Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: bzjA3jmAwNj1SraTYtykhKJPLGnvnT+NpzuN42CL1gc=
Subject key identifier: 51:FC:44:19:A8:32:5F:51:05:CE:8A:17:D4:0D:17:75:C7:11:0E:57
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 019CAA8FF2DD5F9CEBC46126CE15EC4ED10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 08AC
Signing time: Sun 01 Mar 2026 18:01:26 +0000
Manifest this update: Sun 01 Mar 2026 18:01:26 +0000
Manifest next update: Mon 02 Mar 2026 18:01:26 +0000
Files and hashes: 1: 1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa (hash: /XeBvwgyOqHyg56chvGRDFMd+7ExlJpVYmiAYZyhDGM=)
2: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: jfBThXsa0E+0uGd0f/LpjMqRL2//XJrzFBS432JXaBE=)
3: cgkSjyInxeBAfsrMtADKQej1dQA.roa (hash: NJBBWIxm8P9FWZLPw5DFC5dmcCI2sjb8UDnkU7sydo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:f2:dd:5f:9c:eb:c4:61:26:ce:15:ec:4e:d1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Mar 1 18:01:26 2026 GMT
Not After : Mar 2 18:01:26 2026 GMT
Subject: CN=51fc4419a8325f5105ce8a17d40d1775c7110e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:47:3d:14:71:e1:79:49:3f:fc:6a:57:de:e0:
47:8e:9f:7a:a8:43:f1:00:8c:c9:c9:c1:8d:69:38:
e0:d8:41:09:73:bf:1c:17:05:b9:dd:32:03:87:02:
a7:d3:8f:83:fd:87:d4:88:2e:96:d8:b4:4e:45:b6:
e5:ec:e2:3b:0e:ec:0e:40:ed:a4:d9:92:8e:2d:b3:
56:e6:13:47:9c:b3:eb:5a:0f:e4:83:e2:5e:b6:e2:
78:42:03:f4:c1:e9:59:4c:9c:d1:6f:b0:8b:f7:c9:
82:1d:69:7d:0f:5f:47:a0:a8:4e:50:f1:9e:4f:93:
1e:e2:90:9a:fc:b3:cd:6a:d0:c5:58:8d:02:68:71:
1f:a2:d8:e8:a4:b5:ae:86:9a:80:ff:e9:1d:63:4b:
42:16:27:dc:af:fe:0f:6d:aa:98:37:48:7c:2d:76:
c6:c6:f1:c9:8c:fd:0f:50:96:2d:b6:83:3a:71:ec:
01:41:52:17:6f:25:ff:19:60:66:c5:99:2e:59:63:
b5:80:61:13:9d:ad:1f:1d:81:11:ba:60:36:34:89:
fb:b7:5e:f0:e9:8e:57:ec:ab:ad:8b:3f:ad:09:f9:
32:0e:e0:9e:98:6c:28:1a:3c:85:a3:fa:c1:7e:00:
38:18:55:1a:e2:67:b5:c7:c3:15:da:26:73:41:45:
09:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FC:44:19:A8:32:5F:51:05:CE:8A:17:D4:0D:17:75:C7:11:0E:57
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7d:97:48:9f:7b:b1:4e:75:74:cb:92:f4:03:58:b1:e4:20:
fb:75:21:2f:e8:30:fc:e8:a9:36:d7:54:97:2d:44:4e:70:e8:
21:16:11:7b:9b:f3:10:b7:0b:d2:45:34:e4:e8:ec:7b:13:31:
37:7a:fd:a9:92:ee:7a:11:8b:df:a7:42:18:4a:cd:86:56:bd:
97:53:e0:24:4a:1b:46:8b:92:9f:39:cc:4a:8e:46:5c:81:de:
1a:2f:41:ae:fb:d5:81:96:34:ee:15:35:e2:b2:f2:a6:af:e1:
7a:6d:1a:93:7f:f9:76:00:ca:f8:7d:9c:ff:85:8d:49:76:69:
c1:b3:ee:7c:81:c7:76:14:f6:2a:6f:66:66:f6:8d:b0:b0:c1:
c2:04:33:a5:85:a3:d0:59:43:ee:ea:e6:71:28:4c:31:32:76:
83:a5:7d:af:9c:74:91:2f:04:c5:a0:57:66:2f:d2:f3:bf:23:
a2:2d:b4:cc:c7:2a:15:55:0b:3c:db:04:d8:00:2d:17:a0:c2:
92:5d:0f:ad:c4:1b:70:7a:3b:07:5b:81:cf:96:42:8a:ac:81:
ee:18:41:34:db:53:2a:a3:4c:0e:21:74:db:78:6b:cd:5a:a4:
ba:6e:38:0d:ea:18:aa:76:06:89:f8:17:44:c9:ed:20:79:84:
10:ae:91:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj/LdX5zrxGEmzhXsTtELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDE3YWRhNjQzOTI4OGMyOTcwM2NmNzA1ZWY2NGFmYjM4
MjBhZDkwHhcNMjYwMzAxMTgwMTI2WhcNMjYwMzAyMTgwMTI2WjAzMTEwLwYDVQQD
Eyg1MWZjNDQxOWE4MzI1ZjUxMDVjZThhMTdkNDBkMTc3NWM3MTEwZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20c9FHHheUk//GpX3uBHjp96qEPx
AIzJycGNaTjg2EEJc78cFwW53TIDhwKn04+D/YfUiC6W2LRORbbl7OI7DuwOQO2k
2ZKOLbNW5hNHnLPrWg/kg+JetuJ4QgP0welZTJzRb7CL98mCHWl9D19HoKhOUPGe
T5Me4pCa/LPNatDFWI0CaHEfotjopLWuhpqA/+kdY0tCFifcr/4PbaqYN0h8LXbG
xvHJjP0PUJYttoM6cewBQVIXbyX/GWBmxZkuWWO1gGETna0fHYERumA2NIn7t17w
6Y5X7Kutiz+tCfkyDuCemGwoGjyFo/rBfgA4GFUa4me1x8MV2iZzQUUJ5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFH8RBmoMl9RBc6KF9QNF3XHEQ5XMB8GA1UdIwQY
MBaAFOLRetpkOSiMKXA89wXvZK+zggrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDkt
Yzk5N2I4N2I0YjVmLzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDktYzk5N2I4N2I0YjVm
LzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKn2XSJ97
sU51dMuS9ANYseQg+3UhL+gw/OipNtdUly1ETnDoIRYRe5vzELcL0kU05OjsexMx
N3r9qZLuehGL36dCGErNhla9l1PgJEobRouSnznMSo5GXIHeGi9BrvvVgZY07hU1
4rLypq/hem0ak3/5dgDK+H2c/4WNSXZpwbPufIHHdhT2Km9mZvaNsLDBwgQzpYWj
0FlD7urmcShMMTJ2g6V9r5x0kS8ExaBXZi/S878joi20zMcqFVULPNsE2AAtF6DC
kl0PrcQbcHo7B1uBz5ZCiqyB7hhBNNtTKqNMDiF023hrzVqkum44DeoYqnYGifgX
RMntIHmEEK6RFw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:11 2026 by rpki-client