Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
File: 4PcIYcfPbv530i_HBJvpbGdopQA.mft (raw, json)
Hash identifier: 9ehhgFRxFzfXnL7U6HioflS5paaRfgltKe79K5W8EjI=
Subject key identifier: A1:BF:05:67:F7:38:B1:32:48:22:D5:59:F7:8C:46:9D:6B:3A:04:02
Authority key identifier: E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
Certificate issuer: /CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Certificate serial: 019CAAC706D76502D9796808DA8BFD8075F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
Manifest number: 0809
Signing time: Sun 01 Mar 2026 19:01:35 +0000
Manifest this update: Sun 01 Mar 2026 19:01:35 +0000
Manifest next update: Mon 02 Mar 2026 19:01:35 +0000
Files and hashes: 1: 4PcIYcfPbv530i_HBJvpbGdopQA.crl (hash: X1HdZIMcJz+S4s0nmQXMa2ZobsDhbgjcdy7os8M31+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:06:d7:65:02:d9:79:68:08:da:8b:fd:80:75:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Validity
Not Before: Mar 1 19:01:35 2026 GMT
Not After : Mar 2 19:01:35 2026 GMT
Subject: CN=a1bf0567f738b1324822d559f78c469d6b3a0402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:22:d6:00:06:d1:e4:aa:f7:9e:b1:a0:3b:5d:
35:6d:3b:ed:57:3f:e1:19:e7:10:57:d3:2e:94:e1:
d2:86:46:87:b7:8b:db:c9:8e:da:dd:08:d7:af:ab:
f7:2f:e7:31:6c:bb:8a:7f:b6:c7:6c:5b:51:fa:fe:
25:18:4f:cf:a7:96:21:ec:88:79:02:4a:58:32:06:
37:c5:82:86:7c:37:4e:93:55:d9:9a:1a:21:71:a4:
4c:00:28:12:70:0c:c4:d9:2b:9f:ac:2d:06:76:62:
cf:e2:b5:72:82:70:a6:02:f1:b1:e9:f9:09:72:c6:
ec:61:01:50:62:67:97:a9:e8:39:f2:62:ac:32:9f:
19:4d:8f:dd:dc:05:f6:ee:95:de:43:7b:ec:ef:aa:
5e:4e:1c:4d:bd:3d:25:a8:e4:7a:d5:89:e7:52:e4:
ec:27:31:b3:69:7b:2e:43:60:f1:04:24:98:38:5d:
9f:43:dd:b0:3a:fa:93:fa:0c:b5:c2:24:3b:af:53:
99:31:d4:65:1e:d6:1d:72:2e:87:cd:58:cf:d0:be:
e5:ea:57:75:57:a9:74:d6:83:70:ec:66:c3:23:50:
9b:d2:4a:fe:74:d2:a2:f9:a5:0e:f0:d0:d0:09:c8:
58:58:c6:89:f1:64:67:69:c0:50:51:30:d8:20:47:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BF:05:67:F7:38:B1:32:48:22:D5:59:F7:8C:46:9D:6B:3A:04:02
X509v3 Authority Key Identifier:
keyid:E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6a:3e:6d:7a:54:56:b8:8d:3b:af:4d:7f:5a:52:22:d5:c9:
b8:b0:06:cd:95:b0:d9:7c:5c:40:5a:0e:d5:4a:11:9b:b0:62:
d6:ae:40:bc:5e:99:6c:f0:87:81:ec:5b:b4:a0:55:04:27:e9:
ef:f5:da:ed:3e:9a:f5:1e:54:7c:35:bb:67:9a:9b:88:a9:22:
c2:0b:88:36:de:5b:48:ef:93:91:88:9c:3e:ff:d7:be:26:00:
2b:83:66:dd:ba:ac:7e:ff:98:a6:92:cc:f6:18:b3:a7:ce:b4:
bf:d5:27:56:95:a0:73:22:52:aa:b1:ff:42:42:4d:f4:6e:d0:
b4:09:b8:d3:14:d7:b8:ae:03:69:c8:4c:ac:c2:45:40:4a:b6:
c6:c3:fc:a5:f5:93:92:88:df:68:78:1e:ae:ac:b8:eb:54:a2:
2c:26:72:e8:22:60:de:4f:04:82:23:9d:0e:89:bc:04:6c:0f:
7e:a5:4a:21:79:e9:58:3f:8a:bd:6f:14:e8:45:e6:56:48:9a:
03:86:27:0c:fd:08:d1:16:03:89:de:83:97:ac:c7:d2:b4:be:
86:ab:e1:cc:0c:56:79:7b:98:78:7b:1c:8e:d5:96:90:48:d7:
21:8f:42:00:92:47:d0:f6:41:b6:e1:b3:7a:78:88:f1:92:3f:
28:fc:67:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxwbXZQLZeWgI2ov9gHX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZjcwODYxYzdjZjZlZmU3N2QyMmZjNzA0OWJlOTZjNjc2
OGE1MDAwHhcNMjYwMzAxMTkwMTM1WhcNMjYwMzAyMTkwMTM1WjAzMTEwLwYDVQQD
EyhhMWJmMDU2N2Y3MzhiMTMyNDgyMmQ1NTlmNzhjNDY5ZDZiM2EwNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CLWAAbR5Kr3nrGgO101bTvtVz/h
GecQV9MulOHShkaHt4vbyY7a3QjXr6v3L+cxbLuKf7bHbFtR+v4lGE/Pp5Yh7Ih5
AkpYMgY3xYKGfDdOk1XZmhohcaRMACgScAzE2SufrC0GdmLP4rVygnCmAvGx6fkJ
csbsYQFQYmeXqeg58mKsMp8ZTY/d3AX27pXeQ3vs76peThxNvT0lqOR61YnnUuTs
JzGzaXsuQ2DxBCSYOF2fQ92wOvqT+gy1wiQ7r1OZMdRlHtYdci6HzVjP0L7l6ld1
V6l01oNw7GbDI1Cb0kr+dNKi+aUO8NDQCchYWMaJ8WRnacBQUTDYIEcZ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKG/BWf3OLEySCLVWfeMRp1rOgQCMB8GA1UdIwQY
MBaAFOD3CGHHz27+d9IvxwSb6WxnaKUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFBjSVljZlBidjUzMGlfSEJKdnBiR2RvcFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NDI4MzAtY2M0OS00MTVhLTk3YjYt
NDQ3M2MwYjFlMDQ2LzEvNFBjSVljZlBidjUzMGlfSEJKdnBiR2RvcFFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81NDI4MzAtY2M0OS00MTVhLTk3YjYtNDQ3M2MwYjFlMDQ2
LzEvNFBjSVljZlBidjUzMGlfSEJKdnBiR2RvcFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2o+bXpU
VriNO69Nf1pSItXJuLAGzZWw2XxcQFoO1UoRm7Bi1q5AvF6ZbPCHgexbtKBVBCfp
7/Xa7T6a9R5UfDW7Z5qbiKkiwguINt5bSO+TkYicPv/XviYAK4Nm3bqsfv+YppLM
9hizp860v9UnVpWgcyJSqrH/QkJN9G7QtAm40xTXuK4DachMrMJFQEq2xsP8pfWT
kojfaHgerqy461SiLCZy6CJg3k8EgiOdDom8BGwPfqVKIXnpWD+KvW8U6EXmVkia
A4YnDP0I0RYDid6Dl6zH0rS+hqvhzAxWeXuYeHscjtWWkEjXIY9CAJJH0PZBtuGz
eniI8ZI/KPxntw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:57 2026 by rpki-client