Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier: u5ZfgUtTaFNMKzkU/n9NnqLtHCV/mLWuHYCSp3WhFkA=
Subject key identifier: 61:F6:1D:55:B6:CF:4A:F9:4C:3D:C6:FA:EA:4E:FC:17:E4:A1:C5:11
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial: 019D2696379CCAFE94C5292FE523B332A9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number: 13B9
Signing time: Wed 25 Mar 2026 20:01:11 +0000
Manifest this update: Wed 25 Mar 2026 20:01:11 +0000
Manifest next update: Thu 26 Mar 2026 20:01:11 +0000
Files and hashes: 1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: GqLKtZYC+b+zEAFzPoYY699IcN+IKIf4cFEOHQQ3Kjs=)
2: NdV1685pUzzupc5kE5-ldMdSDxg.roa (hash: ueorjyehMNjdQkD1BLlElPr49sGyaBsEZXRjheGpYAA=)
3: ObqCC5ItaIb9zSaMr1gSLuQWW7g.roa (hash: z8qeiKJfszyHlpziW66XElBOILDVztPeTixCMaYCXnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:37:9c:ca:fe:94:c5:29:2f:e5:23:b3:32:a9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Validity
Not Before: Mar 25 20:01:11 2026 GMT
Not After : Mar 26 20:01:11 2026 GMT
Subject: CN=61f61d55b6cf4af94c3dc6faea4efc17e4a1c511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b3:13:f3:f4:e6:f4:4b:c4:d8:69:d0:b3:03:
aa:71:e8:d1:78:26:07:b8:66:f9:1c:4a:d5:a2:35:
36:bf:81:db:66:ef:d4:58:db:48:ef:a6:e9:95:dd:
e5:1c:19:28:bb:53:4a:a9:e7:e5:b3:9c:7d:e5:3d:
11:d8:8b:1a:a8:58:03:e0:2d:28:e1:fe:2d:97:95:
8d:82:5a:0d:54:68:68:90:21:e1:8c:eb:53:67:b9:
71:fd:bb:d7:be:fc:56:79:11:6e:9c:c6:ea:74:a6:
11:df:bc:84:14:9e:e1:8f:b4:19:c0:6f:25:28:e0:
06:cd:a2:f7:46:62:da:b5:75:83:44:aa:8d:69:fd:
1e:7f:af:5f:dc:9c:26:d5:f4:38:35:43:23:29:d7:
c6:8e:46:f1:71:31:26:20:9e:bd:3b:50:15:34:17:
16:9c:21:d5:94:62:d5:34:64:11:1b:f2:d9:ef:37:
98:c9:2e:b2:24:ed:d7:43:b1:e6:dc:b0:1e:fa:b9:
09:2d:c5:66:28:74:ea:ed:27:71:18:9d:89:b0:ac:
3c:07:fb:53:55:ca:21:20:77:2a:ec:2b:bd:7c:63:
b9:53:b7:cd:1a:2c:ec:78:5b:1c:43:43:e3:4e:25:
4e:c8:5f:28:f6:9e:91:74:2c:bd:96:93:97:e3:b8:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F6:1D:55:B6:CF:4A:F9:4C:3D:C6:FA:EA:4E:FC:17:E4:A1:C5:11
X509v3 Authority Key Identifier:
keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d2:04:96:6b:ba:26:e4:89:5d:b6:69:dc:8a:6c:6b:4e:50:
ae:ce:00:6d:24:a2:a5:39:45:b8:e2:4a:c0:1f:96:f0:4e:7f:
fc:2a:c1:42:50:d2:55:ea:59:7e:34:f7:ba:4c:6c:be:5d:ed:
c8:94:8d:e5:00:fe:c9:7a:36:6c:e4:e9:de:c6:df:79:c6:0d:
d9:0d:5e:a0:e7:ea:d0:08:2d:ef:eb:40:8c:36:87:4a:51:83:
68:00:9a:7f:16:8b:b9:18:69:60:ca:87:6c:75:bd:98:5e:f6:
e3:d5:9f:60:5b:5c:a4:f6:f2:9d:bb:e4:a7:45:49:27:0d:95:
b6:6e:81:98:b6:43:04:ca:d0:77:0a:70:35:76:91:f2:12:86:
6f:48:31:e2:e0:c4:71:bf:c5:c3:f9:22:92:6d:eb:72:28:64:
a9:bf:62:b0:ea:2b:47:8c:a4:28:aa:46:84:42:13:85:87:d7:
09:a1:58:3c:5e:74:15:5e:8e:f5:01:41:a3:99:54:50:c2:ce:
60:d1:7a:16:d3:08:0f:8a:26:f0:03:9c:ad:fc:38:c0:fc:4d:
2e:46:16:d8:f6:fe:a5:32:cf:6a:b2:42:be:e8:01:cd:d7:35:
ab:d8:c5:59:6a:76:4e:4e:81:36:8f:fe:c7:2a:9f:6f:83:c7:
a3:5a:39:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mljecyv6UxSkv5SOzMqm2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWRiMGM1YjJkOTYxMGVmNTg2ZTk3ZmJhMWZjYTg3NTAw
NmYzZGEwHhcNMjYwMzI1MjAwMTExWhcNMjYwMzI2MjAwMTExWjAzMTEwLwYDVQQD
Eyg2MWY2MWQ1NWI2Y2Y0YWY5NGMzZGM2ZmFlYTRlZmMxN2U0YTFjNTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bMT8/Tm9EvE2GnQswOqcejReCYH
uGb5HErVojU2v4HbZu/UWNtI76bpld3lHBkou1NKqefls5x95T0R2IsaqFgD4C0o
4f4tl5WNgloNVGhokCHhjOtTZ7lx/bvXvvxWeRFunMbqdKYR37yEFJ7hj7QZwG8l
KOAGzaL3RmLatXWDRKqNaf0ef69f3Jwm1fQ4NUMjKdfGjkbxcTEmIJ69O1AVNBcW
nCHVlGLVNGQRG/LZ7zeYyS6yJO3XQ7Hm3LAe+rkJLcVmKHTq7SdxGJ2JsKw8B/tT
VcohIHcq7Cu9fGO5U7fNGizseFscQ0PjTiVOyF8o9p6RdCy9lpOX47gLuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH2HVW2z0r5TD3G+upO/BfkocURMB8GA1UdIwQY
MBaAFOGdsMWy2WEO9Ybpf7ofyodQBvPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQt
MGNmNzRiZTMwM2ZmLzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQtMGNmNzRiZTMwM2Zm
LzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptIElmu6
JuSJXbZp3Ipsa05Qrs4AbSSipTlFuOJKwB+W8E5//CrBQlDSVepZfjT3ukxsvl3t
yJSN5QD+yXo2bOTp3sbfecYN2Q1eoOfq0Agt7+tAjDaHSlGDaACafxaLuRhpYMqH
bHW9mF7249WfYFtcpPbynbvkp0VJJw2Vtm6BmLZDBMrQdwpwNXaR8hKGb0gx4uDE
cb/Fw/kikm3rcihkqb9isOorR4ykKKpGhEIThYfXCaFYPF50FV6O9QFBo5lUUMLO
YNF6FtMID4om8AOcrfw4wPxNLkYW2Pb+pTLParJCvugBzdc1q9jFWWp2Tk6BNo/+
xyqfb4PHo1o52A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:45 2026 by rpki-client