Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier: /wXURTHLwMvPp1sOwMzuNQR00cwUMARL5EEarEFk5Qs=
Subject key identifier: A0:12:3D:D6:53:0A:5E:4E:75:47:3C:D8:95:07:74:7F:78:3D:40:EC
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial: 019CAEA2E773B620753431D1D3E9AC0D7EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number: 16DC
Signing time: Mon 02 Mar 2026 13:00:37 +0000
Manifest this update: Mon 02 Mar 2026 13:00:37 +0000
Manifest next update: Tue 03 Mar 2026 13:00:37 +0000
Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: ZP87WNbbxf6h7mOSWCmz0zpeGfWwOXVkUFj1ouEx0X8=)
2: r2j9KB_d9qlo6DM4VIzlnk-FGnA.roa (hash: EzpW7vs8EG39ibzlPvK/9rhPpBxeklGzxbYhWxFufes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:e7:73:b6:20:75:34:31:d1:d3:e9:ac:0d:7e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Validity
Not Before: Mar 2 13:00:37 2026 GMT
Not After : Mar 3 13:00:37 2026 GMT
Subject: CN=a0123dd6530a5e4e75473cd89507747f783d40ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:03:07:3e:32:11:e7:cb:b3:01:dc:ef:81:
93:e2:68:af:13:44:cc:6d:04:f0:76:05:f2:98:de:
69:df:ad:6b:9f:b8:b6:92:58:f2:93:a9:f0:cd:09:
20:09:c0:45:e4:f7:05:d4:59:ae:47:31:9a:f8:e3:
b7:73:d5:7d:9b:66:41:1a:64:bb:70:03:c5:be:9e:
e1:27:2a:19:2d:5e:24:5f:88:2f:14:49:46:75:31:
01:52:cc:d9:92:9d:6c:15:47:0e:b3:b4:d7:2a:e4:
b0:c4:54:7f:06:37:b4:cc:98:ca:30:e7:98:7d:ad:
19:74:47:3a:da:70:2c:66:d4:8a:06:d8:4a:a4:86:
21:e7:b2:36:b3:cd:bc:f8:e0:27:e7:9f:37:ca:0f:
87:9d:74:d6:0a:06:91:f1:a8:ca:bb:7c:80:f1:17:
08:d6:1b:e5:95:9e:5f:e1:3c:0c:38:ce:92:31:fd:
0a:a3:7c:07:90:b6:0a:ec:8e:a7:59:9e:af:1f:0a:
fb:c2:8b:4d:9d:ee:9a:22:ad:bb:e0:e8:33:6e:5f:
19:ff:5c:38:b6:cc:c8:be:e2:00:3c:99:53:5a:25:
4a:40:3d:bc:e4:6c:03:b1:32:4b:2e:bb:15:97:f7:
66:e2:de:0f:77:3f:dd:a1:11:58:4d:82:29:b1:2a:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:12:3D:D6:53:0A:5E:4E:75:47:3C:D8:95:07:74:7F:78:3D:40:EC
X509v3 Authority Key Identifier:
keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0c:a5:8e:ba:29:7f:9d:5a:c5:a5:30:08:e5:71:f2:30:5a:
d7:f1:44:24:54:6f:7e:2b:52:38:8b:16:aa:08:0e:2a:f7:57:
ec:c0:8d:21:e3:ec:e5:26:c3:f9:4c:c6:f1:db:2a:ba:87:7a:
38:7f:5e:4f:e2:3d:65:2a:04:0a:0b:ae:37:93:d1:2f:8f:cd:
0b:f0:15:a9:f0:ad:0d:d8:76:c4:42:dc:16:fa:bb:56:e7:a0:
72:4f:ab:10:6a:88:88:70:95:19:b1:04:91:ec:80:ed:f7:57:
58:cf:f3:d4:ff:36:bb:a4:c2:ce:eb:53:6a:89:d9:39:27:95:
94:f3:8f:6e:13:80:a0:fa:81:55:ad:39:ae:71:f8:13:34:02:
cf:31:ce:46:07:73:8a:15:7b:c5:ce:49:26:58:ae:5a:41:ef:
6d:9a:1b:aa:5f:a6:26:83:67:88:f3:39:8b:dc:23:8a:6b:c5:
1b:a9:a1:93:4b:16:1e:fd:cd:57:92:b2:11:bf:f5:36:f0:77:
b6:ac:91:67:98:54:cf:71:c2:d7:76:7e:3b:ad:7f:e3:0f:b3:
59:bc:b0:46:22:8a:a5:f8:1c:97:c2:bb:4c:47:e3:cc:4f:a5:
bf:be:11:65:52:93:bc:62:64:ab:da:d1:b1:c6:7b:ba:4f:c9:
5f:af:04:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuoudztiB1NDHR0+msDX7IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTU0YWRiNWEyZWQ5OTljZjFkYjljMTI3MWIyMjA5ZGFk
MzQ0OWUwHhcNMjYwMzAyMTMwMDM3WhcNMjYwMzAzMTMwMDM3WjAzMTEwLwYDVQQD
EyhhMDEyM2RkNjUzMGE1ZTRlNzU0NzNjZDg5NTA3NzQ3Zjc4M2Q0MGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qYDBz4yEefLswHc74GT4mivE0TM
bQTwdgXymN5p361rn7i2kljyk6nwzQkgCcBF5PcF1FmuRzGa+OO3c9V9m2ZBGmS7
cAPFvp7hJyoZLV4kX4gvFElGdTEBUszZkp1sFUcOs7TXKuSwxFR/Bje0zJjKMOeY
fa0ZdEc62nAsZtSKBthKpIYh57I2s828+OAn5583yg+HnXTWCgaR8ajKu3yA8RcI
1hvllZ5f4TwMOM6SMf0Ko3wHkLYK7I6nWZ6vHwr7wotNne6aIq274Ogzbl8Z/1w4
tszIvuIAPJlTWiVKQD285GwDsTJLLrsVl/dm4t4Pdz/doRFYTYIpsSrHowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKASPdZTCl5OdUc82JUHdH94PUDsMB8GA1UdIwQY
MBaAFOMVSttaLtmZzx25wScbIgna00SeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDct
MTQyZmNhY2Q3YTQ5LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDctMTQyZmNhY2Q3YTQ5
LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQyljrop
f51axaUwCOVx8jBa1/FEJFRvfitSOIsWqggOKvdX7MCNIePs5SbD+UzG8dsquod6
OH9eT+I9ZSoECguuN5PRL4/NC/AVqfCtDdh2xELcFvq7Vuegck+rEGqIiHCVGbEE
keyA7fdXWM/z1P82u6TCzutTaonZOSeVlPOPbhOAoPqBVa05rnH4EzQCzzHORgdz
ihV7xc5JJliuWkHvbZobql+mJoNniPM5i9wjimvFG6mhk0sWHv3NV5KyEb/1NvB3
tqyRZ5hUz3HC13Z+O61/4w+zWbywRiKKpfgcl8K7TEfjzE+lv74RZVKTvGJkq9rR
scZ7uk/JX68E7g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:44 2026 by rpki-client