Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier: B/ShkqesNWR/YuNqJ6UXZfUtwSeNWqDKoBsbExsJVKg=
Subject key identifier: 4E:13:63:C0:AC:23:A6:77:7E:32:3A:DC:9D:F0:A6:A1:E5:D5:A9:BA
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial: 019CA90ED6760B85AAACDA39A8A8DF1202EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number: 18A8
Signing time: Sun 01 Mar 2026 11:00:47 +0000
Manifest this update: Sun 01 Mar 2026 11:00:47 +0000
Manifest next update: Mon 02 Mar 2026 11:00:47 +0000
Files and hashes: 1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: +cISsQmy9Jh5zxosjQoOsrmMTBdCZEZPCHG4ZlFJtXY=)
2: 5Fr1trtGTfM3It6IZpjNEURaIUE.roa (hash: WKbugRvcfxQU79kO5Rpd44oHEk26VB3BZE1fbncYPQw=)
3: Iir0TCJvEjSlAaycZZGnx4PF9Gc.asa (hash: 4LzaB4uHCD+cW4z7Pu5qioLqpA0LrFeMNw2vl3XMFVY=)
4: MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa (hash: 0p22EPcUlrbZ/XQd/L2Yz+06mVzq0rpNkXwnhd7vOv8=)
5: QPupw3rP2f5Jivi4SxaBbGE6eqM.roa (hash: KP++DGfsZGB7GL9ySK3Y6Xgm2FRgB01XieKkXEEpykk=)
6: lIx0KubEd0NAwKbnWvfavDgfMLw.roa (hash: Z1acY8ho4rEFuqnBBBvS7eEzd1qsRchpuvE7DncwSZE=)
7: ql3vqr1zYIaiPZLR54AHsL7ukAE.roa (hash: NYzCia9uixmAZoiKyWTL4nuIIf69H+HSXVKOLeUMj5c=)
8: yIoTvJJYIR2DNvrmk-NbH6cPask.roa (hash: oUH0ut41s6oEH273QOq+dzXsq0k279TftL1vgV4Jygw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0e:d6:76:0b:85:aa:ac:da:39:a8:a8:df:12:02:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Validity
Not Before: Mar 1 11:00:47 2026 GMT
Not After : Mar 2 11:00:47 2026 GMT
Subject: CN=4e1363c0ac23a6777e323adc9df0a6a1e5d5a9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:04:68:1a:f0:31:ca:30:26:de:17:40:43:9b:
97:31:60:66:2e:01:b5:cb:f1:ca:f9:9a:10:c6:70:
29:f9:d5:2a:96:66:df:70:3f:9e:fa:9d:32:dc:0e:
5f:e9:a1:9a:ba:02:40:a1:a6:da:53:42:f3:ec:62:
11:64:fe:ab:35:c7:b4:df:b9:f0:ed:ea:71:06:ce:
70:20:a6:da:65:a2:7e:b4:fc:50:50:9f:85:db:1e:
4b:72:f2:85:2f:31:34:18:bb:6b:98:c0:75:ac:3d:
ef:71:e7:7e:94:d4:e0:35:e0:3e:ef:a7:91:66:24:
35:cf:35:1f:a4:30:58:23:63:d7:43:0c:42:cb:82:
92:d4:3d:7c:41:7c:b9:bd:92:50:e0:d9:fc:a8:67:
95:0b:75:3d:4b:8e:0a:69:23:1f:9b:e7:b2:ec:28:
d8:24:65:86:2c:d0:be:d2:fb:01:ec:df:f7:c9:4e:
3c:42:04:ee:51:53:53:cc:dd:f2:76:f4:67:12:6f:
23:a2:fe:8e:e0:0a:f1:21:2f:00:1c:ad:50:09:57:
57:a9:4d:78:8e:f9:36:04:5e:3f:dc:9d:ca:74:55:
25:3f:56:17:31:f0:e5:48:09:9a:b7:0e:85:81:51:
72:3f:b7:1d:01:89:87:48:a7:b4:17:71:36:c7:32:
