
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
File: 4-d1gqvilic_V6RVSq2m-lwf6bA.mft (raw, json)
Hash identifier: OominIyAfdYpKYhiK3y9wqpTixZSTfoRTZ3Kkb+IFrg=
Subject key identifier: BB:42:77:66:85:AE:8D:52:08:3E:13:75:00:E1:54:29:9B:AD:CA:81
Authority key identifier: E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
Certificate issuer: /CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Certificate serial: 019CAC7E63A543BA44C698BA84D36232AACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
Manifest number: 070D
Signing time: Mon 02 Mar 2026 03:01:30 +0000
Manifest this update: Mon 02 Mar 2026 03:01:30 +0000
Manifest next update: Tue 03 Mar 2026 03:01:30 +0000
Files and hashes: 1: 4-d1gqvilic_V6RVSq2m-lwf6bA.crl (hash: Q/d4C9IEpQlheeezdKsQPpDKDvKPX/mg8KiT6UZd3oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:63:a5:43:ba:44:c6:98:ba:84:d3:62:32:aa:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Validity
Not Before: Mar 2 03:01:30 2026 GMT
Not After : Mar 3 03:01:30 2026 GMT
Subject: CN=bb42776685ae8d52083e137500e154299badca81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:b1:5f:a1:97:15:e3:ca:15:ce:39:4d:64:
aa:1b:30:a9:79:f2:cd:b0:38:cd:4c:2f:42:e5:bc:
13:73:c0:6d:d2:78:b7:0f:17:11:ca:48:4e:29:44:
51:0e:f9:6f:42:ea:b4:2f:da:88:9d:e1:8c:c0:c9:
df:d2:ed:5c:3b:ca:de:cb:cd:dd:fe:2e:93:4c:44:
89:59:1c:8e:c2:41:d3:19:1c:a2:16:97:64:11:4b:
ac:0a:c1:b4:2c:35:f3:54:37:85:14:8b:5d:de:8c:
b1:a8:5d:4d:df:0a:2f:3d:a4:fc:38:15:09:4b:ab:
52:f5:95:88:a5:90:a4:85:5c:c6:f9:c3:44:2d:ff:
b0:1d:c1:f5:76:d7:57:4b:08:21:2a:15:fb:88:d7:
1a:9a:67:dc:0e:5f:f8:b0:a0:85:fd:d6:2c:ff:82:
4b:57:ed:66:10:70:68:d0:eb:5d:3e:8d:25:83:ef:
db:57:41:fa:fd:05:f7:24:96:4c:b6:04:ae:3b:75:
94:ea:f0:43:9e:63:81:c0:e1:79:28:61:38:c8:32:
06:08:06:5c:02:a7:23:c6:79:6c:70:06:32:ae:80:
b0:30:16:67:a2:e1:e5:24:46:12:ca:e6:c0:f0:ff:
d7:c5:0c:89:74:60:a0:7d:3c:c8:54:ed:ef:05:72:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:42:77:66:85:AE:8D:52:08:3E:13:75:00:E1:54:29:9B:AD:CA:81
X509v3 Authority Key Identifier:
keyid:E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:17:10:c6:b7:ce:51:1e:19:99:41:0d:38:7a:d9:f5:49:78:
23:ae:cb:2f:9a:29:8b:d3:b0:46:ee:42:98:9c:13:dd:fc:c2:
57:49:eb:66:fe:44:81:1f:1c:6f:4c:ab:1e:43:f8:b0:34:03:
ac:4d:0f:f9:8c:98:77:fe:94:f1:c7:42:ad:78:91:19:80:be:
a7:a2:b5:d1:82:23:56:38:0c:13:d6:48:31:25:dc:f4:c6:44:
47:5b:ff:30:fe:d6:77:c3:49:77:b4:09:74:cd:e7:9f:c7:ac:
bf:1c:54:58:0d:db:55:51:0a:25:dc:b0:96:9f:c2:ef:a4:81:
6e:27:3d:a8:d1:33:66:9c:42:6b:a7:40:b2:d5:82:35:50:08:
6f:8a:2d:70:a2:01:27:d7:82:c4:6e:21:78:c4:7e:a2:1c:f0:
f4:77:16:76:0d:db:27:cf:46:1d:06:80:e5:cb:2b:1a:85:b7:
e2:48:af:5f:de:35:48:3c:df:fc:e4:c6:8c:14:d0:27:55:91:
69:f8:fa:b1:a2:68:67:55:4e:09:5f:16:d0:6f:29:55:03:5a:
53:91:2c:5d:0b:2d:50:9d:b8:81:e3:3d:ea:1a:1e:22:b4:ee:
8a:b6:08:d2:db:0a:20:3f:d5:ee:ae:69:b5:78:a5:9d:70:b5:
5c:a2:53:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfmOlQ7pExpi6hNNiMqrLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZTc3NTgyYWJlMjk2MjczZjU3YTQ1NTRhYWRhNmZhNWMx
ZmU5YjAwHhcNMjYwMzAyMDMwMTMwWhcNMjYwMzAzMDMwMTMwWjAzMTEwLwYDVQQD
EyhiYjQyNzc2Njg1YWU4ZDUyMDgzZTEzNzUwMGUxNTQyOTliYWRjYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdSxX6GXFePKFc45TWSqGzCpefLN
sDjNTC9C5bwTc8Bt0ni3DxcRykhOKURRDvlvQuq0L9qIneGMwMnf0u1cO8rey83d
/i6TTESJWRyOwkHTGRyiFpdkEUusCsG0LDXzVDeFFItd3oyxqF1N3wovPaT8OBUJ
S6tS9ZWIpZCkhVzG+cNELf+wHcH1dtdXSwghKhX7iNcammfcDl/4sKCF/dYs/4JL
V+1mEHBo0OtdPo0lg+/bV0H6/QX3JJZMtgSuO3WU6vBDnmOBwOF5KGE4yDIGCAZc
AqcjxnlscAYyroCwMBZnouHlJEYSyubA8P/XxQyJdGCgfTzIVO3vBXK2IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtCd2aFro1SCD4TdQDhVCmbrcqBMB8GA1UdIwQY
MBaAFOPndYKr4pYnP1ekVUqtpvpcH+mwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xNjgwOTYtYzg4Ny00NzZmLWIzMzUt
MTE4OTYwZWY2MmM2LzEvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xNjgwOTYtYzg4Ny00NzZmLWIzMzUtMTE4OTYwZWY2MmM2
LzEvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExcQxrfO
UR4ZmUENOHrZ9Ul4I67LL5opi9OwRu5CmJwT3fzCV0nrZv5EgR8cb0yrHkP4sDQD
rE0P+YyYd/6U8cdCrXiRGYC+p6K10YIjVjgME9ZIMSXc9MZER1v/MP7Wd8NJd7QJ
dM3nn8esvxxUWA3bVVEKJdywlp/C76SBbic9qNEzZpxCa6dAstWCNVAIb4otcKIB
J9eCxG4heMR+ohzw9HcWdg3bJ89GHQaA5csrGoW34kivX941SDzf/OTGjBTQJ1WR
afj6saJoZ1VOCV8W0G8pVQNaU5EsXQstUJ24geM96hoeIrTuirYI0tsKID/V7q5p
tXilnXC1XKJTIg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:27 2026 by rpki-client