Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
File: a4PZKBp6UIq_xJUwSumcmMBCxhE.mft (raw, json)
Hash identifier: YxpwWaCoF6TbXsOvPNVj5Uix2zAYipiKk0sxWn+IhPU=
Subject key identifier: D4:E8:5C:29:2E:34:70:53:B3:20:37:5F:A6:BB:78:DA:58:2F:CD:DF
Authority key identifier: 6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
Certificate issuer: /CN=6b83d9281a7a508abfc495304ae99c98c042c611
Certificate serial: 019D25BA29DB30FE9321043966DCACC4A3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
Manifest number: 1815
Signing time: Wed 25 Mar 2026 16:00:50 +0000
Manifest this update: Wed 25 Mar 2026 16:00:50 +0000
Manifest next update: Thu 26 Mar 2026 16:00:50 +0000
Files and hashes: 1: a4PZKBp6UIq_xJUwSumcmMBCxhE.crl (hash: OsC+JVZk5dtvHEL20zF87Hl9OFZaMx/tpoeTwZFeFGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:29:db:30:fe:93:21:04:39:66:dc:ac:c4:a3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b83d9281a7a508abfc495304ae99c98c042c611
Validity
Not Before: Mar 25 16:00:50 2026 GMT
Not After : Mar 26 16:00:50 2026 GMT
Subject: CN=d4e85c292e347053b320375fa6bb78da582fcddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:b3:0e:a3:60:89:bd:d3:10:fa:5f:23:c7:
7a:0a:c4:4e:ae:d7:2f:b3:93:1b:84:d9:60:10:ec:
2f:03:86:79:a1:a9:99:eb:d9:a6:d5:83:08:44:e2:
8d:1e:82:14:f6:c6:b6:04:b2:ff:8f:c1:71:68:07:
37:a2:c4:81:8a:4a:72:8b:7f:4a:28:76:0c:de:e1:
22:c9:27:a7:66:ce:b9:d9:15:83:4a:13:27:d9:6a:
b0:71:e8:89:a1:19:7c:67:aa:07:ce:c2:70:04:d2:
83:53:6e:b9:cc:8a:c3:07:a7:eb:56:bb:d6:80:12:
2a:2d:b3:bc:e4:27:e4:d4:2e:73:86:39:c2:23:92:
28:e3:06:6a:cd:6a:ad:bb:45:89:e7:c7:40:c2:b7:
e0:84:20:b7:a7:c8:6f:61:61:3d:1a:e5:cd:f6:05:
8f:8d:e5:b9:74:77:88:77:94:6d:29:61:00:b8:7b:
75:ec:20:2d:07:29:9f:33:c7:dc:de:6e:f7:19:76:
fd:b4:43:90:1a:f0:a4:8d:3b:a8:02:3d:20:3b:ce:
50:1e:ec:91:20:0f:af:68:9a:c8:50:9e:be:d5:19:
81:1a:0d:e5:f9:c9:6f:ff:9a:91:4a:5a:10:35:71:
03:83:f4:f0:df:17:1d:cf:d6:98:52:ed:06:e4:53:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E8:5C:29:2E:34:70:53:B3:20:37:5F:A6:BB:78:DA:58:2F:CD:DF
X509v3 Authority Key Identifier:
keyid:6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:eb:6f:ac:9b:86:a9:40:fe:4c:19:4c:4f:5b:72:0a:a4:bc:
84:87:8c:11:51:de:cd:fb:89:7a:4f:e1:f9:9c:93:ae:24:64:
ef:98:89:cd:56:ae:59:dd:f4:3d:af:d1:91:c5:03:62:c0:73:
6f:95:77:62:43:56:e8:b3:a6:3d:3f:ea:73:c5:5f:0e:69:0a:
fc:e6:0d:b5:77:08:ea:a1:21:9e:bb:73:57:28:5d:60:68:4e:
42:c4:50:31:f0:f2:06:c2:3e:f7:93:c0:1b:78:7a:41:1a:f9:
49:e3:84:14:aa:90:db:52:69:7c:80:72:8a:2b:b4:1c:04:89:
ea:5e:c0:77:4a:d0:2c:8e:5c:e8:28:fa:5d:e0:5e:5f:f7:f3:
c9:af:ad:61:d5:e9:e2:01:d0:3c:99:10:a3:92:30:ca:b3:65:
b8:36:78:f8:47:a9:81:8d:0c:4d:82:3a:06:ee:f5:be:56:17:
59:8b:47:46:7f:ab:58:0e:7f:76:b5:dd:8f:27:0d:c1:a5:8d:
8d:91:20:53:da:2e:2e:6b:8c:aa:3c:95:b2:30:66:2f:1c:8b:
12:63:3a:3b:ae:a9:24:c3:82:6d:b8:b0:91:3d:5a:cd:e9:28:
c5:34:2d:10:91:cf:b1:a7:4f:20:83:f1:11:a1:49:06:e2:5c:
e9:3b:af:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luinbMP6TIQQ5ZtysxKPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiODNkOTI4MWE3YTUwOGFiZmM0OTUzMDRhZTk5Yzk4YzA0
MmM2MTEwHhcNMjYwMzI1MTYwMDUwWhcNMjYwMzI2MTYwMDUwWjAzMTEwLwYDVQQD
EyhkNGU4NWMyOTJlMzQ3MDUzYjMyMDM3NWZhNmJiNzhkYTU4MmZjZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkuzDqNgib3TEPpfI8d6CsROrtcv
s5MbhNlgEOwvA4Z5oamZ69mm1YMIROKNHoIU9sa2BLL/j8FxaAc3osSBikpyi39K
KHYM3uEiySenZs652RWDShMn2WqwceiJoRl8Z6oHzsJwBNKDU265zIrDB6frVrvW
gBIqLbO85Cfk1C5zhjnCI5Io4wZqzWqtu0WJ58dAwrfghCC3p8hvYWE9GuXN9gWP
jeW5dHeId5RtKWEAuHt17CAtBymfM8fc3m73GXb9tEOQGvCkjTuoAj0gO85QHuyR
IA+vaJrIUJ6+1RmBGg3l+clv/5qRSloQNXEDg/Tw3xcdz9aYUu0G5FPDtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNToXCkuNHBTsyA3X6a7eNpYL83fMB8GA1UdIwQY
MBaAFGuD2SgaelCKv8SVMErpnJjAQsYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTRQWktCcDZVSXFfeEpVd1N1bWNtTUJDeGhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84MGM5ZTMtM2I4OS00ZTNjLWFhMzct
MDNmZWYzMmFmNzA2LzEvYTRQWktCcDZVSXFfeEpVd1N1bWNtTUJDeGhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC84MGM5ZTMtM2I4OS00ZTNjLWFhMzctMDNmZWYzMmFmNzA2
LzEvYTRQWktCcDZVSXFfeEpVd1N1bWNtTUJDeGhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALetvrJuG
qUD+TBlMT1tyCqS8hIeMEVHezfuJek/h+ZyTriRk75iJzVauWd30Pa/RkcUDYsBz
b5V3YkNW6LOmPT/qc8VfDmkK/OYNtXcI6qEhnrtzVyhdYGhOQsRQMfDyBsI+95PA
G3h6QRr5SeOEFKqQ21JpfIByiiu0HASJ6l7Ad0rQLI5c6Cj6XeBeX/fzya+tYdXp
4gHQPJkQo5IwyrNluDZ4+EepgY0MTYI6Bu71vlYXWYtHRn+rWA5/drXdjycNwaWN
jZEgU9ouLmuMqjyVsjBmLxyLEmM6O66pJMOCbbiwkT1azekoxTQtEJHPsadPIIPx
EaFJBuJc6Tuv2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:14 2026 by rpki-client