5f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:13:63:C0:AC:23:A6:77:7E:32:3A:DC:9D:F0:A6:A1:E5:D5:A9:BA
X509v3 Authority Key Identifier:
keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:54:c8:c5:c2:15:be:8d:38:90:50:16:ae:84:d4:f7:e3:93:
7e:94:78:ab:34:49:54:22:31:80:02:b6:cb:b0:df:79:2d:6f:
24:c4:ab:8e:71:5d:7c:6b:a1:76:e6:d4:15:68:06:bf:90:56:
e6:64:4c:e8:73:df:f0:7d:bc:ca:1a:28:76:ac:54:24:72:22:
10:e6:74:da:46:8b:16:2d:61:4c:2a:8e:b1:4e:6f:f9:36:60:
31:a6:c7:ce:b9:03:5e:7b:b7:de:46:69:92:56:c7:9d:a2:16:
b2:bd:65:26:bb:41:9d:4a:4b:ee:a4:73:ca:6f:5d:2f:56:db:
00:ad:91:c7:2a:23:85:e4:30:34:ad:9d:18:b5:a5:c5:c8:b6:
85:d2:77:ff:27:44:1a:0f:10:2d:b3:b5:8a:53:df:34:64:fb:
dc:4e:79:42:76:4e:15:6b:43:b6:9a:75:27:c5:59:68:78:87:
17:42:7f:0c:5e:be:f4:7c:c5:8f:59:b5:78:d4:2c:73:2e:ba:
59:db:48:f0:94:a4:4b:ea:e4:44:63:ea:84:68:37:67:75:49:
d7:b9:11:de:d6:cf:f8:ea:a2:0f:f8:23:7f:f3:63:6e:26:4e:
e3:81:4c:a4:2a:29:57:99:f4:99:ba:91:0e:4a:8e:76:c6:ad:
71:49:fc:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypDtZ2C4WqrNo5qKjfEgLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3
MWJlZjQwHhcNMjYwMzAxMTEwMDQ3WhcNMjYwMzAyMTEwMDQ3WjAzMTEwLwYDVQQD
Eyg0ZTEzNjNjMGFjMjNhNjc3N2UzMjNhZGM5ZGYwYTZhMWU1ZDVhOWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlARoGvAxyjAm3hdAQ5uXMWBmLgG1
y/HK+ZoQxnAp+dUqlmbfcD+e+p0y3A5f6aGaugJAoabaU0Lz7GIRZP6rNce037nw
7epxBs5wIKbaZaJ+tPxQUJ+F2x5LcvKFLzE0GLtrmMB1rD3vced+lNTgNeA+76eR
ZiQ1zzUfpDBYI2PXQwxCy4KS1D18QXy5vZJQ4Nn8qGeVC3U9S44KaSMfm+ey7CjY
JGWGLNC+0vsB7N/3yU48QgTuUVNTzN3ydvRnEm8jov6O4ArxIS8AHK1QCVdXqU14
jvk2BF4/3J3KdFUlP1YXMfDlSAmatw6FgVFyP7cdAYmHSKe0F3E2xzJfcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4TY8CsI6Z3fjI63J3wpqHl1am6MB8GA1UdIwQY
MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt
ZTQyYTU4MDY0YTYzLzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz
LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVTIxcIV
vo04kFAWroTU9+OTfpR4qzRJVCIxgAK2y7DfeS1vJMSrjnFdfGuhdubUFWgGv5BW
5mRM6HPf8H28yhoodqxUJHIiEOZ02kaLFi1hTCqOsU5v+TZgMabHzrkDXnu33kZp
klbHnaIWsr1lJrtBnUpL7qRzym9dL1bbAK2RxyojheQwNK2dGLWlxci2hdJ3/ydE
Gg8QLbO1ilPfNGT73E55QnZOFWtDtpp1J8VZaHiHF0J/DF6+9HzFj1m1eNQscy66
WdtI8JSkS+rkRGPqhGg3Z3VJ17kR3tbP+OqiD/gjf/NjbiZO44FMpCopV5n0mbqR
DkqOdsatcUn8EA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:46:30 2026 by rpki-client