Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier: nbCr1X/Mo284tRd6rFG+3LfjuZcEs4MReGXd5UMnpoo=
Subject key identifier: 31:A3:4A:71:8E:A6:1C:AF:90:E8:F7:4C:54:55:2F:7C:29:33:54:70
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial: 019CACEBEE822853CCCD521C81F878CB5892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number: 13DE
Signing time: Mon 02 Mar 2026 05:01:08 +0000
Manifest this update: Mon 02 Mar 2026 05:01:08 +0000
Manifest next update: Tue 03 Mar 2026 05:01:08 +0000
Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: EIyKU8/AQUWETeWEiFRh3acyvDLroDDP3ECRJSL9k9g=)
2: Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa (hash: QNb3CvjoOXufsYPkEn/ZOrzMSuEn5o0O6f8GFs+m4Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ee:82:28:53:cc:cd:52:1c:81:f8:78:cb:58:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Validity
Not Before: Mar 2 05:01:08 2026 GMT
Not After : Mar 3 05:01:08 2026 GMT
Subject: CN=31a34a718ea61caf90e8f74c54552f7c29335470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:d7:27:6d:a7:1d:ad:dc:00:75:4f:58:c3:
59:df:aa:fb:c5:6a:37:6b:bf:3c:4a:ff:a3:c9:40:
ce:c6:68:67:44:35:c5:bc:b4:50:58:68:