Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
File: M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json)
Hash identifier: 6X7VCAt2DS6C/LtzQGFg5cM1zSoQpaxKt/GVh5I66JU=
Subject key identifier: D0:6C:90:7E:BE:B0:E5:91:39:0A:BD:72:AE:2A:8D:89:54:BB:32:DC
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial: 019D28F30C1CB94D98E5057388F917B66030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
Manifest number: 1125
Signing time: Thu 26 Mar 2026 07:01:50 +0000
Manifest this update: Thu 26 Mar 2026 07:01:50 +0000
Manifest next update: Fri 27 Mar 2026 07:01:50 +0000
Files and hashes: 1: 7syofHXFJmPSL6BJ-29lF-gFfeM.roa (hash: NO9XiETKh7e/kgh6aR14rNQhQwpTu97o6Yw7GN8zhwk=)
2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: /jv3lNaleGPNJWuzagV16SsoEX2niW+9Q/xTowv5T6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0c:1c:b9:4d:98:e5:05:73:88:f9:17:b6:60:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Validity
Not Before: Mar 26 07:01:50 2026 GMT
Not After : Mar 27 07:01:50 2026 GMT
Subject: CN=d06c907ebeb0e591390abd72ae2a8d8954bb32dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:89:7c:2d:9c:f6:f0:00:fe:0b:f0:4d:3c:20:
08:59:0e:3b:63:29:c2:6f:ec:64:6e:77:aa:27:ca:
e6:c2:5f:73:9f:dd:ad:76:a0:c9:e9:80:d1:c8:fa:
ca:24:93:63:57:76:5d:f9:b0:bf:1b:75:4c:c6:58:
30:95:70:54:03:a9:df:74:c2:34:67:c7:2d:2e:84:
c1:3a:55:28:e2:77:98:db:71:44:8a:a4:29:cb:b2:
f5:f8:08:8b:be:50:b7:3d:19:5c:c2:18:47:9a:2d:
70:ee:dd:f6:41:a5:d9:7e:26:ff:aa:fc:69:90:b2:
a6:38:90:7c:73:c2:9f:ea:1e:32:56:1d:5d:e8:0c:
72:d5:8c:2b:5a:9d:8a:44:8e:a9:09:3e:fd:fb:ce:
bb:bd:73:f7:ba:1b:7d:5c:8b:83:0c:09:77:a2:f9:
e8:97:b9:05:63:b0:82:79:fe:05:62:1b:84:c7:e2:
a6:3a:08:a0:c8:94:10:97:4b:c5:55:12:88:43:55:
bf:1e:8c:8a:1a:51:ac:6b:85:c0:84:e1:aa:6c:97:
41:17:5c:e8:19:a2:ff:a7:1c:f1:31:d8:f7:c7:59:
06:6b:2e:64:3d:02:93:71:fb:32:22:e9:0f:54:68:
e3:b0:b8:7d:d0:91:85:f0:ed:66:a4:7c:42:9b:c2:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6C:90:7E:BE:B0:E5:91:39:0A:BD:72:AE:2A:8D:89:54:BB:32:DC
X509v3 Authority Key Identifier:
keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2f:65:66:33:f9:b1:6c:c7:f1:4e:50:90:75:ce:b2:70:e7:
8e:8b:9d:97:46:12:6d:c6:6e:e2:08:89:1d:61:06:85:05:cd:
f9:5e:f7:f9:fd:85:d2:cf:cc:e6:3e:bf:2c:df:4b:0f:06:90:
62:01:ab:7b:32:16:3c:8e:a3:54:b4:e6:c2:d5:63:f6:ee:f9:
76:3c:3c:91:65:25:c4:7a:93:6b:c2:f4:dd:24:9a:a4:dc:32:
bc:00:20:dd:bd:09:27:6c:7c:31:73:52:ab:5c:ce:dc:e7:cb:
fe:7f:e2:63:d7:71:e7:6f:b1:69:13:1d:0b:ab:4f:5e:06:2e:
c3:a7:e2:08:c8:1f:94:f8:8b:a7:d3:3a:04:aa:cd:62:c4:b6:
e7:a9:bf:00:a7:2b:52:ad:99:d4:45:d7:35:c8:a2:86:f4:0b:
d2:0c:c1:48:4c:6b:7f:2e:b1:89:d6:c6:27:22:c8:17:f1:2a:
30:bc:6a:de:e4:38:bd:4e:70:ed:40:90:e1:a1:27:ff:d7:14:
37:bc:05:57:85:f9:4a:bf:a7:95:00:64:50:5f:e7:4f:3a:80:
60:2d:91:13:9f:ea:81:44:ff:3c:24:f3:81:0b:c6:a7:6d:5b:
ea:0d:7d:3c:03:87:ff:ef:79:29:6d:89:a6:f0:42:5d:5f:a6:
21:1f:ad:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8wwcuU2Y5QVziPkXtmAwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzODQyNDFhZGU1ZjI2MWFjOGVjZTg0M2U1ZTdkYjdlZTEw
OGUzM2MwHhcNMjYwMzI2MDcwMTUwWhcNMjYwMzI3MDcwMTUwWjAzMTEwLwYDVQQD
EyhkMDZjOTA3ZWJlYjBlNTkxMzkwYWJkNzJhZTJhOGQ4OTU0YmIzMmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Il8LZz28AD+C/BNPCAIWQ47YynC
b+xkbneqJ8rmwl9zn92tdqDJ6YDRyPrKJJNjV3Zd+bC/G3VMxlgwlXBUA6nfdMI0
Z8ctLoTBOlUo4neY23FEiqQpy7L1+AiLvlC3PRlcwhhHmi1w7t32QaXZfib/qvxp
kLKmOJB8c8Kf6h4yVh1d6Axy1YwrWp2KRI6pCT79+867vXP3uht9XIuDDAl3ovno
l7kFY7CCef4FYhuEx+KmOgigyJQQl0vFVRKIQ1W/HoyKGlGsa4XAhOGqbJdBF1zo
GaL/pxzxMdj3x1kGay5kPQKTcfsyIukPVGjjsLh90JGF8O1mpHxCm8KBIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBskH6+sOWROQq9cq4qjYlUuzLcMB8GA1UdIwQY
MBaAFDOEJBreXyYayOzoQ+Xn237hCOM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zYzU2ZTItZTRiOC00NWZjLTk1OWYt
YzdhYTE5ZWFiYmE3LzEvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8zYzU2ZTItZTRiOC00NWZjLTk1OWYtYzdhYTE5ZWFiYmE3
LzEvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcy9lZjP5
sWzH8U5QkHXOsnDnjoudl0YSbcZu4giJHWEGhQXN+V73+f2F0s/M5j6/LN9LDwaQ
YgGrezIWPI6jVLTmwtVj9u75djw8kWUlxHqTa8L03SSapNwyvAAg3b0JJ2x8MXNS
q1zO3OfL/n/iY9dx52+xaRMdC6tPXgYuw6fiCMgflPiLp9M6BKrNYsS256m/AKcr
Uq2Z1EXXNciihvQL0gzBSExrfy6xidbGJyLIF/EqMLxq3uQ4vU5w7UCQ4aEn/9cU
N7wFV4X5Sr+nlQBkUF/nTzqAYC2RE5/qgUT/PCTzgQvGp21b6g19PAOH/+95KW2J
pvBCXV+mIR+tOQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:56 2026 by rpki-client