Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
File: 4rVv8vrl9iGUksEtg-EjnWrW4S8.mft (raw, json)
Hash identifier: APWHZN8HHFPFquffLRTthbixju7VFcduB8nuI78plko=
Subject key identifier: 72:07:3C:B0:26:10:89:71:43:6A:ED:14:A5:02:FC:21:89:CC:52:4F
Authority key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
Certificate issuer: /CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Certificate serial: 019CAE3501E707DC9CACACF0AF1FAF7AF21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
Manifest number: 17D6
Signing time: Mon 02 Mar 2026 11:00:35 +0000
Manifest this update: Mon 02 Mar 2026 11:00:35 +0000
Manifest next update: Tue 03 Mar 2026 11:00:35 +0000
Files and hashes: 1: 4rVv8vrl9iGUksEtg-EjnWrW4S8.crl (hash: GHyyVP+T+FYZYPa87RMtamYkBmVsBHmn8k5per39hmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:01:e7:07:dc:9c:ac:ac:f0:af:1f:af:7a:f2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Validity
Not Before: Mar 2 11:00:35 2026 GMT
Not After : Mar 3 11:00:35 2026 GMT
Subject: CN=72073cb026108971436aed14a502fc2189cc524f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:1e:2f:b5:85:89:f4:26:33:3d:26:b1:e2:
c3:2c:2f:b5:ae:0b:16:58:a8:bb:87:ba:cb:4a:9d:
3f:b8:77:ee:77:e5:90:9c:4c:f7:59:2b:c1:b6:85:
c5:e9:fe:89:dd:82:10:68:80:8e:e7:cf:22:0a:4a:
ac:86:6b:8f:5e:39:64:21:1c:dd:a8:b7:65:f1:33:
87:42:90:c0:ee:d4:e8:1f:97:6d:52:ed:43:9c:97:
87:6d:38:de:fa:21:f0:17:1c:cb:aa:5b:11:27:d9:
e3:e3:e9:7d:b2:e3:4f:8b:72:01:2b:f2:6f:f0:51:
37:59:cd:23:3b:db:f7:e6:71:c7:02:e8:d0:d4:63:
53:35:d2:c8:86:04:a2:31:ba:6d:b7:4f:19:87:4a:
46:11:a2:2c:c6:98:0d:76:37:58:de:f7:d7:63:e0:
21:01:b5:b1:98:5e:9c:2d:75:14:2e:0b:0b:e6:39:
3e:96:62:61:82:0d:fe:c9:22:36:46:83:5d:76:1b:
53:81:cd:45:b4:9f:a8:40:d9:55:7c:2a:ea:75:d8:
d5:92:35:1b:f7:45:02:07:83:16:f1:c8:fd:79:56:
8a:87:64:05:98:ed:a2:88:46:06:58:ff:c0:df:dd:
da:80:e5:aa:c9:5d:f9:18:23:64:cd:28:d7:9f:20:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:07:3C:B0:26:10:89:71:43:6A:ED:14:A5:02:FC:21:89:CC:52:4F
X509v3 Authority Key Identifier:
keyid:E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3a:f8:80:94:85:c1:99:71:d3:cf:91:a3:e0:13:d2:ac:bc:
e7:21:a1:b1:4c:36:14:00:1a:de:51:83:28:0c:b1:ef:24:a0:
24:66:8d:ea:4c:70:44:f6:0a:6c:98:f0:63:53:0f:65:5b:c6:
a4:35:39:92:e5:a4:48:65:39:44:d0:fc:c4:de:ae:20:23:f0:
2e:3f:08:83:d0:aa:55:7d:1b:a1:f1:23:e8:af:f2:00:37:58:
2c:85:8c:0e:4b:36:d6:e2:09:b0:45:8b:4e:6d:38:6f:21:62:
da:71:9f:8d:6d:dc:53:09:cf:6f:8b:ba:9a:1f:0f:c0:40:43:
35:70:7f:c7:51:b7:8e:7b:08:67:3c:e3:be:02:82:81:57:95:
45:e0:bf:08:72:a9:ba:ad:50:6e:c3:f0:c4:d8:c0:96:68:ac:
b2:f8:a9:ad:2f:d0:e2:d0:ad:2a:90:ef:92:ae:19:8e:d2:dc:
01:8d:b5:1b:f3:74:dd:00:54:5a:cb:91:07:81:99:8b:5f:74:
1b:43:df:b1:7f:24:b3:e2:5d:f7:14:6a:cc:97:c7:d6:ae:11:
d0:28:01:1a:e1:2a:84:f2:ed:40:4b:8c:76:bb:12:c3:d3:96:
3d:13:ac:39:1a:60:2f:06:19:d6:17:5f:0b:ce:4c:db:ce:aa:
ed:7d:48:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNQHnB9ycrKzwrx+vevIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYjU2ZmYyZmFlNWY2MjE5NDkyYzEyZDgzZTEyMzlkNmFk
NmUxMmYwHhcNMjYwMzAyMTEwMDM1WhcNMjYwMzAzMTEwMDM1WjAzMTEwLwYDVQQD
Eyg3MjA3M2NiMDI2MTA4OTcxNDM2YWVkMTRhNTAyZmMyMTg5Y2M1MjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs98eL7WFifQmMz0mseLDLC+1rgsW
WKi7h7rLSp0/uHfud+WQnEz3WSvBtoXF6f6J3YIQaICO588iCkqshmuPXjlkIRzd
qLdl8TOHQpDA7tToH5dtUu1DnJeHbTje+iHwFxzLqlsRJ9nj4+l9suNPi3IBK/Jv
8FE3Wc0jO9v35nHHAujQ1GNTNdLIhgSiMbptt08Zh0pGEaIsxpgNdjdY3vfXY+Ah
AbWxmF6cLXUULgsL5jk+lmJhgg3+ySI2RoNddhtTgc1FtJ+oQNlVfCrqddjVkjUb
90UCB4MW8cj9eVaKh2QFmO2iiEYGWP/A393agOWqyV35GCNkzSjXnyA0RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIHPLAmEIlxQ2rtFKUC/CGJzFJPMB8GA1UdIwQY
MBaAFOK1b/L65fYhlJLBLYPhI51q1uEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xMDhiZmYtNmU3MC00M2QyLWFkODkt
NGY2N2ZmNTgxMTQxLzEvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xMDhiZmYtNmU3MC00M2QyLWFkODktNGY2N2ZmNTgxMTQx
LzEvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTr4gJSF
wZlx08+Ro+AT0qy85yGhsUw2FAAa3lGDKAyx7ySgJGaN6kxwRPYKbJjwY1MPZVvG
pDU5kuWkSGU5RND8xN6uICPwLj8Ig9CqVX0bofEj6K/yADdYLIWMDks21uIJsEWL
Tm04byFi2nGfjW3cUwnPb4u6mh8PwEBDNXB/x1G3jnsIZzzjvgKCgVeVReC/CHKp
uq1QbsPwxNjAlmissviprS/Q4tCtKpDvkq4ZjtLcAY21G/N03QBUWsuRB4GZi190
G0PfsX8ks+Jd9xRqzJfH1q4R0CgBGuEqhPLtQEuMdrsSw9OWPROsORpgLwYZ1hdf
C85M286q7X1IHQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:36:16 2026 by rpki-client