e:7e:ed:93:aa:04:5e:5d:86:
57:d4:f1:15:0a:f4:9c:bb:f9:ad:d6:31:88:7c:9f:d6:a2:42:
c3:05:d2:92:44:2b:b7:a1:b8:11:bf:fb:c5:38:18:9b:8d:eb:
b5:09:fc:f9:5d:47:17:d4:9f:bd:f8:99:fa:45:8e:75:f9:ea:
f4:38:8d:22:57:79:46:09:f4:12:a5:3e:e3:da:56:96:1f:0c:
89:2d:72:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOqhIggOkc6WWmI68AayHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGQ3MTU4YmRmZDQ2M2MzOTFmMTZjYmViMGI3MDllNDFh
NmZjOTYwHhcNMjYwMzI1MjMwMDQ4WhcNMjYwMzI2MjMwMDQ4WjAzMTEwLwYDVQQD
Eyg2MTY0ZDE5OGUzOWRmZGIyZWJjZGNiNmU2NjEwOWYzZDE0ZDdlYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hbW/wKGwQPTEhmlTXNEGVZUKtW7
ygmFuixHwuBX2iJhiXsVok2I0D26A5sPkkJmInRXZP3O52bROLZrRiigvDphi4cM
LxH8Suk7T/6wG2NPqijcQEd38YjYfZtUuWvfWzmt3VhCahrRJzZJmP3THbzdijlm
zdiy8l3ZdbamF2fbIjPXuZK0sn7JQbhUCfaoo9rjyScdc75CVike73EbaZLn7eef
WOSKOSe7z7msBT5BtasCvfX0TSJeFeZNdM6AK6NwF7TlhykzfCDCBYGVmdsmotbU
un2T8ccHHHt1BuryKxFHKgIDEaZfECtDvp8+sev0yBikDnQzT0OLwWHALQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFk0Zjjnf2y683LbmYQnz0U1+oKMB8GA1UdIwQY
MBaAFOJNcVi9/UY8OR8Wy+sLcJ5BpvyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGsxeFdMMzlSanc1SHhiTDZ3dHdua0dtX0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82ZDUxMzEtZDE5NC00NjA1LWEyNjct
ODQ0ODVjZmE0OGM4LzEvNGsxeFdMMzlSanc1SHhiTDZ3dHdua0dtX0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy82ZDUxMzEtZDE5NC00NjA1LWEyNjctODQ0ODVjZmE0OGM4
LzEvNGsxeFdMMzlSanc1SHhiTDZ3dHdua0dtX0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIFngYVv
lqg9X87jmex1p9kXJblpsttezjN23ZrPrSqWN428artAQzlSIPXSO4rxhQ+oSbic
vhht7tOcSpP3Itbv4V1cGNZvzI/OcqCeBqXD+KUi8uEsQ7bwTkPAH0aqZw+YpkIy
1BtcVGW4BaXcA1ugotfBf38SHLx2cVBwJ27A8fcc27XgEfJt8JWROYKS4595RTBk
WOsBoYVOXo70VKPpLUZ7Z3mnpWdyjn7tk6oEXl2GV9TxFQr0nLv5rdYxiHyf1qJC
wwXSkkQrt6G4Eb/7xTgYm43rtQn8+V1HF9SfvfiZ+kWOdfnq9DiNIld5Rgn0EqU+
49pWlh8MiS1ygw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:21:42 2026 by rpki-client