Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier: j+0lHwoKt2+NaJXH6J90QcczsT/CJyK6b5W+cxn0Z6o=
Subject key identifier: 18:8F:AE:41:2F:58:07:A9:47:D5:BA:C1:11:FF:67:3C:D8:52:7D:71
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial: 019CAB340186164A0C2FA51469CFA07CBE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 21:00:38 +0000
Manifest this update: Sun 01 Mar 2026 21:00:38 +0000
Manifest next update: Mon 02 Mar 2026 21:00:38 +0000
Files and hashes: 1: 2Yc5Pc_w4EBrqOMKmFKQLhTLkdw.roa (hash: xcDU75sza534zn4A1SLY0N4eKvAgRsSzSIlzRIhia7Y=)
2: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: KGzDAORVFeQr3vLsNv7lfff8jbo5tXG1C3EpXK8L6KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:01:86:16:4a:0c:2f:a5:14:69:cf:a0:7c:be:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
Validity
Not Before: Mar 1 21:00:38 2026 GMT
Not After : Mar 2 21:00:38 2026 GMT
Subject: CN=188fae412f5807a947d5bac111ff673cd8527d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:76:60:de:e6:34:e6:54:ea:dc:2f:6a:9a:
df:b7:a7:7a:58:04:7d:54:a6:1d:39:3f:9f:d2:0c:
4e:b6:e4:0a:f1:5b:dc:d2:55:af:d2:4a:7c:f5:2d:
f4:39:99:68:f5:4b:b1:03:f8:51:67:0b:08:83:1d:
25:f0:d6:d9:18:c7:1d:3f:66:ce:dc:ae:d0:4c:b2:
53:ac:58:ff:39:33:98:33:dc:d1:50:78:9e:62:33:
87:f2:79:ec:98:eb:1e:2e:d9:dd:51:47:12:53:16:
29:17:61:32:ad:a8:55:27:4f:3e:dd:8e:91:b4:40:
94:23:1e:85:b9:9a:8c:11:71:92:1b:38:bd:d4:56:
6f:f3:e7:da:94:ac:82:44:41:78:10:d4:ca:9c:e4:
78:4e:7a:bd:93:a8:d2:54:0e:31:da:05:c9:aa:44:
a6:ea:0d:71:81:16:82:d3:73:cf:9d:55:5e:16:c5:
39:89:6a:0d:31:57:d9:52:f1:b2:26:e7:7d:1d:9a:
0d:ec:bf:97:db:91:eb:07:72:ef:4e:46:59:f7:38:
aa:27:b8:a7:ff:4e:39:bf:8b:51:05:81:b9:e0:18:
8b:1f:d0:33:c9:ba:40:b9:e8:bb:35:a9:6d:9c:4c:
21:69:67:1c:a3:3f:f5:6d:84:be:6d:c6:b8:c6:e2:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8F:AE:41:2F:58:07:A9:47:D5:BA:C1:11:FF:67:3C:D8:52:7D:71
X509v3 Authority Key Identifier:
keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:63:6c:1c:a2:27:46:78:c9:48:4d:f1:96:c7:e9:5f:b9:c7:
36:a3:88:43:a8:96:68:05:45:71:6b:2a:3b:99:b9:2c:46:2b:
70:ed:ab:ec:b0:fd:44:90:c3:89:fc:89:7c:6c:57:3f:ba:9c:
8c:67:a6:4b:ee:41:27:bc:be:f2:8d:79:8e:a6:47:ac:9b:5a:
91:ac:76:2d:9e:52:fa:27:18:90:bc:c4:a5:46:7b:99:b9:73:
84:b6:64:d2:be:5d:f3:3d:04:c9:c6:f7:dc:2a:b5:b2:80:e2:
69:f2:f9:86:c2:16:ec:61:fa:28:1a:b0:ad:f9:ce:17:f0:20:
c1:0f:83:87:04:cf:d7:55:23:7a:f5:30:cd:58:4d:bb:47:cc:
cf:4b:69:91:ba:26:02:b0:70:a0:7d:fa:1c:d2:74:ae:62:87:
59:15:05:51:b8:0e:ab:5a:38:01:cb:ee:4f:c2:fc:f2:81:ad:
cb:43:34:e2:6a:e3:75:14:a3:e7:92:aa:41:38:be:89:cd:e0:
ed:a4:cf:26:a3:43:8b:ab:b2:a2:e7:87:8b:8d:30:b6:70:51:
82:e8:8f:50:7c:a2:64:83:32:0a:c7:1b:0a:fd:46:78:50:de:
62:11:1b:d4:92:36:65:4f:c9:fa:1a:61:2a:f5:25:c3:b9:33:
9d:93:b7:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNAGGFkoML6UUac+gfL46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZDFhODM2NmMyMTE1OWYwNzk0NzhhOTAzMDg0M2ZiZjYw
NjMxYjkwHhcNMjYwMzAxMjEwMDM4WhcNMjYwMzAyMjEwMDM4WjAzMTEwLwYDVQQD
EygxODhmYWU0MTJmNTgwN2E5NDdkNWJhYzExMWZmNjczY2Q4NTI3ZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTV2YN7mNOZU6twvaprft6d6WAR9
VKYdOT+f0gxOtuQK8Vvc0lWv0kp89S30OZlo9UuxA/hRZwsIgx0l8NbZGMcdP2bO
3K7QTLJTrFj/OTOYM9zRUHieYjOH8nnsmOseLtndUUcSUxYpF2EyrahVJ08+3Y6R
tECUIx6FuZqMEXGSGzi91FZv8+falKyCREF4ENTKnOR4Tnq9k6jSVA4x2gXJqkSm
6g1xgRaC03PPnVVeFsU5iWoNMVfZUvGyJud9HZoN7L+X25HrB3LvTkZZ9ziqJ7in
/045v4tRBYG54BiLH9AzybpAuei7NaltnEwhaWccoz/1bYS+bca4xuIuRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiPrkEvWAepR9W6wRH/ZzzYUn1xMB8GA1UdIwQY
MBaAFODRqDZsIRWfB5R4qQMIQ/v2BjG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjIt
ZjhhZTBkYmM1ZGYyLzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjItZjhhZTBkYmM1ZGYy
LzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGNsHKIn
RnjJSE3xlsfpX7nHNqOIQ6iWaAVFcWsqO5m5LEYrcO2r7LD9RJDDifyJfGxXP7qc
jGemS+5BJ7y+8o15jqZHrJtakax2LZ5S+icYkLzEpUZ7mblzhLZk0r5d8z0Eycb3
3Cq1soDiafL5hsIW7GH6KBqwrfnOF/AgwQ+DhwTP11UjevUwzVhNu0fMz0tpkbom
ArBwoH36HNJ0rmKHWRUFUbgOq1o4AcvuT8L88oGty0M04mrjdRSj55KqQTi+ic3g
7aTPJqNDi6uyoueHi40wtnBRguiPUHyiZIMyCscbCv1GeFDeYhEb1JI2ZU/J+hph
KvUlw7kznZO3AQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:35 2026 by rpki-client