Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
File: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft (raw, json)
Hash identifier: uLNs5rlicgOiiQm90cGz+jgppHSxSFMc+rgytNu72gA=
Subject key identifier: 90:88:29:06:A3:8A:89:D7:FB:C9:61:98:95:D8:26:E5:4B:1E:14:91
Authority key identifier: E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24
Certificate issuer: /CN=e3106ac3ea760b2d0242a9efba2c2116b626f824
Certificate serial: 019D273B012CC1B86972A1A88440242670CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
Manifest number: 01B6
Signing time: Wed 25 Mar 2026 23:01:11 +0000
Manifest this update: Wed 25 Mar 2026 23:01:11 +0000
Manifest next update: Thu 26 Mar 2026 23:01:11 +0000
Files and hashes: 1: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl (hash: nw/fpf/v+Ke2vTqHPymxmxtL5oSUpjhJK5Lm0CSCXXU=)
2: 4ypktVvAzfNV9xVobcyFTIbQDTY.roa (hash: gbFNuHiI6Q6GwECOCQ38Wty+z3M8uTYhivyQMeIFbAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:01:2c:c1:b8:69:72:a1:a8:84:40:24:26:70:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3106ac3ea760b2d0242a9efba2c2116b626f824
Validity
Not Before: Mar 25 23:01:11 2026 GMT
Not After : Mar 26 23:01:11 2026 GMT
Subject: CN=90882906a38a89d7fbc9619895d826e54b1e1491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c1:1d:e2:44:cb:6e:e2:4b:f9:5a:67:8e:79:
77:53:11:9c:c1:bf:28:5a:da:23:d7:ed:f1:c6:58:
d0:de:31:b9:1f:23:fc:df:d0:4e:fe:28:22:cd:1b:
b8:cd:16:fc:cb:91:a7:81:e1:84:11:e7:e4:11:14:
81:9f:a5:8f:d1:a6:3c:af:01:b8:2c:12:fb:42:33:
a7:29:17:75:2a:7f:f6:83:8e:c1:70:70:5b:83:6c:
4d:3d:38:42:f3:15:26:ac:4b:c5:dc:c3:3b:f7:80:
3b:c7:42:4f:f2:84:44:78:d8:a6:68:c6:7e:5c:fe:
b2:80:2a:77:43:64:db:61:65:50:65:4c:8f:21:81:
bb:24:13:ca:10:7c:51:5c:f8:96:ee:54:4c:f3:1a:
0e:0f:78:bb:ad:7f:07:48:6f:7f:fc:19:55:93:de:
c6:ce:c2:98:89:dd:72:6c:4a:8c:b1:6f:5a:56:53:
84:60:5d:4d:af:ca:d5:9c:9c:38:7d:c5:3e:5e:c3:
2e:ff:9f:60:0f:95:83:6d:41:ff:c4:9c:f6:a6:18:
f8:84:5c:90:93:e9:d2:9e:e2:19:61:3d:53:98:c3:
f7:34:e2:8b:ed:db:a8:f5:be:5a:c4:62:cb:31:d1:
79:15:6e:cd:da:cf:a7:c8:4c:83:67:eb:ed:de:9d:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:88:29:06:A3:8A:89:D7:FB:C9:61:98:95:D8:26:E5:4B:1E:14:91
X509v3 Authority Key Identifier:
keyid:E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:48:b8:38:1d:8f:70:fb:4f:1f:ae:90:76:b9:96:c6:cf:22:
