
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
File: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft (raw, json)
Hash identifier: zgSowZIQXTl7PVU/vpw4lasp2IsHjG2BL1uKf2D4AAs=
Subject key identifier: BE:04:8D:57:B8:80:19:BA:A3:50:E6:A6:3C:1B:EB:55:01:DF:8A:3E
Authority key identifier: E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
Certificate issuer: /CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Certificate serial: 019CADFEAC2A81ABA01248D15C1C0ED7045F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
Manifest number: 12DF
Signing time: Mon 02 Mar 2026 10:01:14 +0000
Manifest this update: Mon 02 Mar 2026 10:01:14 +0000
Manifest next update: Tue 03 Mar 2026 10:01:14 +0000
Files and hashes: 1: 4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl (hash: wZftj4tO3QIKp1jnwPU6BB4JEJ6vx1v4vaErY/Bov5I=)
2: VO0q4nWrfOStAkTKpUu6a9s4iXM.roa (hash: RO1KxuAMQb5sndGW2US++WYwHmd5hwNX7clvLvt34WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:ac:2a:81:ab:a0:12:48:d1:5c:1c:0e:d7:04:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23a74630a8424ccd5f5bb0f60220894527d732c
Validity
Not Before: Mar 2 10:01:14 2026 GMT
Not After : Mar 3 10:01:14 2026 GMT
Subject: CN=be048d57b88019baa350e6a63c1beb5501df8a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:93:cc:d0:25:91:46:5c:b0:02:48:20:af:
d2:4f:71:d1:6e:87:a0:58:32:01:64:8c:4a:67:81:
a6:82:1d:91:f6:46:5c:0e:de:6c:3d:97:3f:44:2f:
5d:b4:6a:65:3b:fe:42:2c:46:64:26:1d:67:5d:63:
76:73:6e:8a:9a:25:7d:44:42:18:98:45:11:ed:34:
84:2b:f9:51:c6:cc:06:95:ed:3b:c8:aa:75:b6:bc:
9a:7c:5e:95:df:34:a1:87:f0:dc:fd:a8:9d:74:b0:
c3:a6:f1:1a:0a:57:3b:79:34:67:fe:8f:9d:02:70:
2d:84:98:ff:31:6c:45:88:4f:14:68:d9:c3:47:3a:
33:b1:c0:95:9c:f7:31:5c:66:90:47:e8:bf:23:a5:
35:40:94:c4:aa:e8:09:44:d0:0d:7f:fe:de:d2:9b:
4b:bf:a5:06:f0:6a:20:89:64:d2:c1:98:e4:33:b2:
c1:0c:fc:f8:7b:39:d1:f4:77:41:e7:35:60:96:7f:
3a:d7:46:b1:89:b5:5a:98:85:40:d6:cd:d0:07:e7:
af:ad:86:86:c2:7a:fc:fa:be:a6:8d:e5:7d:1c:23:
14:72:b0:a0:1b:fe:b9:72:f5:be:7c:ce:c9:47:11:
0b:dd:a7:88:37:a2:93:76:d2:98:ba:7a:b5:1a:9c:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:04:8D:57:B8:80:19:BA:A3:50:E6:A6:3C:1B:EB:55:01:DF:8A:3E
X509v3 Authority Key Identifier:
keyid:E2:3A:74:63:0A:84:24:CC:D5:F5:BB:0F:60:22:08:94:52:7D:73:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/540897-f4b7-4848-b07b-96ab21696974/1/4jp0YwqEJMzV9bsPYCIIlFJ9cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f5:04:0a:de:6c:99:d8:36:be:95:7b:b6:f6:fd:8c:04:e4:
