Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft
File: 4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft (raw, json)
Hash identifier: T/P33hVjxjrfhbpH8oacI7XTNPCx13HN5KJtVP2+XHA=
Subject key identifier: B0:19:46:A5:B9:A5:20:EE:53:D4:AA:37:1B:27:CB:DB:9B:39:EE:AD
Authority key identifier: E0:B0:EC:99:26:89:6B:A1:25:BE:8F:A4:AE:BE:EA:8F:D3:09:B8:B4
Certificate issuer: /CN=e0b0ec9926896ba125be8fa4aebeea8fd309b8b4
Certificate serial: 019D2816FC3814503B9C4B4C71A9E14BBB0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft
Manifest number: 0160
Signing time: Thu 26 Mar 2026 03:01:28 +0000
Manifest this update: Thu 26 Mar 2026 03:01:28 +0000
Manifest next update: Fri 27 Mar 2026 03:01:28 +0000
Files and hashes: 1: 4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl (hash: 0GN5Hx4ATrbfh70HOpbFt1wWkRwOqhytagKdmcssYIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:fc:38:14:50:3b:9c:4b:4c:71:a9:e1:4b:bb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b0ec9926896ba125be8fa4aebeea8fd309b8b4
Validity
Not Before: Mar 26 03:01:28 2026 GMT
Not After : Mar 27 03:01:28 2026 GMT
Subject: CN=b01946a5b9a520ee53d4aa371b27cbdb9b39eead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dd:9c:4f:94:7c:c4:db:af:73:d1:07:3b:ad:
20:de:86:ea:29:0d:6c:81:58:6b:c3:77:df:07:fb:
d3:d4:68:60:fd:db:d4:63:fe:6d:86:3c:75:c2:99:
b3:83:f8:51:2e:be:02:56:78:18:4c:f1:3e:e3:69:
8e:48:0a:b5:38:bc:de:2f:1f:23:49:d5:f5:ff:3d:
82:33:d2:aa:10:99:6f:36:77:40:0a:e6:cd:12:41:
ac:c9:bc:73:c9:10:67:98:db:81:77:6a:07:5a:03:
78:a1:9c:43:48:65:ee:9c:da:f4:49:80:44:a1:ff:
0b:7d:1b:f9:8b:07:b4:42:c1:c1:9a:8f:52:37:d8:
60:9a:59:28:42:78:95:7c:7d:97:75:98:80:b8:31:
03:d2:f2:6e:51:29:88:15:23:1a:bc:88:f5:59:79:
3c:28:5a:6b:37:c4:21:e2:a1:a1:04:7a:ff:6d:d2:
ba:54:e3:e7:9a:59:cc:9d:33:e7:14:ab:51:00:eb:
ae:a1:4e:6a:f0:62:77:b9:2e:ff:4f:9d:16:e7:ae:
49:b4:4e:fe:38:3b:7a:9b:91:6b:49:b4:3d:be:7e:
e6:0b:a7:99:26:fe:2e:51:eb:88:6f:c6:5c:84:66:
df:50:c5:c1:76:40:ac:ca:0b:49:b6:31:40:32:06:
4f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:19:46:A5:B9:A5:20:EE:53:D4:AA:37:1B:27:CB:DB:9B:39:EE:AD
X509v3 Authority Key Identifier:
keyid:E0:B0:EC:99:26:89:6B:A1:25:BE:8F:A4:AE:BE:EA:8F:D3:09:B8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:29:32:db:b3:0f:0b:dc:e8:b0:70:89:33:5e:11:49:95:e1:
8a:cb:3d:e1:44:ab:25:c6:a8:a8:40:27:e2:39:44:7e:2f:3c:
