Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier: isLP8vO0yO2nDq6Zabh/MM2DjZhG80YQtjhwVmJmHTE=
Subject key identifier: 33:D0:74:71:5C:69:4C:E4:5F:98:D4:38:24:C0:EB:68:F1:18:73:E0
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 019D273ACD88308F6EB0C918A542957372AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number: 07E0
Signing time: Wed 25 Mar 2026 23:00:58 +0000
Manifest this update: Wed 25 Mar 2026 23:00:58 +0000
Manifest next update: Thu 26 Mar 2026 23:00:58 +0000
Files and hashes: 1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: sgcFbpncKJrix6DK5YfWbd/m+rcW89vRXpA+Vq34Uq4=)
2: NyZecqDxZWfaHCuoM0IhIFWnpqg.roa (hash: iqpBZxFEqsIO8elb98oBs7HFDqASdANh9B/9XR18vAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:cd:88:30:8f:6e:b0:c9:18:a5:42:95:73:72:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Mar 25 23:00:58 2026 GMT
Not After : Mar 26 23:00:58 2026 GMT
Subject: CN=33d074715c694ce45f98d43824c0eb68f11873e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:d1:9a:4f:3f:af:93:04:f6:fd:0a:ff:47:
68:82:65:6c:9f:79:51:bd:1e:59:07:ef:d6:b8:c0:
a7:c8:b8:31:95:cd:79:ac:d3:62:99:88:b8:79:6b:
51:28:88:f0:b1:4a:2f:e8:f5:10:e5:14:67:02:dd:
19:ee:12:ec:d9:3b:76:cc:f8:95:8e:cd:16:4f:94:
14:e7:e0:7c:7c:7d:6b:6f:f9:03:3c:c1:8f:11:7e:
7e:ba:d7:0d:ed:68:8e:ed:17:6f:fa:1f:7d:c2:92:
10:43:1d:b8:0e:98:d6:04:30:e1:9e:fe:79:27:7c:
f7:6b:12:29:92:e6:8d:b6:3c:43:90:98:f5:58:ad:
ea:92:f3:42:56:c0:8f:74:f8:b0:92:77:54:d2:83:
ce:23:95:81:09:88:ae:2b:3f:5b:4d:4c:69:e8:2e:
8f:3d:39:60:c1:95:fc:fe:ab:7b:32:18:a9:02:c8:
6f:73:9a:27:5e:e8:61:90:f7:83:5c:ca:41:be:66:
ed:e1:80:9b:4b:3f:03:1d:70:09:27:11:95:95:36:
37:76:ad:96:86:07:70:1c:ed:30:13:c0:b7:12:b0:
15:00:63:43:74:34:6a:9a:3b:c1:90:14:40:8b:7f:
c0:3e:b5:a1:98:f3:94:91:5a:8e:b5:1d:93:4f:d4:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D0:74:71:5C:69:4C:E4:5F:98:D4:38:24:C0:EB:68:F1:18:73:E0
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:69:ef:ae:c7:ae:d6:e3:98:70:0e:86:b1:13:0a:ad:4c:b6:
36:82:5a:47:bc:cf:92:0f:91:7a:bb:fb:01:fc:e7:e9:50:66:
20:7d:0d:21:49:7a:58:da:df:ec:07:50:8e:26:ec:b5:3a:9b:
0e:86:c4:01:88:c7:3d:7e:68:81:5b:19:92:4e:79:2c:93:97:
4b:3c:a7:99:6b:bd:25:ca:97:00:ba:0e:08:20:20:cc:1d:72:
a1:e9:28:94:5a:f5:7b:35:16:2c:2c:29:e8:bf:51:5a:d7:05:
6d:f2:be:e8:6e:a2:8d:15:5b:50:57:1d:09:d6:a5:cd:cc:85:
32:61:ff:0e:ae:1c:e0:38:c8:e3:f2:19:c5:29:7a:53:fc:07:
a2:c7:39:db:12:0a:09:ab:95:50:47:4e:83:a0:35:78:77:a4:
17:51:54:bc:a9:df:00:f1:2e:47:d5:a1:87:74:63:b1:de:da:
12:40:2d:39:af:2e:62:ef:e0:2c:04:13:6b:4d:ce:4d:4a:a9:
47:04:cf:ea:2a:32:3f:6e:36:39:21:28:40:e1:17:5b:7d:08:
7f:21:e7:52:0e:a5:a5:e7:59:71:73:e2:4a:cd:b0:ae:d0:25:
e1:14:98:df:90:94:64:f3:d1:3d:38:be:7c:75:dc:8c:81:56:
5f:b8:88:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOs2IMI9usMkYpUKVc3KqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyN2UxZGQwNzQ2NjI3ODAzNmJhNWNkOTQzZDdiMGUwMjFj
Zjg2MjgwHhcNMjYwMzI1MjMwMDU4WhcNMjYwMzI2MjMwMDU4WjAzMTEwLwYDVQQD
EygzM2QwNzQ3MTVjNjk0Y2U0NWY5OGQ0MzgyNGMwZWI2OGYxMTg3M2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvXRmk8/r5ME9v0K/0dogmVsn3lR
vR5ZB+/WuMCnyLgxlc15rNNimYi4eWtRKIjwsUov6PUQ5RRnAt0Z7hLs2Tt2zPiV
js0WT5QU5+B8fH1rb/kDPMGPEX5+utcN7WiO7Rdv+h99wpIQQx24DpjWBDDhnv55
J3z3axIpkuaNtjxDkJj1WK3qkvNCVsCPdPiwkndU0oPOI5WBCYiuKz9bTUxp6C6P
PTlgwZX8/qt7MhipAshvc5onXuhhkPeDXMpBvmbt4YCbSz8DHXAJJxGVlTY3dq2W
hgdwHO0wE8C3ErAVAGNDdDRqmjvBkBRAi3/APrWhmPOUkVqOtR2TT9TTEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPQdHFcaUzkX5jUOCTA62jxGHPgMB8GA1UdIwQY
MBaAFOJ+HdB0ZieANrpc2UPXsOAhz4YoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDIt
NWVjMzM2YmY3NDNiLzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDItNWVjMzM2YmY3NDNi
LzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGnvrseu
1uOYcA6GsRMKrUy2NoJaR7zPkg+Rerv7Afzn6VBmIH0NIUl6WNrf7AdQjibstTqb
DobEAYjHPX5ogVsZkk55LJOXSzynmWu9JcqXALoOCCAgzB1yoekolFr1ezUWLCwp
6L9RWtcFbfK+6G6ijRVbUFcdCdalzcyFMmH/Dq4c4DjI4/IZxSl6U/wHosc52xIK
CauVUEdOg6A1eHekF1FUvKnfAPEuR9Whh3Rjsd7aEkAtOa8uYu/gLAQTa03OTUqp
RwTP6ioyP242OSEoQOEXW30IfyHnUg6lpedZcXPiSs2wrtAl4RSY35CUZPPRPTi+
fHXcjIFWX7iIOw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:53 2026 by rpki-client