d8:a9:97:63:5b:e2:b5:dd:13:c9:12:c9:06:51:20:4e:97:55:
a0:94:0f:f1:da:6d:55:1a:60:c1:3c:71:43:f9:0a:23:ed:be:
db:05:f6:67:2b:80:24:b4:e9:8d:3e:58:36:f3:88:37:0f:aa:
dd:a2:57:28:c4:38:00:04:c1:53:c6:10:0c:2a:9e:0a:2a:e4:
af:51:7d:65:92:02:b9:c3:56:7c:2c:3e:8d:52:da:9b:b3:2c:
35:81:5e:c1:4f:7e:44:39:b2:bb:30:ec:4d:f5:9e:39:3c:0b:
72:97:0c:af:a8:dd:4c:7a:85:d1:b4:3f:22:62:6f:2b:e7:7e:
57:da:4f:7f:a4:3d:85:98:9a:36:5b:46:d7:1f:82:c4:2b:bd:
4d:5d:38:42:93:14:39:5b:c5:38:a9:ee:73:4d:72:28:34:7b:
53:23:65:aa:da:5f:bb:fa:16:65:a0:16:b5:f8:ee:38:be:72:
1a:8e:29:c3:f9:ea:02:48:70:59:b9:b4:79:7f:1c:5c:8a:32:
8a:7d:8a:18:14:f2:1d:0c:e3:21:aa:32:8d:47:58:17:ac:d9:
1a:a1:f7:45:f2:6f:68:20:49:75:de:c6:20:df:1b:51:86:8a:
34:c3:80:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/qwqgaugEkjRXBwO1wRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyM2E3NDYzMGE4NDI0Y2NkNWY1YmIwZjYwMjIwODk0NTI3
ZDczMmMwHhcNMjYwMzAyMTAwMTE0WhcNMjYwMzAzMTAwMTE0WjAzMTEwLwYDVQQD
EyhiZTA0OGQ1N2I4ODAxOWJhYTM1MGU2YTYzYzFiZWI1NTAxZGY4YTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9yTzNAlkUZcsAJIIK/ST3HRboeg
WDIBZIxKZ4Gmgh2R9kZcDt5sPZc/RC9dtGplO/5CLEZkJh1nXWN2c26KmiV9REIY
mEUR7TSEK/lRxswGle07yKp1tryafF6V3zShh/Dc/aiddLDDpvEaClc7eTRn/o+d
AnAthJj/MWxFiE8UaNnDRzozscCVnPcxXGaQR+i/I6U1QJTEqugJRNANf/7e0ptL
v6UG8GogiWTSwZjkM7LBDPz4eznR9HdB5zVgln8610axibVamIVA1s3QB+evrYaG
wnr8+r6mjeV9HCMUcrCgG/65cvW+fM7JRxEL3aeIN6KTdtKYunq1GpzW/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4EjVe4gBm6o1Dmpjwb61UB34o+MB8GA1UdIwQY
MBaAFOI6dGMKhCTM1fW7D2AiCJRSfXMsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81NDA4OTctZjRiNy00ODQ4LWIwN2It
OTZhYjIxNjk2OTc0LzEvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81NDA4OTctZjRiNy00ODQ4LWIwN2ItOTZhYjIxNjk2OTc0
LzEvNGpwMFl3cUVKTXpWOWJzUFlDSUlsRko5Y3l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/UECt5s
mdg2vpV7tvb9jATk2KmXY1vitd0TyRLJBlEgTpdVoJQP8dptVRpgwTxxQ/kKI+2+
2wX2ZyuAJLTpjT5YNvOINw+q3aJXKMQ4AATBU8YQDCqeCirkr1F9ZZICucNWfCw+
jVLam7MsNYFewU9+RDmyuzDsTfWeOTwLcpcMr6jdTHqF0bQ/ImJvK+d+V9pPf6Q9
hZiaNltG1x+CxCu9TV04QpMUOVvFOKnuc01yKDR7UyNlqtpfu/oWZaAWtfjuOL5y
Go4pw/nqAkhwWbm0eX8cXIoyin2KGBTyHQzjIaoyjUdYF6zZGqH3RfJvaCBJdd7G
IN8bUYaKNMOAGg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:56:22 2026 by rpki-client