b3:db:4f:81:36:9f:53:c8:e4:22:41:03:c7:69:1a:3f:1a:75:
a8:ec:b2:7f:1b:41:0a:df:68:70:99:a0:62:05:a3:73:47:6c:
db:ce:40:6e:19:cb:d9:d1:7f:a8:0c:7a:bb:27:02:fd:37:18:
9d:34:f0:a7:f8:e9:e6:73:0c:88:17:ac:8f:26:e5:e8:dd:9b:
0e:29:f9:c8:87:91:d8:be:88:fa:f3:2a:04:6a:91:38:34:33:
0d:79:57:ce:ef:e8:7f:d5:db:1a:61:0d:99:66:21:1a:b6:64:
02:69:fa:ba:43:2c:32:fb:fa:60:ff:82:18:18:64:c1:4e:76:
d5:87:b9:4a:90:dd:9a:11:55:9f:d1:43:13:6f:01:e4:28:22:
c3:7c:82:1c:fe:c1:bd:7f:83:83:bc:ba:75:a2:67:a2:ac:50:
51:29:81:61:d3:68:92:0c:40:76:84:43:24:0b:3e:8d:ef:6f:
1b:8c:3a:87:eb:c1:a1:08:46:45:01:11:49:b0:43:11:d5:4e:
58:59:49:4d:fa:bb:b0:cf:b1:03:28:29:b5:09:4d:f4:8b:48:
ca:ca:fb:2a:2e:b5:49:05:c9:0f:02:5d:2c:29:dd:71:41:c7:
ea:d3:9c:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOwEswbhpcqGohEAkJnDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTA2YWMzZWE3NjBiMmQwMjQyYTllZmJhMmMyMTE2YjYy
NmY4MjQwHhcNMjYwMzI1MjMwMTExWhcNMjYwMzI2MjMwMTExWjAzMTEwLwYDVQQD
Eyg5MDg4MjkwNmEzOGE4OWQ3ZmJjOTYxOTg5NWQ4MjZlNTRiMWUxNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sEd4kTLbuJL+Vpnjnl3UxGcwb8o
Wtoj1+3xxljQ3jG5HyP839BO/igizRu4zRb8y5GngeGEEefkERSBn6WP0aY8rwG4
LBL7QjOnKRd1Kn/2g47BcHBbg2xNPThC8xUmrEvF3MM794A7x0JP8oREeNimaMZ+
XP6ygCp3Q2TbYWVQZUyPIYG7JBPKEHxRXPiW7lRM8xoOD3i7rX8HSG9//BlVk97G
zsKYid1ybEqMsW9aVlOEYF1Nr8rVnJw4fcU+XsMu/59gD5WDbUH/xJz2phj4hFyQ
k+nSnuIZYT1TmMP3NOKL7duo9b5axGLLMdF5FW7N2s+nyEyDZ+vt3p2CfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCIKQajionX+8lhmJXYJuVLHhSRMB8GA1UdIwQY
MBaAFOMQasPqdgstAkKp77osIRa2JvgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhCcXctcDJDeTBDUXFudnVpd2hGclltLUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mOTFhODUtZTkzYy00YTQ5LTgyMTUt
ODQ5NzcxN2E0ZjYxLzEvNHhCcXctcDJDeTBDUXFudnVpd2hGclltLUNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mOTFhODUtZTkzYy00YTQ5LTgyMTUtODQ5NzcxN2E0ZjYx
LzEvNHhCcXctcDJDeTBDUXFudnVpd2hGclltLUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbki4OB2P
cPtPH66QdrmWxs8is9tPgTafU8jkIkEDx2kaPxp1qOyyfxtBCt9ocJmgYgWjc0ds
285AbhnL2dF/qAx6uycC/TcYnTTwp/jp5nMMiBesjybl6N2bDin5yIeR2L6I+vMq
BGqRODQzDXlXzu/of9XbGmENmWYhGrZkAmn6ukMsMvv6YP+CGBhkwU521Ye5SpDd
mhFVn9FDE28B5Cgiw3yCHP7BvX+Dg7y6daJnoqxQUSmBYdNokgxAdoRDJAs+je9v
G4w6h+vBoQhGRQERSbBDEdVOWFlJTfq7sM+xAygptQlN9ItIysr7Ki61SQXJDwJd
LCndcUHH6tOcMw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:02 2026 by rpki-client