Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier: BcHsZn/KT3GL88CVHP+/JuevAMRzn2B3hrFeXULBoB8=
Subject key identifier: 44:BD:16:AC:22:AA:97:A0:7B:29:AF:30:77:2A:D6:56:A6:93:19:AF
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer: /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial: 019CAB6BAF4E4453C3F62ED1039098811834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:27 +0000
Manifest this update: Sun 01 Mar 2026 22:01:27 +0000
Manifest next update: Mon 02 Mar 2026 22:01:27 +0000
Files and hashes: 1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: xxVMwCgEtkiFs4ET3M/vBqLugAmT5xw77cZtBIFL7yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:af:4e:44:53:c3:f6:2e:d1:03:90:98:81:18:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Validity
Not Before: Mar 1 22:01:27 2026 GMT
Not After : Mar 2 22:01:27 2026 GMT
Subject: CN=44bd16ac22aa97a07b29af30772ad656a69319af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:22:70:d8:ea:59:d7:6a:73:1f:b5:30:5a:
52:b0:78:d3:b6:22:b3:0d:01:fb:49:7f:8e:aa:d4:
43:71:53:45:e6:63:49:18:75:04:dd:89:b1:6b:70:
47:ce:d0:98:e7:bd:aa:5f:9f:3a:96:7e:07:7f:23:
38:64:74:35:96:b7:06:01:49:a5:19:a3:8a:e8:df:
b6:2d:1f:68:c4:6c:fb:e0:5f:fb:72:9b:34:0b:05:
6f:f2:5e:3f:37:54:e2:13:3d:f9:b4:41:34:6c:72:
81:c9:fd:b0:92:7f:23:9c:f1:98:ed:3d:3c:a9:b1:
05:a4:42:a5:a5:d1:98:33:27:b0:5e:b5:19:b2:d8:
a0:37:4d:d8:60:d8:41:29:c7:60:65:04:51:6f:ee:
2d:84:7d:80:31:4e:c1:78:6c:70:5d:a5:90:52:78:
e8:56:a8:23:2f:a1:46:2c:83:36:d1:9e:44:fd:92:
77:51:90:a0:8a:a9:a7:66:eb:ab:39:ab:89:52:6b:
f9:00:c0:c6:fe:19:33:a7:4a:24:e2:71:1a:f9:0f:
75:b9:9f:05:df:a4:e2:6a:d3:14:b1:d4:97:29:2d:
ae:b2:ba:90:9b:94:49:5f:de:87:a6:02:b3:cb:2a:
3f:d2:69:23:18:72:3d:2a:83:c0:34:d8:64:1a:ef:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BD:16:AC:22:AA:97:A0:7B:29:AF:30:77:2A:D6:56:A6:93:19:AF
X509v3 Authority Key Identifier:
keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1b:d3:48:20:13:b5:c1:93:ea:ce:02:2f:bf:a9:b4:2e:f8:
a3:ba:0a:0d:ba:8a:31:5d:7c:ef:bc:ec:89:f7:7d:f3:91:7b:
06:15:fc:6f:0d:02:ae:c8:d8:5f:d9:82:2f:ba:5b:83:66:86:
aa:26:4d:61:af:13:48:a1:9e:86:10:da:6a:7b:fd:45:90:10:
c2:24:2f:ba:6b:ac:82:81:04:84:57:e7:7f:77:40:23:1e:84:
1d:c3:d3:e9:93:ef:ae:83:5d:10:84:c1:78:03:e6:b9:bf:fd:
7a:df:60:1a:9b:83:93:b2:4e:9f:e3:33:2c:5b:b6:c6:dc:2d:
98:6f:a7:5f:bb:bd:7d:aa:13:fd:c5:1c:84:0c:25:0c:f6:32:
02:0e:c7:86:81:e6:dc:da:f8:99:df:64:9e:e8:f7:1b:be:11:
a4:ea:7b:35:62:59:35:10:2c:8f:43:4e:8d:72:32:27:79:ea:
90:a7:ce:5d:80:38:45:5e:17:21:42:7e:29:92:17:ef:6e:f4:
94:a9:a6:69:58:c0:6c:58:dc:38:49:fd:45:c7:f1:59:31:d0:
82:cf:05:f7:92:b9:1f:93:bd:b9:ac:c7:b6:3b:74:c4:b9:c7:
05:ad:92:77:a2:d3:0c:8d:c5:87:6a:0b:bc:83:13:50:58:32:
5e:23:4a:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra69ORFPD9i7RA5CYgRg0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjE1YmM1YjkwMjE5OWViODZkNjA3OGM0ODJlZGVkZDNk
ZGRlYjQwHhcNMjYwMzAxMjIwMTI3WhcNMjYwMzAyMjIwMTI3WjAzMTEwLwYDVQQD
Eyg0NGJkMTZhYzIyYWE5N2EwN2IyOWFmMzA3NzJhZDY1NmE2OTMxOWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcoicNjqWddqcx+1MFpSsHjTtiKz
DQH7SX+OqtRDcVNF5mNJGHUE3Ymxa3BHztCY572qX586ln4HfyM4ZHQ1lrcGAUml
GaOK6N+2LR9oxGz74F/7cps0CwVv8l4/N1TiEz35tEE0bHKByf2wkn8jnPGY7T08
qbEFpEKlpdGYMyewXrUZstigN03YYNhBKcdgZQRRb+4thH2AMU7BeGxwXaWQUnjo
VqgjL6FGLIM20Z5E/ZJ3UZCgiqmnZuurOauJUmv5AMDG/hkzp0ok4nEa+Q91uZ8F
36TiatMUsdSXKS2usrqQm5RJX96HpgKzyyo/0mkjGHI9KoPANNhkGu8PTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFES9FqwiqpegeymvMHcq1lamkxmvMB8GA1UdIwQY
MBaAFOGxW8W5AhmeuG1geMSC7e3T3d60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJGYnhia0NHWjY0YldCNHhJTHQ3ZFBkM3JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mNmQ2NTUtNzNlYS00MjJhLWE5NjMt
NDFhOTgwMDFjZjJiLzEvNGJGYnhia0NHWjY0YldCNHhJTHQ3ZFBkM3JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mNmQ2NTUtNzNlYS00MjJhLWE5NjMtNDFhOTgwMDFjZjJi
LzEvNGJGYnhia0NHWjY0YldCNHhJTHQ3ZFBkM3JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhvTSCAT
tcGT6s4CL7+ptC74o7oKDbqKMV1877zsifd985F7BhX8bw0CrsjYX9mCL7pbg2aG
qiZNYa8TSKGehhDaanv9RZAQwiQvumusgoEEhFfnf3dAIx6EHcPT6ZPvroNdEITB
eAPmub/9et9gGpuDk7JOn+MzLFu2xtwtmG+nX7u9faoT/cUchAwlDPYyAg7HhoHm
3Nr4md9knuj3G74RpOp7NWJZNRAsj0NOjXIyJ3nqkKfOXYA4RV4XIUJ+KZIX7270
lKmmaVjAbFjcOEn9RcfxWTHQgs8F95K5H5O9uazHtjt0xLnHBa2Sd6LTDI3Fh2oL
vIMTUFgyXiNKrg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:37 2026 by rpki-client