Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: 7XQwQgYexzJGqzQdIK5PsrJ7qQz8HPh53D+Yq7UcBfw=
Subject key identifier: CA:FA:F4:28:96:FF:ED:C0:4F:70:F0:BB:37:50:68:7C:C7:B2:6C:68
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 019D25838B443F90112D2394B102AD59A0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0C48
Signing time: Wed 25 Mar 2026 15:01:11 +0000
Manifest this update: Wed 25 Mar 2026 15:01:11 +0000
Manifest next update: Thu 26 Mar 2026 15:01:11 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: 80xf4tWhCP+d9qbLkEXN/BTWLh1UL1vTIVrn6YkVhbA=)
2: Zfv_5cAa3ri0Ax5p2vNE36rHpnE.roa (hash: Id3c2s4Nmji3usQrf3+l5D4JNCrYHAfvKHW7XcPkXa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:8b:44:3f:90:11:2d:23:94:b1:02:ad:59:a0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Mar 25 15:01:11 2026 GMT
Not After : Mar 26 15:01:11 2026 GMT
Subject: CN=cafaf42896ffedc04f70f0bb3750687cc7b26c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:57:53:8b:6c:85:32:d5:04:eb:24:be:47:
1e:2d:5c:ca:59:22:6e:fb:a2:1a:40:2b:0d:ae:fa:
db:c1:5d:b6:ad:c2:fb:f8:49:98:9d:97:46:3d:7f:
db:08:38:72:14:fb:43:a2:08:7c:68:d6:13:1f:93:
5d:74:b5:b9:d8:c0:e8:d3:95:39:97:e0:42:dc:e7:
5a:ed:b0:ad:56:da:9b:d7:ed:87:07:83:dd:03:e5:
af:d5:6c:04:e2:61:ad:24:58:c8:8c:2d:3a:2f:bc:
4c:f9:b2:47:ae:76:96:64:fc:04:05:4d:27:7c:1f:
91:24:3c:67:10:69:04:e5:c4:64:a2:4c:21:29:6f:
4a:9e:cd:d7:78:f7:e5:a3:31:ef:8e:7a:c5:34:9b:
2e:53:ba:04:5d:fa:34:b2:71:db:70:65:72:6a:4e:
82:15:9f:d1:62:f3:02:49:96:72:ac:60:bd:c3:e1:
ba:d9:a0:bc:cf:ac:fb:39:ec:83:cf:33:bb:f1:3c:
5b:6d:0f:3e:22:31:e0:e1:72:0d:a2:17:ef:02:f3:
62:f9:b1:17:60:b3:67:1c:8a:2e:61:29:bb:4d:34:
5b:03:af:5e:e4:83:70:54:fb:df:78:a5:1b:87:3b:
73:60:3a:94:bb:d5:e4:9f:4d:66:a0:3f:ac:68:a2:
fb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FA:F4:28:96:FF:ED:C0:4F:70:F0:BB:37:50:68:7C:C7:B2:6C:68
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2d:0c:ec:88:b0:2e:8d:b4:8e:f1:ae:e3:25:f0:40:ac:b3:
b2:60:ba:7c:1e:6a:57:f3:25:b4:6f:d2:a4:06:ba:94:5b:bb:
7d:34:71:83:05:bd:d9:e0:4c:81:82:56:01:62:d4:27:9d:03:
f0:62:54:5d:2c:78:c8:e2:21:13:0d:09:ca:20:f5:61:1a:38:
22:13:2b:e7:69:60:30:e8:5d:09:66:c9:fb:f4:26:73:32:02:
d8:5e:d1:ce:cb:16:a4:43:dc:f7:21:5f:04:68:27:ca:07:07:
a8:19:f6:b8:04:99:73:06:14:f9:b3:37:21:47:a7:9c:1c:c0:
7f:95:27:66:3c:dc:d6:67:9e:81:79:76:ba:e9:ac:56:f1:77:
3c:70:fd:8a:85:b4:30:7a:75:17:50:eb:f9:15:1f:65:15:67:
42:cb:cd:11:24:bc:75:88:e9:9a:ed:18:27:75:1f:e3:a4:0e:
f5:f4:46:cf:cb:e0:4f:73:04:fb:3c:3d:35:f5:5c:22:b5:ab:
da:e3:75:9f:b6:34:6f:d9:5d:d1:fb:06:04:35:09:fc:ff:46:
ab:d5:24:82:c8:d5:f1:94:92:0d:bf:b6:25:c1:71:03:4f:4f:
5c:25:42:b4:70:0a:c9:b7:3c:02:a3:75:c2:10:e5:b1:54:39:
e1:87:b8:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg4tEP5ARLSOUsQKtWaD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDJjMmI3NGQ3NTc1YTIyOGE3ZTY0ZjA0MDZmM2EzOTdj
N2FlNTYwHhcNMjYwMzI1MTUwMTExWhcNMjYwMzI2MTUwMTExWjAzMTEwLwYDVQQD
EyhjYWZhZjQyODk2ZmZlZGMwNGY3MGYwYmIzNzUwNjg3Y2M3YjI2YzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvlXU4tshTLVBOskvkceLVzKWSJu
+6IaQCsNrvrbwV22rcL7+EmYnZdGPX/bCDhyFPtDogh8aNYTH5NddLW52MDo05U5
l+BC3Oda7bCtVtqb1+2HB4PdA+Wv1WwE4mGtJFjIjC06L7xM+bJHrnaWZPwEBU0n
fB+RJDxnEGkE5cRkokwhKW9Kns3XePflozHvjnrFNJsuU7oEXfo0snHbcGVyak6C
FZ/RYvMCSZZyrGC9w+G62aC8z6z7OeyDzzO78TxbbQ8+IjHg4XINohfvAvNi+bEX
YLNnHIouYSm7TTRbA69e5INwVPvfeKUbhztzYDqUu9Xkn01moD+saKL7iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMr69CiW/+3AT3DwuzdQaHzHsmxoMB8GA1UdIwQY
MBaAFOJCwrdNdXWiKKfmTwQG86OXx65WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83ZTMwMjUtOGNhZi00MDJjLWI1NGYt
Y2JiOGNmZWU2ZTNjLzEvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83ZTMwMjUtOGNhZi00MDJjLWI1NGYtY2JiOGNmZWU2ZTNj
LzEvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALy0M7Iiw
Lo20jvGu4yXwQKyzsmC6fB5qV/MltG/SpAa6lFu7fTRxgwW92eBMgYJWAWLUJ50D
8GJUXSx4yOIhEw0JyiD1YRo4IhMr52lgMOhdCWbJ+/QmczIC2F7RzssWpEPc9yFf
BGgnygcHqBn2uASZcwYU+bM3IUennBzAf5UnZjzc1meegXl2uumsVvF3PHD9ioW0
MHp1F1Dr+RUfZRVnQsvNESS8dYjpmu0YJ3Uf46QO9fRGz8vgT3ME+zw9NfVcIrWr
2uN1n7Y0b9ld0fsGBDUJ/P9Gq9UkgsjV8ZSSDb+2JcFxA09PXCVCtHAKybc8AqN1
whDlsVQ54Ye4vQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:48 2026 by rpki-client