Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
File: 4rWwjcQz-On3dyfLUfa6JL3V85o.mft (raw, json)
Hash identifier: f4dk7D9/Q548G3ETy8Iwt5+f8gAEqF419eS+hgyr/uU=
Subject key identifier: 1A:9C:AC:DD:45:29:B0:66:81:F1:36:3E:68:E8:DA:EA:0A:1B:94:16
Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Certificate issuer: /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Certificate serial: 019CAAC6BCF6AA80915F83A1207EDDD42D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
Manifest number: 0860
Signing time: Sun 01 Mar 2026 19:01:17 +0000
Manifest this update: Sun 01 Mar 2026 19:01:17 +0000
Manifest next update: Mon 02 Mar 2026 19:01:17 +0000
Files and hashes: 1: 4rWwjcQz-On3dyfLUfa6JL3V85o.crl (hash: SIncEsfZjJ+mOSmsG/DLVI+xNaRLmix2AXjOdW6/iN8=)
2: BxZPTQDdLKKz_KzmvAmu63Br_30.roa (hash: RJzmMfXa1i3UOXt5apo9yzIAminXwO5ap7oBJzJBEJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:bc:f6:aa:80:91:5f:83:a1:20:7e:dd:d4:2d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Validity
Not Before: Mar 1 19:01:17 2026 GMT
Not After : Mar 2 19:01:17 2026 GMT
Subject: CN=1a9cacdd4529b06681f1363e68e8daea0a1b9416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:64:56:55:07:ea:64:37:71:6c:45:de:42:
a9:82:a3:cc:80:a9:a3:33:b3:0d:24:28:ff:5e:3f:
cc:13:a0:53:91:70:3f:3e:91:d2:cb:47:d9:9d:88:
21:54:9c:ab:28:4d:28:f9:fa:a7:59:1f:0e:b1:0f:
18:5f:85:9c:04:da:1c:43:dc:50:64:b8:90:e2:d6:
99:2a:88:65:86:5b:5a:5a:43:6e:80:f5:94:25:df:
56:55:a4:8d:0b:65:b3:82:bd:b8:80:4f:1e:0f:f4:
17:7d:a6:8d:20:eb:18:c6:1a:e4:6e:30:dc:77:ad:
75:04:9a:ca:13:a4:da:04:38:c0:3f:d3:a2:e1:06:
4a:8c:b6:5f:00:fc:7c:47:c7:74:6f:cb:64:fd:af:
4d:97:b2:4e:26:18:8c:4b:9c:ef:7a:df:03:c6:e0:
51:17:3e:59:42:b7:af:93:c5:5f:64:c2:1a:27:4f:
c0:8b:ed:28:6a:20:04:9d:66:50:1d:a5:35:ba:77:
af:b0:31:20:20:0b:8e:84:01:7a:e6:1f:80:a7:71:
c1:34:50:48:b3:9e:30:af:42:4b:b1:2a:31:c4:77:
1d:1d:55:ff:3f:fc:e9:28:d9:a9:7c:d7:1b:cb:36:
dc:e4:90:34:a9:2c:42:a1:0f:a1:ff:15:2c:e0:36:
5c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9C:AC:DD:45:29:B0:66:81:F1:36:3E:68:E8:DA:EA:0A:1B:94:16
X509v3 Authority Key Identifier:
keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d8:4c:96:eb:4b:9e:a2:fb:dc:c9:66:3e:da:08:8d:eb:e9:
e9:7c:fe:69:26:77:bc:3a:60:1b:f5:86:3b:cd:84:b0:f6:9b:
3f:bf:93:08:2e:f4:92:3e:4a:6f:6f:fe:fa:8f:ec:c3:72:24:
