Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File: 4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier: sQRuhj1zzSeFooEi4/Bj2+qMs47p8tiqJLGWqqYgeO0=
Subject key identifier: 9B:92:66:E3:27:F8:71:B9:CE:66:4F:E5:B4:32:6B:8D:2F:BA:9C:10
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial: 019D25BACA05571A965EC117D523EA25D89A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number: 13AE
Signing time: Wed 25 Mar 2026 16:01:31 +0000
Manifest this update: Wed 25 Mar 2026 16:01:31 +0000
Manifest next update: Thu 26 Mar 2026 16:01:31 +0000
Files and hashes: 1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: Jj0DDeLis5s9prVOmFVzV8Hr1EnyemnlDhHE4p/lWi0=)
2: 4xl3tok9SorpWFsyI4hTWRVgL8I.roa (hash: D/WQvDz0YD7aThz9pG4ZIXECMXp1ea6y/G/Bk0u0Mqg=)
3: vzJwebJ7E7PLEVf89eADV1dlWKk.roa (hash: Yr+W4PaEcUNg/gK3cVZEvL18EsHfc2QVQ1cTqMJ7HMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:ca:05:57:1a:96:5e:c1:17:d5:23:ea:25:d8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Validity
Not Before: Mar 25 16:01:31 2026 GMT
Not After : Mar 26 16:01:31 2026 GMT
Subject: CN=9b9266e327f871b9ce664fe5b4326b8d2fba9c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:84:f2:4d:57:18:94:63:7a:3c:c7:1e:0e:
9d:b5:93:4c:ee:3d:4c:98:f4:6e:2c:bc:54:eb:f9:
41:03:fe:37:9b:4a:06:50:20:65:d6:6b:6e:a6:1a:
93:1a:b9:4c:d4:8e:09:b8:ad:40:d8:f2:f3:d1:1a:
d9:01:04:9c:14:63:60:78:72:14:b8:93:9d:b3:18:
02:c0:89:9f:04:3a:6b:d4:73:ba:c0:1e:63:b9:92:
44:9c:c5:13:b6:37:23:ef:78:1c:e4:97:69:19:79:
22:06:84:3e:ef:ff:0a:d0:f4:c9:9a:7d:7b:11:35:
86:1a:4e:dd:96:1d:c8:27:66:0f:26:c9:b6:7e:47:
2c:ac:1c:cd:b4:c8:a9:e4:bf:39:c6:de:0c:be:c7:
c6:79:90:2b:1a:81:60:a6:2a:14:a3:a7:9e:e0:4d:
a2:2a:c0:82:20:13:79:0c:d1:e2:99:d4:1c:3e:05:
12:c1:34:0d:7a:5e:c0:c7:87:4f:95:f7:e6:53:9a:
d7:42:e5:e0:d6:69:99:50:e1:b5:3d:34:54:6f:c7:
85:da:bd:01:7a:52:14:bb:a4:6d:05:55:fe:6b:cb:
cc:f1:08:be:2e:cc:44:30:bb:45:2c:7c:bd:0d:36:
1a:d7:2c:a1:dc:ba:29:29:a5:9a:50:56:ee:d3:c1:
b0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:92:66:E3:27:F8:71:B9:CE:66:4F:E5:B4:32:6B:8D:2F:BA:9C:10
X509v3 Authority Key Identifier:
keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d5:db:0e:ae:4f:0b:c2:94:ae:89:ce:66:e3:67:6d:ff:43:
6b:78:db:7c:b1:22:61:56:c0:f9:d7:9b:54:80:44:8e:6b:6c:
16:3e:d7:88:95:70:3c:62:e8:25:37:d5:6b:01:92:10:72:59:
