Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
File: v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json)
Hash identifier: H5ChokoRd92QkvW7hA1PNZkxPbfSPw4c07P/HrIsyh4=
Subject key identifier: 82:49:26:89:C4:83:59:08:47:1E:44:A9:74:93:00:8B:59:41:8C:13
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 019CAB6B9C7EB125EE11B1FDA7A485F1EEB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
Manifest number: 0417
Signing time: Sun 01 Mar 2026 22:01:22 +0000
Manifest this update: Sun 01 Mar 2026 22:01:22 +0000
Manifest next update: Mon 02 Mar 2026 22:01:22 +0000
Files and hashes: 1: 3RsLnrTTWTLPQLyhD4gSJN-DaTI.roa (hash: P//UvOt3ZaB3uh3PmS1jjSG8dYP/ZrhMVhcmC8uqPak=)
2: orOrT8NVY4pf1QT1W-mHVHhwDL8.roa (hash: bx8FYIhx4hyq5ap/XvQzvchaRMF2JO/G6piTSSfSHKo=)
3: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: 7ZOGeMAfk1O07j3T223TNjj6zboRrXTzO9UY4Pp+RTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:9c:7e:b1:25:ee:11:b1:fd:a7:a4:85:f1:ee:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Mar 1 22:01:22 2026 GMT
Not After : Mar 2 22:01:22 2026 GMT
Subject: CN=82492689c4835908471e44a97493008b59418c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:8b:c1:97:4e:fa:f0:c0:24:72:4a:39:d7:
b6:0a:64:ba:9a:8e:31:19:58:c9:21:0f:05:4b:f2:
35:df:2d:40:21:00:95:84:d1:59:7f:39:4b:43:b6:
ee:d7:cc:9c:e2:e9:8f:a1:2c:fd:25:a8:6b:d9:01:
67:8f:1d:42:de:d1:f7:48:08:3c:61:d4:ed:ef:79:
6b:82:b6:6f:dc:cf:b7:e0:ba:f6:21:ff:03:43:7a:
25:fd:14:e9:04:57:b8:91:44:8b:46:9c:b6:27:dc:
84:45:dc:78:7d:60:f0:f0:07:da:4f:a9:fd:ba:aa:
02:a3:8e:ae:b7:1b:d6:33:94:3f:2d:79:b3:cc:34:
2f:c7:65:74:b3:68:ef:34:0e:5a:79:be:dc:b8:8a:
4f:38:13:a7:4f:ee:fa:77:44:7b:e6:a0:7b:b2:ea:
82:b3:19:27:df:63:e4:10:46:b3:66:c9:83:61:bd:
16:f2:f0:3a:ba:1c:3b:db:00:36:e1:cd:18:32:52:
fb:f2:50:8a:4e:d8:92:22:ad:17:db:ac:22:38:ec:
9e:4d:c5:d3:a6:50:3e:ff:20:7b:6e:2e:bf:53:ee:
a5:4e:ab:33:c2:af:af:ec:ee:18:91:64:12:3f:6d:
d3:b6:26:c0:69:6d:ea:5e:67:04:6b:e4:9f:55:5a:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:49:26:89:C4:83:59:08:47:1E:44:A9:74:93:00:8B:59:41:8C:13
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:73:8b:95:85:43:5b:63:ec:60:02:3b:53:55:8d:38:02:89:
a1:6a:f6:2b:99:d3:6e:26:37:46:19:f1:bc:6a:82:19:23:f2:
43:e7:d7:1b:69:8f:a5:de:22:3e:ae:96:e8:53:a0:a2:39:ca:
28:28:1f:d4:ec:74:f0:31:7a:ec:af:7f:72:83:39:36:28:2c:
54:18:d0:16:fc:52:3c:82:49:97:b0:e7:a4:68:7c:d4:b9:2b:
4d:40:9f:6d:df:fd:c8:e9:42:98:64:d7:65:5b:14:20:2a:28:
dd:b6:f6:99:fc:13:9e:96:8b:37:44:c5:4d:fc:6b:6e:92:1f:
53:00:d8:78:1a:c0:7c:d8:60:61:50:fb:88:8b:ff:0b:01:83:
dd:f0:0b:21:76:f1:4c:1e:4b:ed:79:7d:fc:39:b2:d9:f3:61:
ba:95:ab:e4:73:c2:5f:23:63:97:8e:1b:e4:5b:66:fb:3a:80:
ae:cb:e8:de:c4:29:3d:d7:fd:ad:15:3b:e1:90:eb:52:23:7e:
65:31:ee:cd:4b:0a:a7:10:9d:50:64:6f:8f:1d:66:30:37:9d:
82:06:97:40:22:dd:2b:96:97:9c:a6:d4:d0:81:35:2b:aa:9e:
06:eb:b0:59:aa:2b:2c:92:e0:d8:0a:46:0b:ad:16:c4:29:0d:
d2:c6:17:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra5x+sSXuEbH9p6SF8e6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODg4NDlhMmViNWU5ZGQ1NzFhOGU3NDNiZWQ3Yjk1MTNk
N2ExMjEwHhcNMjYwMzAxMjIwMTIyWhcNMjYwMzAyMjIwMTIyWjAzMTEwLwYDVQQD
Eyg4MjQ5MjY4OWM0ODM1OTA4NDcxZTQ0YTk3NDkzMDA4YjU5NDE4YzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx2LwZdO+vDAJHJKOde2CmS6mo4x
GVjJIQ8FS/I13y1AIQCVhNFZfzlLQ7bu18yc4umPoSz9Jahr2QFnjx1C3tH3SAg8
YdTt73lrgrZv3M+34Lr2If8DQ3ol/RTpBFe4kUSLRpy2J9yERdx4fWDw8AfaT6n9
uqoCo46utxvWM5Q/LXmzzDQvx2V0s2jvNA5aeb7cuIpPOBOnT+76d0R75qB7suqC
sxkn32PkEEazZsmDYb0W8vA6uhw72wA24c0YMlL78lCKTtiSIq0X26wiOOyeTcXT
plA+/yB7bi6/U+6lTqszwq+v7O4YkWQSP23TtibAaW3qXmcEa+SfVVpywwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJJJonEg1kIRx5EqXSTAItZQYwTMB8GA1UdIwQY
MBaAFL+IhJoutendVxqOdDvte5UT16EhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kYmM1OGUtMDI3Yi00YWFjLTlkZTYt
MjM3MzliNWZkODRjLzEvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9kYmM1OGUtMDI3Yi00YWFjLTlkZTYtMjM3MzliNWZkODRj
LzEvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXOLlYVD
W2PsYAI7U1WNOAKJoWr2K5nTbiY3RhnxvGqCGSPyQ+fXG2mPpd4iPq6W6FOgojnK
KCgf1Ox08DF67K9/coM5NigsVBjQFvxSPIJJl7DnpGh81LkrTUCfbd/9yOlCmGTX
ZVsUICoo3bb2mfwTnpaLN0TFTfxrbpIfUwDYeBrAfNhgYVD7iIv/CwGD3fALIXbx
TB5L7Xl9/Dmy2fNhupWr5HPCXyNjl44b5Ftm+zqArsvo3sQpPdf9rRU74ZDrUiN+
ZTHuzUsKpxCdUGRvjx1mMDedggaXQCLdK5aXnKbU0IE1K6qeBuuwWaorLJLg2ApG
C60WxCkN0sYXnw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:09 2026 by rpki-client