80:b7:df:4f:d7:a1:3a:9c:ca:b6:6b:40:84:13:2a:c0:b4:25:
bf:f8:48:63:d9:69:fa:08:a8:54:05:b7:2e:5b:5d:83:a0:a4:
96:4c:05:08:bf:52:5d:3e:52:86:2f:38:bb:28:e1:0a:62:40:
be:e4:b7:92:c1:3a:1a:41:7e:cb:c0:0f:dd:25:29:4a:f3:15:
c3:71:a2:14:64:e8:b6:4b:08:84:83:dd:0c:d9:e6:fa:91:ee:
a0:bc:2d:ad:1c:45:4d:fe:df:cb:89:d7:4a:39:99:1f:d8:5c:
69:df:38:7a:65:e1:cb:b3:26:15:05:5f:aa:83:81:07:10:fb:
6e:2d:1c:6e:88:8a:b0:cc:e3:d6:37:a9:bd:ea:97:b9:de:01:
2d:5b:e9:35:b0:ec:4c:c2:6c:1e:c9:fc:f6:b4:04:da:57:8a:
13:89:40:9b:7c:83:a3:7d:2d:45:ce:76:b1:47:62:7d:34:8b:
e4:73:ce:fb:d7:74:a9:42:5a:81:52:85:55:12:d5:5d:43:75:
5d:52:a8:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxrz2qoCRX4OhIH7d1C1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYjViMDhkYzQzM2Y4ZTlmNzc3MjdjYjUxZjZiYTI0YmRk
NWYzOWEwHhcNMjYwMzAxMTkwMTE3WhcNMjYwMzAyMTkwMTE3WjAzMTEwLwYDVQQD
EygxYTljYWNkZDQ1MjliMDY2ODFmMTM2M2U2OGU4ZGFlYTBhMWI5NDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05VkVlUH6mQ3cWxF3kKpgqPMgKmj
M7MNJCj/Xj/ME6BTkXA/PpHSy0fZnYghVJyrKE0o+fqnWR8OsQ8YX4WcBNocQ9xQ
ZLiQ4taZKohlhltaWkNugPWUJd9WVaSNC2Wzgr24gE8eD/QXfaaNIOsYxhrkbjDc
d611BJrKE6TaBDjAP9Oi4QZKjLZfAPx8R8d0b8tk/a9Nl7JOJhiMS5zvet8DxuBR
Fz5ZQrevk8VfZMIaJ0/Ai+0oaiAEnWZQHaU1unevsDEgIAuOhAF65h+Ap3HBNFBI
s54wr0JLsSoxxHcdHVX/P/zpKNmpfNcbyzbc5JA0qSxCoQ+h/xUs4DZcvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqcrN1FKbBmgfE2Pmjo2uoKG5QWMB8GA1UdIwQY
MBaAFOK1sI3EM/jp93cny1H2uiS91fOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJXd2pjUXotT24zZHlmTFVmYTZKTDNWODVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mYWU0NDMtMTk4Yi00MzJlLWI0MTkt
M2U2ZmJlMzc5ZTgzLzEvNHJXd2pjUXotT24zZHlmTFVmYTZKTDNWODVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9mYWU0NDMtMTk4Yi00MzJlLWI0MTktM2U2ZmJlMzc5ZTgz
LzEvNHJXd2pjUXotT24zZHlmTFVmYTZKTDNWODVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9hMlutL
nqL73MlmPtoIjevp6Xz+aSZ3vDpgG/WGO82EsPabP7+TCC70kj5Kb2/++o/sw3Ik
gLffT9ehOpzKtmtAhBMqwLQlv/hIY9lp+gioVAW3Lltdg6CklkwFCL9SXT5Shi84
uyjhCmJAvuS3ksE6GkF+y8AP3SUpSvMVw3GiFGTotksIhIPdDNnm+pHuoLwtrRxF
Tf7fy4nXSjmZH9hcad84emXhy7MmFQVfqoOBBxD7bi0cboiKsMzj1jepveqXud4B
LVvpNbDsTMJsHsn89rQE2leKE4lAm3yDo30tRc52sUdifTSL5HPO+9d0qUJagVKF
VRLVXUN1XVKokw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:59 2026 by rpki-client