Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json)
Hash identifier: ifP7Cih/0W5OQActuw67mVW6+b1eqdMC9H6W+wf9JL0=
Subject key identifier: 06:EB:9C:C7:00:C9:DB:B7:5B:DA:AE:C1:45:7E:BD:E1:AD:65:96:A8
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial: 019CAC10496E182C0A1F284B912EBADDE8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
Manifest number: 0AFC
Signing time: Mon 02 Mar 2026 01:01:14 +0000
Manifest this update: Mon 02 Mar 2026 01:01:14 +0000
Manifest next update: Tue 03 Mar 2026 01:01:14 +0000
Files and hashes: 1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: uu5bNZhW+kKnmRDbmwHuljZD8qXEyiYupBkWinw//9Q=)
2: YTHqy1jXNV7dNzrAO_RbGYRTCcA.roa (hash: zJ9iDYD1yuxkbyK8khRTA4UqxwT49qevZssCV62H0OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:49:6e:18:2c:0a:1f:28:4b:91:2e:ba:dd:e8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Validity
Not Before: Mar 2 01:01:14 2026 GMT
Not After : Mar 3 01:01:14 2026 GMT
Subject: CN=06eb9cc700c9dbb75bdaaec1457ebde1ad6596a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d6:09:ec:42:2d:dd:b4:ff:1a:65:8f:36:40:
a7:49:f8:c5:ab:66:8f:de:53:3b:be:7b:1e:65:44:
82:b4:c0:41:4e:77:b0:c8:b8:f6:ab:cb:3d:82:26:
4c:a2:4c:f3:6e:c8:9a:f3:5b:b0:f0:8f:9e:fb:6e:
55:4d:b3:b4:f3:77:24:76:29:92:a4:80:54:eb:c4:
72:b6:fb:70:2b:92:30:c6:30:df:b5:7b:82:56:71:
cf:a2:56:ec:47:b8:7f:c0:bb:1c:1b:53:f2:cf:50:
14:80:f5:56:60:62:c3:e8:b0:1c:f2:fd:cf:2b:09:
c8:75:28:d7:2a:ab:5a:a8:9a:7d:14:9f:21:38:fb:
0b:e6:8f:93:4e:35:d3:8e:b4:a9:a3:63:71:0c:5b:
e5:79:aa:8a:c2:86:20:45:35:38:c7:7a:79:65:9b:
0a:5d:ae:bb:a7:82:2e:8b:f7:fb:a6:d4:c4:d0:77:
42:09:7e:ae:fe:d5:0b:02:f7:8f:8d:a2:5b:17:ab:
c5:f7:23:b4:a8:c9:b4:e6:33:ec:70:df:94:44:dc:
59:f0:30:95:2b:18:1d:95:be:87:9a:9e:c1:0f:08:
61:2a:89:c8:6e:cd:0b:f0:30:f8:c1:5f:db:c1:6a:
b2:98:8d:b8:2a:e5:32:10:f7:7f:37:31:04:61:3e:
51:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EB:9C:C7:00:C9:DB:B7:5B:DA:AE:C1:45:7E:BD:E1:AD:65:96:A8
X509v3 Authority Key Identifier:
keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:50:2e:83:12:5c:d4:17:53:27:58:d9:11:19:ac:04:2c:ae:
06:cc:06:bd:3f:bd:68:f3:f7:b0:12:aa:4e:74:be:75:9f:82:
94:b5:66:7a:a2:5c:93:fc:96:66:7b:49:4a:95:ad:02:b6:72:
86:ce:c1:f7:4f:a7:16:8f:c0:ef:df:d7:23:bf:7a:4b:cf:b9:
98:d6:c3:f6:ca:28:ec:1e:a3:e9:40:56:38:01:fb:05:68:a6:
af:63:f7:a9:5f:79:19:25:f5:23:b4:64:01:f0:c5:2b:32:4e:
e6:40:8b:15:8b:8e:b4:69:26:c2:3e:63:b6:5b:41:e2:c1:be:
7f:2d:9f:f2:ca:a7:c3:e9:9f:f5:a0:fc:55:2e:0a:0f:a8:5f:
6f:9b:73:af:3e:ed:3c:a6:ed:7b:60:e2:24:f8:90:a7:98:7d:
f1:65:27:7b:0b:f0:6e:e6:e3:0b:ec:a0:8c:e6:c5:8d:31:81:
dc:e0:e2:47:ea:53:5d:6b:1b:b7:37:64:e3:53:62:9f:96:71:
c1:2d:83:1a:f7:5c:27:c9:c6:7a:b6:c8:77:4f:b7:4e:c6:01:
bd:85:1e:36:1c:fa:da:66:15:cb:27:92:af:83:9e:37:48:d3:
02:9f:cc:c4:9a:29:46:47:5b:5a:51:ce:9b:64:8e:53:4b:87:
fc:47:de:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEEluGCwKHyhLkS663eimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMzQ5NGUwY2MxMmM3NWFlZDFkMDFkZWIxNWJlNGUyNjYy
YjQ4NWEwHhcNMjYwMzAyMDEwMTE0WhcNMjYwMzAzMDEwMTE0WjAzMTEwLwYDVQQD
EygwNmViOWNjNzAwYzlkYmI3NWJkYWFlYzE0NTdlYmRlMWFkNjU5NmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytYJ7EIt3bT/GmWPNkCnSfjFq2aP
3lM7vnseZUSCtMBBTnewyLj2q8s9giZMokzzbsia81uw8I+e+25VTbO083ckdimS
pIBU68RytvtwK5IwxjDftXuCVnHPolbsR7h/wLscG1Pyz1AUgPVWYGLD6LAc8v3P
KwnIdSjXKqtaqJp9FJ8hOPsL5o+TTjXTjrSpo2NxDFvleaqKwoYgRTU4x3p5ZZsK
Xa67p4Iui/f7ptTE0HdCCX6u/tULAvePjaJbF6vF9yO0qMm05jPscN+URNxZ8DCV
Kxgdlb6Hmp7BDwhhKonIbs0L8DD4wV/bwWqymI24KuUyEPd/NzEEYT5RxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbrnMcAydu3W9quwUV+veGtZZaoMB8GA1UdIwQY
MBaAFOI0lODMEsda7R0B3rFb5OJmK0haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUt
MjI3NDBiZjJkNWVhLzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUtMjI3NDBiZjJkNWVh
LzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVAugxJc
1BdTJ1jZERmsBCyuBswGvT+9aPP3sBKqTnS+dZ+ClLVmeqJck/yWZntJSpWtArZy
hs7B90+nFo/A79/XI796S8+5mNbD9soo7B6j6UBWOAH7BWimr2P3qV95GSX1I7Rk
AfDFKzJO5kCLFYuOtGkmwj5jtltB4sG+fy2f8sqnw+mf9aD8VS4KD6hfb5tzrz7t
PKbte2DiJPiQp5h98WUnewvwbubjC+ygjObFjTGB3ODiR+pTXWsbtzdk41Nin5Zx
wS2DGvdcJ8nGerbId0+3TsYBvYUeNhz62mYVyyeSr4OeN0jTAp/MxJopRkdbWlHO
m2SOU0uH/EfelQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:04 2026 by rpki-client