b8:db:ad:fc:2a:b4:e9:9b:d2:45:83:ef:d5:89:09:73:b4:f6:
03:01:8b:d4:de:ae:46:6b:20:b2:94:a4:f8:55:e8:7f:77:b8:
63:eb:72:e6:24:59:65:02:6e:2a:92:7f:65:a6:5f:87:44:5a:
e9:a3:be:e2:c6:1c:04:31:85:74:7b:d2:c5:fb:cf:8e:18:43:
ea:c1:42:8d:e5:dc:91:2d:61:20:e2:54:59:e2:42:fb:f4:6e:
d9:a7:6b:3f:41:13:55:90:28:39:5b:ff:b1:96:a0:7a:c8:63:
60:0f:b8:d4:65:f8:02:2e:5d:3a:1a:3a:fa:4a:d9:c6:88:8e:
22:a6:2f:e1:76:f6:ae:91:9c:42:9a:aa:76:4f:80:89:07:26:
b6:2e:2e:a1:8f:05:c6:5c:9c:ba:1e:30:b5:cc:07:3b:57:65:
74:83:09:2b:47:1d:af:d7:0e:67:9d:3f:e7:6b:42:0f:3b:ed:
df:22:c3:84:95:62:33:33:0e:05:39:5d:c9:b2:a5:ac:f9:62:
ec:5f:e0:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lusoFVxqWXsEX1SPqJdiaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTZhNzg1YmY3ZmU0ZDdjNGE1YzZiNzIxMjE0ZjBlOTZm
M2FlYzkwHhcNMjYwMzI1MTYwMTMxWhcNMjYwMzI2MTYwMTMxWjAzMTEwLwYDVQQD
Eyg5YjkyNjZlMzI3Zjg3MWI5Y2U2NjRmZTViNDMyNmI4ZDJmYmE5YzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjCE8k1XGJRjejzHHg6dtZNM7j1M
mPRuLLxU6/lBA/43m0oGUCBl1mtuphqTGrlM1I4JuK1A2PLz0RrZAQScFGNgeHIU
uJOdsxgCwImfBDpr1HO6wB5juZJEnMUTtjcj73gc5JdpGXkiBoQ+7/8K0PTJmn17
ETWGGk7dlh3IJ2YPJsm2fkcsrBzNtMip5L85xt4MvsfGeZArGoFgpioUo6ee4E2i
KsCCIBN5DNHimdQcPgUSwTQNel7Ax4dPlffmU5rXQuXg1mmZUOG1PTRUb8eF2r0B
elIUu6RtBVX+a8vM8Qi+LsxEMLtFLHy9DTYa1yyh3LopKaWaUFbu08GwxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuSZuMn+HG5zmZP5bQya40vupwQMB8GA1UdIwQY
MBaAFOFWp4W/f+TXxKXGtyEhTw6W867JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZhbmhiOV81TmZFcGNhM0lTRlBEcGJ6cnNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMThmMzItNDczYy00ZDllLWFiODUt
N2JkMGNmYTIzOWY2LzEvNFZhbmhiOV81TmZFcGNhM0lTRlBEcGJ6cnNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iMThmMzItNDczYy00ZDllLWFiODUtN2JkMGNmYTIzOWY2
LzEvNFZhbmhiOV81TmZFcGNhM0lTRlBEcGJ6cnNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdXbDq5P
C8KUronOZuNnbf9Da3jbfLEiYVbA+debVIBEjmtsFj7XiJVwPGLoJTfVawGSEHJZ
uNut/Cq06ZvSRYPv1YkJc7T2AwGL1N6uRmsgspSk+FXof3e4Y+ty5iRZZQJuKpJ/
ZaZfh0Ra6aO+4sYcBDGFdHvSxfvPjhhD6sFCjeXckS1hIOJUWeJC+/Ru2adrP0ET
VZAoOVv/sZageshjYA+41GX4Ai5dOho6+krZxoiOIqYv4Xb2rpGcQpqqdk+AiQcm
ti4uoY8Fxlycuh4wtcwHO1dldIMJK0cdr9cOZ50/52tCDzvt3yLDhJViMzMOBTld
ybKlrPli7F/gqg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:18:16 2026 by rpki-client