Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
File: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json)
Hash identifier: PzAmeDCxfr6Y6EfpMBcwKsGMiw28WxJ1/Bl5wnc159s=
Subject key identifier: 8A:4D:69:C5:F7:A7:EE:05:A7:A6:E1:91:73:88:7C:A8:E1:B8:E5:12
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial: 019CAAC6A32EACC049F16ABE65B5CBE25BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
Manifest number: 0561
Signing time: Sun 01 Mar 2026 19:01:10 +0000
Manifest this update: Sun 01 Mar 2026 19:01:10 +0000
Manifest next update: Mon 02 Mar 2026 19:01:10 +0000
Files and hashes: 1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: Y9rhr6EubqYz0tk3U0DxakNeXtVKs7zSWhjFl8OXFd4=)
2: mX8HnTFvLthfSZ2ZAzBIL5WiGxo.roa (hash: JasekT6eOU4dUWNEwUdVF7G0JwY0SRq9zwzctkh7yh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a3:2e:ac:c0:49:f1:6a:be:65:b5:cb:e2:5b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Validity
Not Before: Mar 1 19:01:10 2026 GMT
Not After : Mar 2 19:01:10 2026 GMT
Subject: CN=8a4d69c5f7a7ee05a7a6e19173887ca8e1b8e512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e8:cf:ef:63:9c:2a:6a:8c:98:17:fa:e4:f8:
cc:29:25:71:86:07:4c:31:b3:cf:27:ab:2f:1a:01:
48:70:17:9d:2e:23:e0:82:c0:d7:89:5b:a6:f7:d2:
1b:25:b2:96:56:80:c4:ec:a7:4a:1b:c9:b2:b7:af:
f9:93:c5:08:98:c1:5c:f7:76:11:36:c4:0f:3b:cd:
f5:ec:4d:7a:e7:e7:e4:1b:12:a6:cd:1c:08:cb:c5:
7c:6f:5e:de:06:97:93:f6:d1:9e:0f:08:df:28:8f:
db:b7:e8:a5:cc:28:13:75:30:f2:86:c9:39:b7:af:
94:e7:35:2d:21:5c:85:54:1a:69:b9:3b:27:12:77:
66:ea:23:88:e5:60:30:88:30:5e:c8:c7:b4:70:11:
aa:d5:89:3d:ca:67:4a:5d:0b:ef:05:40:86:36:ec:
0a:31:5c:fa:e5:78:cb:1c:75:23:12:0f:56:d3:73:
8b:3e:0b:dc:8b:ce:3b:22:ac:29:35:31:ff:d4:72:
f9:85:1a:e0:bb:35:66:37:0a:61:72:09:1b:77:7a:
da:75:6a:bd:ce:1d:b4:e1:7e:f4:b2:6f:db:4d:7b:
53:c7:25:e5:c3:87:53:c4:61:90:34:3a:9d:43:8f:
5e:0d:10:43:ae:a6:b0:98:65:35:84:09:c8:05:ca:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4D:69:C5:F7:A7:EE:05:A7:A6:E1:91:73:88:7C:A8:E1:B8:E5:12
X509v3 Authority Key Identifier:
keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:72:dd:15:02:c2:9e:72:0f:ed:dc:d2:6c:6c:9e:43:e3:73:
16:d6:79:ef:ff:55:b9:3d:8b:a7:18:de:f5:46:b1:b7:aa:ad:
b1:e2:e7:b6:2a:c9:b1:b0:e0:64:ba:60:c0:15:3f:86:00:f0:
87:88:2a:08:cf:94:9f:a6:09:5e:15:d6:eb:98:57:c8:33:7c:
8d:03:6d:df:3c:b9:cd:08:56:fe:08:81:80:12:ec:2d:18:31:
ed:02:d9:af:c6:0f:d0:21:07:a3:0f:99:f8:d0:2c:01:0b:f3:
d0:30:42:23:b0:98:fd:0a:ff:3c:32:8d:9e:f8:d2:16:16:21:
23:93:7d:c3:6c:69:d4:66:a7:bb:c1:c1:cd:bb:b3:56:6a:92:
9f:13:6d:f9:39:25:82:24:d1:e6:7d:4e:a4:49:cb:35:d3:83:
58:9d:1f:85:c4:60:af:2d:1f:74:16:6a:2f:b5:2e:cf:e6:4b:
c5:cf:41:f1:d5:d3:c7:63:be:24:68:32:34:4c:2e:f0:7f:b1:
31:13:2b:53:66:b8:fd:7e:8d:f3:3d:e9:7f:cb:26:64:49:79:
c7:83:13:53:a6:ae:2e:32:b6:a2:11:82:a6:42:ac:58:cf:da:
28:51:50:7d:ea:10:46:24:50:31:60:33:cc:b0:5e:50:ef:52:
ee:8e:25:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxqMurMBJ8Wq+ZbXL4lvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDM2MmU0OGFjYmUwMDQ4ZTlkMTI1YTYyYjhkOWIxNDBj
YmZkZDQwHhcNMjYwMzAxMTkwMTEwWhcNMjYwMzAyMTkwMTEwWjAzMTEwLwYDVQQD
Eyg4YTRkNjljNWY3YTdlZTA1YTdhNmUxOTE3Mzg4N2NhOGUxYjhlNTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ujP72OcKmqMmBf65PjMKSVxhgdM
MbPPJ6svGgFIcBedLiPggsDXiVum99IbJbKWVoDE7KdKG8myt6/5k8UImMFc93YR
NsQPO8317E165+fkGxKmzRwIy8V8b17eBpeT9tGeDwjfKI/bt+ilzCgTdTDyhsk5
t6+U5zUtIVyFVBppuTsnEndm6iOI5WAwiDBeyMe0cBGq1Yk9ymdKXQvvBUCGNuwK
MVz65XjLHHUjEg9W03OLPgvci847IqwpNTH/1HL5hRrguzVmNwphcgkbd3radWq9
zh204X70sm/bTXtTxyXlw4dTxGGQNDqdQ49eDRBDrqawmGU1hAnIBcpxyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpNacX3p+4Fp6bhkXOIfKjhuOUSMB8GA1UdIwQY
MBaAFOHTYuSKy+AEjp0SWmK42bFAy/3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgt
M2FkYTM1MjY1MmI0LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgtM2FkYTM1MjY1MmI0
LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinLdFQLC
nnIP7dzSbGyeQ+NzFtZ57/9VuT2Lpxje9Uaxt6qtseLntirJsbDgZLpgwBU/hgDw
h4gqCM+Un6YJXhXW65hXyDN8jQNt3zy5zQhW/giBgBLsLRgx7QLZr8YP0CEHow+Z
+NAsAQvz0DBCI7CY/Qr/PDKNnvjSFhYhI5N9w2xp1Ganu8HBzbuzVmqSnxNt+Tkl
giTR5n1OpEnLNdODWJ0fhcRgry0fdBZqL7Uuz+ZLxc9B8dXTx2O+JGgyNEwu8H+x
MRMrU2a4/X6N8z3pf8smZEl5x4MTU6auLjK2ohGCpkKsWM/aKFFQfeoQRiRQMWAz
zLBeUO9S7o4lXA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:06 2026 by rpki-client