Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft (raw, json)
Hash identifier: bi9XSNZ79txx1x3dA3mGDexUBmH9EApbUdJy6QYPTVI=
Subject key identifier: 89:B0:BC:0B:3D:3E:15:15:5B:58:6F:61:D1:21:73:A9:14:5A:7D:70
Authority key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
Certificate issuer: /CN=e31c010e95015c2123641d33120a7e9c9008002d
Certificate serial: 019D29CDDE6B2C8C3D010EF02DB1B013EDF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
Manifest number: 01B3
Signing time: Thu 26 Mar 2026 11:00:50 +0000
Manifest this update: Thu 26 Mar 2026 11:00:50 +0000
Manifest next update: Fri 27 Mar 2026 11:00:50 +0000
Files and hashes: 1: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl (hash: NtejzWH/AJMYQ/tIn4ztvqVBtg4q6aFmVqiM4VcTB+4=)
2: EVP8JZC4veSxdxX6T8tUKYQ-OAA.roa (hash: bYUAbwTN22M9GXhG7TnoyYrgAEb8pmrS9QwXIchXrAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:de:6b:2c:8c:3d:01:0e:f0:2d:b1:b0:13:ed:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31c010e95015c2123641d33120a7e9c9008002d
Validity
Not Before: Mar 26 11:00:50 2026 GMT
Not After : Mar 27 11:00:50 2026 GMT
Subject: CN=89b0bc0b3d3e15155b586f61d12173a9145a7d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7b:e9:7b:32:02:41:ff:32:6d:ac:7b:76:d3:
22:bb:36:07:13:3e:03:2a:f2:10:45:f8:15:ef:f9:
42:a0:d1:cc:95:39:a0:ed:51:76:ed:00:2a:00:00:
f4:19:39:2c:8c:94:77:63:07:92:0b:02:73:c0:68:
b8:53:14:d6:91:84:3a:e3:d5:0b:9c:09:d8:d9:85:
48:67:8c:3e:49:57:71:38:d8:0a:b4:1d:94:39:cc:
28:9b:fa:c4:b7:57:7a:91:c0:0a:4c:f8:0c:97:1c:
c5:e7:fe:67:b6:7e:6d:dc:99:a3:16:06:ac:f2:8d:
8d:35:fe:e3:6c:ef:57:5b:75:5e:49:99:4b:4f:06:
88:78:dc:79:20:47:1a:64:c8:17:5c:08:9f:58:a9:
9f:a3:0c:e0:d2:50:19:af:97:65:47:0e:c5:08:00:
79:9d:5e:19:05:1a:c9:43:29:38:71:44:c9:56:f2:
91:17:31:58:fe:ca:db:e1:44:c3:1a:de:30:fa:05:
42:af:24:1d:50:83:b5:a5:b9:e3:ed:fd:fa:2d:c4:
11:00:8d:30:b8:45:76:49:fd:81:60:cd:a8:4b:a4:
c2:a0:39:5b:b8:ee:0d:be:b7:1f:18:f9:ff:3a:0d:
d4:71:51:eb:44:be:70:e9:4d:c4:d2:1b:aa:ec:e5:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B0:BC:0B:3D:3E:15:15:5B:58:6F:61:D1:21:73:A9:14:5A:7D:70
X509v3 Authority Key Identifier:
keyid:E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a3:6e:8c:a7:cb:41:6d:7c:ed:33:f2:a8:61:90:fb:99:e8:
02:f8:34:fd:42:1c:39:5a:7f:83:ff:13:63:37:40:41:a3:8d:
08:bc:78:47:55:d1:2a:81:9f:d3:aa:45:a2:10:49:2b:1e:20:
74:16:08:ef:ab:43:8c:60:e9:b1:c4:1c:2b:43:9b:91:6e:f4:
41:58:bd:cf:c6:1c:27:00:ac:82:f3:d3:bf:dd:3d:a7:00:8a:
f9:66:5c:c5:4c:b5:18:02:52:62:f3:e8:11:20:a4:76:ca:5a:
f9:04:4d:f3:a3:99:00:55:cb:ea:01:bd:77:5a:a7:2c:d8:55:
84:30:71:24:03:b0:28:c7:0e:85:c7:d4:d1:46:ce:19:62:c1:
20:3a:87:db:e1:86:49:12:b0:4c:57:6b:9c:96:7b:6f:5e:c5:
a5:f9:93:a4:6e:77:b8:ee:34:6f:b7:96:cc:ae:9e:c7:90:aa:
87:6d:94:95:40:34:2d:58:f2:fa:44:cd:3b:67:14:75:8e:f8:
73:19:ac:4a:3c:a5:ba:93:29:d2:c9:75:eb:df:e7:2e:72:eb:
a9:13:3f:47:21:93:85:4d:a8:c6:f0:06:03:39:1d:d4:b7:88:
cb:0f:cb:b1:4e:a2:36:ed:af:d2:c1:57:f5:36:86:8e:ed:63:
0c:ad:49:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzd5rLIw9AQ7wLbGwE+32MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWMwMTBlOTUwMTVjMjEyMzY0MWQzMzEyMGE3ZTljOTAw
ODAwMmQwHhcNMjYwMzI2MTEwMDUwWhcNMjYwMzI3MTEwMDUwWjAzMTEwLwYDVQQD
Eyg4OWIwYmMwYjNkM2UxNTE1NWI1ODZmNjFkMTIxNzNhOTE0NWE3ZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33vpezICQf8ybax7dtMiuzYHEz4D
KvIQRfgV7/lCoNHMlTmg7VF27QAqAAD0GTksjJR3YweSCwJzwGi4UxTWkYQ649UL
nAnY2YVIZ4w+SVdxONgKtB2UOcwom/rEt1d6kcAKTPgMlxzF5/5ntn5t3JmjFgas
8o2NNf7jbO9XW3VeSZlLTwaIeNx5IEcaZMgXXAifWKmfowzg0lAZr5dlRw7FCAB5
nV4ZBRrJQyk4cUTJVvKRFzFY/srb4UTDGt4w+gVCryQdUIO1pbnj7f36LcQRAI0w
uEV2Sf2BYM2oS6TCoDlbuO4NvrcfGPn/Og3UcVHrRL5w6U3E0huq7OVvZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImwvAs9PhUVW1hvYdEhc6kUWn1wMB8GA1UdIwQY
MBaAFOMcAQ6VAVwhI2QdMxIKfpyQCAAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80ODM4MDYtMDQ1ZC00ODU2LWI1Mjkt
YjQ3ZTc0ZWQ0ZTdlLzEvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80ODM4MDYtMDQ1ZC00ODU2LWI1MjktYjQ3ZTc0ZWQ0ZTdl
LzEvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqNujKfL
QW187TPyqGGQ+5noAvg0/UIcOVp/g/8TYzdAQaONCLx4R1XRKoGf06pFohBJKx4g
dBYI76tDjGDpscQcK0ObkW70QVi9z8YcJwCsgvPTv909pwCK+WZcxUy1GAJSYvPo
ESCkdspa+QRN86OZAFXL6gG9d1qnLNhVhDBxJAOwKMcOhcfU0UbOGWLBIDqH2+GG
SRKwTFdrnJZ7b17FpfmTpG53uO40b7eWzK6ex5Cqh22UlUA0LVjy+kTNO2cUdY74
cxmsSjylupMp0sl169/nLnLrqRM/RyGThU2oxvAGAzkd1LeIyw/LsU6iNu2v0sFX
9TaGju1jDK1JXw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:41:18 2026 by rpki-client