Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: YV8RkdgDfh2hYkiLUruV3aU4+BSqnbdrU+dFz2ftD8Q=
Subject key identifier: 8E:50:BB:25:C3:6E:6F:00:55:3D:98:4F:3C:C9:CF:93:36:17:3B:42
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 019CA9EAC383A9534B3248433C13D82BC86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 0E5D
Signing time: Sun 01 Mar 2026 15:01:00 +0000
Manifest this update: Sun 01 Mar 2026 15:01:00 +0000
Manifest next update: Mon 02 Mar 2026 15:01:00 +0000
Files and hashes: 1: 28qciXJsiY_HinbmOHfVFSyJkQk.roa (hash: UYVCwyOsNlY276CdR8TOzS4Rj720VMSX5696EeMarho=)
2: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: syTNDW5c+KXYxU+iRFYoDzMX6015K/Ope4fq9sgLr1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:c3:83:a9:53:4b:32:48:43:3c:13:d8:2b:c8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Mar 1 15:01:00 2026 GMT
Not After : Mar 2 15:01:00 2026 GMT
Subject: CN=8e50bb25c36e6f00553d984f3cc9cf9336173b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:35:16:d3:b1:0d:a8:1e:08:bb:3b:ac:92:9e:
52:18:7f:1e:12:80:45:56:78:14:36:5f:d2:b2:0f:
80:68:9d:38:95:9d:fc:5c:95:56:c3:8e:ce:ba:c0:
0a:10:8e:1a:26:7a:10:ba:f7:44:4f:e4:8e:86:67:
27:d7:3e:83:79:65:10:93:28:a1:b3:34:9c:e9:2c:
09:bb:0e:fb:75:ff:a9:df:37:fb:df:b5:c4:34:fc:
54:07:3b:ce:e0:c1:f1:10:9d:c4:e0:ad:fb:f2:1d:
b8:39:67:db:83:a9:b9:20:69:f3:34:36:0b:da:8d:
99:c6:e3:27:97:22:35:51:ee:25:8d:a3:6a:59:74:
8e:97:ee:31:6b:5e:58:db:59:16:00:40:92:10:41:
ea:df:58:ee:05:17:43:49:92:8e:ad:ec:57:d5:a3:
49:08:7d:9b:c5:5d:86:a5:40:34:14:43:3f:c8:db:
41:4f:ad:5a:15:28:b7:6d:cc:8c:98:eb:52:21:a6:
90:c3:70:d0:18:41:25:67:ba:51:4b:91:aa:9f:47:
5b:6e:3d:12:fc:a1:80:a9:f2:0a:7c:de:e1:14:10:
c4:fd:be:b3:3b:6e:39:66:70:29:33:8e:c3:16:74:
9b:87:8a:11:4f:0a:78:53:1a:89:fa:55:47:de:d7:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:50:BB:25:C3:6E:6F:00:55:3D:98:4F:3C:C9:CF:93:36:17:3B:42
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:95:bc:46:2e:ac:18:34:14:dc:c8:ca:fc:70:51:ac:65:28:
bb:51:5c:71:48:f2:b5:dc:c0:e4:b6:df:66:52:f3:02:ae:7d:
09:ed:2e:24:12:51:64:8b:da:7c:df:d9:6f:ab:d7:53:40:75:
73:d2:e4:ce:2e:47:4e:26:90:db:01:19:e2:04:98:a1:9d:7d:
92:8a:a1:fb:99:7f:32:e3:2a:2c:8c:35:83:7a:bf:84:91:f1:
00:ba:59:9b:80:df:d1:12:1c:1e:97:cd:b8:4e:d0:5c:79:8c:
fe:e2:cc:13:da:60:33:56:6f:b0:8b:39:26:be:34:a5:1e:80:
26:53:9d:fc:ec:f6:72:99:1c:60:81:14:fc:37:47:37:24:7c:
c9:91:54:af:cf:e1:b3:d8:2f:fc:79:95:2c:ba:46:56:f5:1c:
ec:3c:51:c6:2f:68:70:5b:9e:24:ac:00:83:3f:9b:e4:63:e9:
fe:af:37:52:cf:68:23:c4:4a:ba:85:f3:56:6f:99:f4:41:01:
d3:5e:44:5b:d7:49:bc:16:e6:b1:40:12:b0:12:f5:b5:1f:ab:
0a:51:a7:ae:5f:4e:02:50:6e:45:7d:ef:60:62:17:d2:08:18:
35:05:1a:27:ff:da:5f:21:08:87:1c:2f:10:73:52:81:11:39:
84:e6:5c:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6sODqVNLMkhDPBPYK8huMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMzBkZTVmZDNjMjQ1NTE3M2JhNjk2YTk5NDQxZDk2MjBk
ODFkMzgwHhcNMjYwMzAxMTUwMTAwWhcNMjYwMzAyMTUwMTAwWjAzMTEwLwYDVQQD
Eyg4ZTUwYmIyNWMzNmU2ZjAwNTUzZDk4NGYzY2M5Y2Y5MzM2MTczYjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zUW07ENqB4Iuzuskp5SGH8eEoBF
VngUNl/Ssg+AaJ04lZ38XJVWw47OusAKEI4aJnoQuvdET+SOhmcn1z6DeWUQkyih
szSc6SwJuw77df+p3zf737XENPxUBzvO4MHxEJ3E4K378h24OWfbg6m5IGnzNDYL
2o2ZxuMnlyI1Ue4ljaNqWXSOl+4xa15Y21kWAECSEEHq31juBRdDSZKOrexX1aNJ
CH2bxV2GpUA0FEM/yNtBT61aFSi3bcyMmOtSIaaQw3DQGEElZ7pRS5Gqn0dbbj0S
/KGAqfIKfN7hFBDE/b6zO245ZnApM47DFnSbh4oRTwp4UxqJ+lVH3tdXMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5QuyXDbm8AVT2YTzzJz5M2FztCMB8GA1UdIwQY
MBaAFOIw3l/TwkVRc7ppaplEHZYg2B04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDct
ZmI1YzU4MmU0MDk3LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDctZmI1YzU4MmU0MDk3
LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpW8Ri6s
GDQU3MjK/HBRrGUou1FccUjytdzA5LbfZlLzAq59Ce0uJBJRZIvafN/Zb6vXU0B1
c9Lkzi5HTiaQ2wEZ4gSYoZ19koqh+5l/MuMqLIw1g3q/hJHxALpZm4Df0RIcHpfN
uE7QXHmM/uLME9pgM1ZvsIs5Jr40pR6AJlOd/Oz2cpkcYIEU/DdHNyR8yZFUr8/h
s9gv/HmVLLpGVvUc7DxRxi9ocFueJKwAgz+b5GPp/q83Us9oI8RKuoXzVm+Z9EEB
015EW9dJvBbmsUASsBL1tR+rClGnrl9OAlBuRX3vYGIX0ggYNQUaJ//aXyEIhxwv
EHNSgRE5hOZcyA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:11 2026 by rpki-client