1f:05:3b:9d:26:b0:d9:db:40:ba:69:fd:6a:e4:cc:d9:52:8a:
df:9c:a7:b2:ba:35:5e:b9:39:60:f0:20:7b:c1:e0:8d:f7:cb:
f0:2b:ca:e2:8c:84:b9:44:94:56:36:34:04:8b:ae:42:88:04:
38:77:48:83:d6:34:30:3b:d6:4d:25:4f:a2:91:f2:02:91:cd:
8e:81:b2:e7:91:2a:9a:27:48:32:99:0d:2b:25:a8:e0:ea:70:
39:0d:fe:ab:8b:ab:c3:a9:24:d5:e2:9a:fd:ac:f1:c1:b5:c9:
5b:10:72:31:9e:7c:62:4e:96:ad:2c:18:f8:26:a5:93:90:4a:
6f:30:a8:2a:06:9e:6f:53:4a:3e:53:00:93:aa:6f:82:86:6d:
52:23:1b:24:a7:c4:93:89:b2:0a:80:31:f1:f6:9b:ef:7a:8a:
04:7c:fd:48:db:8a:7d:ea:08:6a:7f:6a:b6:c4:19:db:6f:21:
24:f9:47:a2:a2:f7:58:9c:47:ef:2e:1b:65:e8:f8:99:ca:90:
34:0b:48:c5:fb:e5:71:c3:c8:1d:99:72:db:7f:e8:13:e1:7c:
bc:86:5d:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFvw4FFA7nEtMcanhS7sPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYjBlYzk5MjY4OTZiYTEyNWJlOGZhNGFlYmVlYThmZDMw
OWI4YjQwHhcNMjYwMzI2MDMwMTI4WhcNMjYwMzI3MDMwMTI4WjAzMTEwLwYDVQQD
EyhiMDE5NDZhNWI5YTUyMGVlNTNkNGFhMzcxYjI3Y2JkYjliMzllZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA292cT5R8xNuvc9EHO60g3obqKQ1s
gVhrw3ffB/vT1Ghg/dvUY/5thjx1wpmzg/hRLr4CVngYTPE+42mOSAq1OLzeLx8j
SdX1/z2CM9KqEJlvNndACubNEkGsybxzyRBnmNuBd2oHWgN4oZxDSGXunNr0SYBE
of8LfRv5iwe0QsHBmo9SN9hgmlkoQniVfH2XdZiAuDED0vJuUSmIFSMavIj1WXk8
KFprN8Qh4qGhBHr/bdK6VOPnmlnMnTPnFKtRAOuuoU5q8GJ3uS7/T50W565JtE7+
ODt6m5FrSbQ9vn7mC6eZJv4uUeuIb8ZchGbfUMXBdkCsygtJtjFAMgZPUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAZRqW5pSDuU9SqNxsny9ubOe6tMB8GA1UdIwQY
MBaAFOCw7JkmiWuhJb6PpK6+6o/TCbi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNExEc21TYUphNkVsdm8ta3JyN3FqOU1KdUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81ZDVjM2EtNjNjMC00MmNhLTg4NGIt
YjA3MDdhN2Q2MWExLzEvNExEc21TYUphNkVsdm8ta3JyN3FqOU1KdUxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81ZDVjM2EtNjNjMC00MmNhLTg4NGItYjA3MDdhN2Q2MWEx
LzEvNExEc21TYUphNkVsdm8ta3JyN3FqOU1KdUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCky27MP
C9zosHCJM14RSZXhiss94USrJcaoqEAn4jlEfi88HwU7nSaw2dtAumn9auTM2VKK
35ynsro1Xrk5YPAge8HgjffL8CvK4oyEuUSUVjY0BIuuQogEOHdIg9Y0MDvWTSVP
opHyApHNjoGy55EqmidIMpkNKyWo4OpwOQ3+q4urw6kk1eKa/azxwbXJWxByMZ58
Yk6WrSwY+Calk5BKbzCoKgaeb1NKPlMAk6pvgoZtUiMbJKfEk4myCoAx8fab73qK
BHz9SNuKfeoIan9qtsQZ228hJPlHoqL3WJxH7y4bZej4mcqQNAtIxfvlccPIHZly
23/oE+F8vIZdAg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:27:21 2026 by rpki-client