Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier: j2lSGuNufiZJJt0fNBb3QCEvCJZcmC+H0Ky87OkBaJY=
Subject key identifier: DE:78:00:92:DA:27:6B:15:5B:A6:19:D1:1C:C8:E9:A5:35:E6:9C:E7
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 019D273AD5D7D2F373D35060347F47DD51CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number: 1195
Signing time: Wed 25 Mar 2026 23:01:00 +0000
Manifest this update: Wed 25 Mar 2026 23:01:00 +0000
Manifest next update: Thu 26 Mar 2026 23:01:00 +0000
Files and hashes: 1: Br3g91W4evf2A8FX4-nPHSqH7Oc.roa (hash: gTgHpNU+s78J1A+sPr7pjfV/Fs0kKMeRldiNIgByjo4=)
2: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: WHwmOElkf6+2x4UUkF9+1cDaEqLvTgXXEraxTCTvHpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d5:d7:d2:f3:73:d3:50:60:34:7f:47:dd:51:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Mar 25 23:01:00 2026 GMT
Not After : Mar 26 23:01:00 2026 GMT
Subject: CN=de780092da276b155ba619d11cc8e9a535e69ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:69:55:ce:1a:47:44:b9:a1:01:f9:95:aa:
58:26:8b:a2:ca:d7:a0:78:ab:7d:6d:9a:f4:4c:a0:
d4:c8:cf:76:f7:a9:2b:e8:12:a8:7b:5e:86:92:5c:
91:0b:21:c4:83:21:d0:a0:a9:24:8b:79:ce:ca:48:
20:b6:ff:23:21:45:1b:a5:7a:f0:7a:3c:d9:7c:83:
d5:d6:56:11:ee:63:74:1c:1d:00:a4:bb:2d:6c:d9:
99:7d:53:9a:50:f4:b5:75:6a:c0:4b:9f:fe:81:de:
57:30:e3:4c:4f:90:30:db:ff:2f:40:29:9d:8a:ec:
03:36:2d:d9:b1:2f:8f:56:5b:20:78:f4:b3:57:54:
b5:f5:d2:3e:14:d5:34:18:fc:35:24:55:63:77:3d:
b3:15:ec:cf:ca:04:7e:e5:9b:de:da:fb:78:6e:b7:
3d:71:a2:ea:e1:20:02:2b:75:04:cc:fd:d5:e6:1f:
08:02:ee:89:8e:75:cf:9f:e7:6d:9f:8f:6e:cb:dd:
30:f3:ae:2c:92:44:70:e4:bb:0a:6d:a3:c3:41:99:
85:02:ae:a0:c8:c6:a0:f7:09:f8:ef:55:b8:42:5a:
46:90:e3:51:c4:b5:cf:04:bf:34:01:7c:20:d6:c3:
e1:32:6a:e2:7c:1d:e8:55:26:9e:c2:28:e5:66:18:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:78:00:92:DA:27:6B:15:5B:A6:19:D1:1C:C8:E9:A5:35:E6:9C:E7
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4b:85:b4:21:8f:56:08:08:1e:c3:48:d9:26:f5:47:3b:f7:
6f:b7:ea:a3:ee:ba:0f:26:37:85:31:63:fd:4c:b1:14:9a:07:
23:75:73:29:1a:38:da:8d:7e:01:4c:7b:da:e4:41:72:fa:b9:
82:e0:09:80:cb:79:bb:a2:9b:32:b8:f2:a5:6e:f2:30:49:10:
9e:24:ba:95:78:a5:35:ad:6b:c8:a8:09:42:53:98:71:fe:97:
35:95:01:1f:84:3c:51:e8:1f:e2:83:33:d9:a0:92:06:a5:a0:
af:a9:7a:67:95:09:13:40:77:a6:fe:3d:9d:3b:01:2a:69:2b:
64:90:63:12:6f:33:fc:92:4b:1d:ee:aa:5a:89:80:8a:b6:ba:
78:72:e2:a2:b5:73:19:f6:ff:c8:48:2a:ff:d4:d6:f3:a8:97:
5c:d4:0e:75:78:fe:3e:e0:28:56:d6:f3:e9:e6:fb:66:57:29:
d9:2c:ab:ea:74:a9:85:9d:b4:22:93:49:dd:5f:e6:fe:97:72:
cc:8c:09:18:cf:0b:b6:7e:89:12:22:55:8b:45:11:cf:d9:38:
4c:15:fd:c9:c6:c4:22:04:0f:ab:c8:a1:c6:d5:60:6d:be:51:
a1:2f:26:49:ac:96:bc:95:52:55:6e:53:0c:65:85:fb:98:c5:
1f:0c:a9:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOtXX0vNz01BgNH9H3VHMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODIwOGIxMjljNTNlODdjM2YwZDBlZDFiY2E4NTczMDE0
MGYzOTAwHhcNMjYwMzI1MjMwMTAwWhcNMjYwMzI2MjMwMTAwWjAzMTEwLwYDVQQD
EyhkZTc4MDA5MmRhMjc2YjE1NWJhNjE5ZDExY2M4ZTlhNTM1ZTY5Y2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1JpVc4aR0S5oQH5lapYJouiyteg
eKt9bZr0TKDUyM9296kr6BKoe16GklyRCyHEgyHQoKkki3nOykggtv8jIUUbpXrw
ejzZfIPV1lYR7mN0HB0ApLstbNmZfVOaUPS1dWrAS5/+gd5XMONMT5Aw2/8vQCmd
iuwDNi3ZsS+PVlsgePSzV1S19dI+FNU0GPw1JFVjdz2zFezPygR+5Zve2vt4brc9
caLq4SACK3UEzP3V5h8IAu6JjnXPn+dtn49uy90w864skkRw5LsKbaPDQZmFAq6g
yMag9wn471W4QlpGkONRxLXPBL80AXwg1sPhMmrifB3oVSaewijlZhh+TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN54AJLaJ2sVW6YZ0RzI6aU15pznMB8GA1UdIwQY
MBaAFP+CCLEpxT6Hw/DQ7RvKhXMBQPOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85NjgwYzctNTdkNy00OWM2LThiNjMt
NDAxNTNjNWQwYTQ3LzEvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS85NjgwYzctNTdkNy00OWM2LThiNjMtNDAxNTNjNWQwYTQ3
LzEvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEuFtCGP
VggIHsNI2Sb1Rzv3b7fqo+66DyY3hTFj/UyxFJoHI3VzKRo42o1+AUx72uRBcvq5
guAJgMt5u6KbMrjypW7yMEkQniS6lXilNa1ryKgJQlOYcf6XNZUBH4Q8Uegf4oMz
2aCSBqWgr6l6Z5UJE0B3pv49nTsBKmkrZJBjEm8z/JJLHe6qWomAira6eHLiorVz
Gfb/yEgq/9TW86iXXNQOdXj+PuAoVtbz6eb7Zlcp2Syr6nSphZ20IpNJ3V/m/pdy
zIwJGM8Ltn6JEiJVi0URz9k4TBX9ycbEIgQPq8ihxtVgbb5RoS8mSayWvJVSVW5T
DGWF+5jFHwypDg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:50 2026 by rpki-client