Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
File: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft (raw, json)
Hash identifier: 0v0B+XCDWKUYDXxlxe0RKGhQiGSlWPA6SGZOER2l3IQ=
Subject key identifier: 4F:3F:6C:AF:C1:1C:C4:0B:BA:D8:59:D9:81:7A:1E:1B:C6:7E:DC:14
Authority key identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
Certificate issuer: /CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Certificate serial: 019D2B84D2AD9384CFCC53EEA18FE6213E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 19:00:18 +0000
Manifest this update: Thu 26 Mar 2026 19:00:18 +0000
Manifest next update: Fri 27 Mar 2026 19:00:18 +0000
Files and hashes: 1: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl (hash: 9xlV8JIlUkwlwhUme5WBXX7xEm9hPJ2uxV9cu5z3Np4=)
2: vhW7lS-JBYebJEO-U1J2yweu6Yo.roa (hash: hv3bo8RYqKbVjpyma1UuE8rn8DDYyjzn6U1qa0IMKCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:84:d2:ad:93:84:cf:cc:53:ee:a1:8f:e6:21:3e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Validity
Not Before: Mar 26 19:00:18 2026 GMT
Not After : Mar 27 19:00:18 2026 GMT
Subject: CN=4f3f6cafc11cc40bbad859d9817a1e1bc67edc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:89:88:c1:f4:89:35:7e:3b:8b:b8:33:5a:80:
48:20:7e:a1:39:6e:dd:65:5a:a7:7b:0d:cd:22:a2:
95:10:7e:d0:44:7a:64:93:bf:a7:61:c1:d1:ff:37:
0c:a6:cb:d3:7d:c0:74:2f:fd:02:f4:1d:f3:12:fc:
b0:cc:6c:24:21:7f:f5:91:5e:cc:3f:5e:24:f3:d2:
7a:5f:35:52:6a:e7:40:d1:28:cd:d1:d4:5a:8a:78:
7a:0a:18:cf:a4:1a:79:92:ad:e4:39:77:6e:72:26:
43:a8:ba:28:ea:e7:4a:68:c4:83:98:52:70:43:4d:
1f:7f:1d:11:7a:93:36:ba:f8:4f:f8:11:cd:47:43:
45:85:3a:f3:69:f2:33:42:22:a1:a0:7b:0d:29:ae:
45:b9:9c:08:08:11:ce:07:b4:d1:5a:f4:8b:e4:15:
95:68:86:90:db:98:10:ea:bc:db:39:5d:7a:a1:af:
1f:2e:74:48:80:1e:82:b8:f3:ad:d2:76:61:56:bb:
cb:b0:8a:b5:4a:ac:6f:58:81:cd:d7:9b:9e:51:a6:
3f:0d:9a:9b:3f:c6:68:b4:41:ff:f6:b8:c3:76:8f:
17:41:01:f4:9b:c2:de:7d:6f:77:a0:6d:61:1e:1b:
84:25:82:00:29:cc:1b:11:27:2e:da:f8:b1:89:d2:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3F:6C:AF:C1:1C:C4:0B:BA:D8:59:D9:81:7A:1E:1B:C6:7E:DC:14
X509v3 Authority Key Identifier:
keyid:E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:31:01:34:65:b7:51:25:9b:01:d1:d9:7f:b1:ea:6b:b0:e2:
6b:aa:f1:b1:65:77:78:8b:ad:3b:13:e0:98:ca:ac:4a:98:c7:
c5:03:5d:e7:2e:9e:f2:c2:97:bc:c8:69:49:6c:fa:e9:f8:bf:
9e:27:d8:66:19:c1:1d:97:98:0c:b5:5d:22:da:bd:13:3a:bc:
c0:09:7e:3e:e1:d7:0d:eb:de:95:35:61:55:ae:e6:93:97:fa:
91:7f:74:37:9e:4b:54:bc:c2:9c:ae:83:36:cc:ae:99:a9:f8:
0f:bb:75:c8:a4:34:a7:29:3e:0f:cb:4e:d0:6f:0b:1a:d2:c1:
06:90:92:15:ff:28:cb:52:86:2a:01:88:2a:f4:21:29:cd:98:
0a:f6:6c:77:d0:8a:28:a2:a0:60:53:c4:d3:58:32:47:b5:5f:
ad:18:24:af:3f:57:96:90:71:0a:43:d4:a6:7a:0e:ee:3d:72:
a3:02:5c:c1:90:15:3f:d7:32:ad:64:69:46:ab:5c:04:4e:b4:
7d:f8:5b:cc:8f:cd:b5:d5:e1:b2:be:1d:f0:0c:51:fd:d4:00:
51:b2:d8:1e:9a:ba:9d:b9:4e:d1:55:b2:d3:2a:63:6c:3b:80:
b5:4a:03:5b:bd:42:64:7f:61:31:95:16:44:5e:1c:02:cf:96:
cc:61:e9:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhNKtk4TPzFPuoY/mIT50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWVkOWE5ZDFiNmI1MzgzZWJmOTQ2ZDVmYzU0OTgwNjEy
NTYzZWEwHhcNMjYwMzI2MTkwMDE4WhcNMjYwMzI3MTkwMDE4WjAzMTEwLwYDVQQD
Eyg0ZjNmNmNhZmMxMWNjNDBiYmFkODU5ZDk4MTdhMWUxYmM2N2VkYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YmIwfSJNX47i7gzWoBIIH6hOW7d
ZVqnew3NIqKVEH7QRHpkk7+nYcHR/zcMpsvTfcB0L/0C9B3zEvywzGwkIX/1kV7M
P14k89J6XzVSaudA0SjN0dRainh6ChjPpBp5kq3kOXduciZDqLoo6udKaMSDmFJw
Q00ffx0RepM2uvhP+BHNR0NFhTrzafIzQiKhoHsNKa5FuZwICBHOB7TRWvSL5BWV
aIaQ25gQ6rzbOV16oa8fLnRIgB6CuPOt0nZhVrvLsIq1SqxvWIHN15ueUaY/DZqb
P8ZotEH/9rjDdo8XQQH0m8LefW93oG1hHhuEJYIAKcwbEScu2vixidLQBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8/bK/BHMQLuthZ2YF6HhvGftwUMB8GA1UdIwQY
MBaAFOKe2anRtrU4Pr+UbV/FSYBhJWPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zOGVjNWItMzM2ZC00YTFjLWE4NGEt
ZjZjNjg1OWIzMGYwLzEvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zOGVjNWItMzM2ZC00YTFjLWE4NGEtZjZjNjg1OWIzMGYw
LzEvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjEBNGW3
USWbAdHZf7Hqa7Dia6rxsWV3eIutOxPgmMqsSpjHxQNd5y6e8sKXvMhpSWz66fi/
nifYZhnBHZeYDLVdItq9Ezq8wAl+PuHXDevelTVhVa7mk5f6kX90N55LVLzCnK6D
Nsyuman4D7t1yKQ0pyk+D8tO0G8LGtLBBpCSFf8oy1KGKgGIKvQhKc2YCvZsd9CK
KKKgYFPE01gyR7VfrRgkrz9XlpBxCkPUpnoO7j1yowJcwZAVP9cyrWRpRqtcBE60
ffhbzI/NtdXhsr4d8AxR/dQAUbLYHpq6nblO0VWy0ypjbDuAtUoDW71CZH9hMZUW
RF4cAs+WzGHp8Q==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:35 2026 by rpki-client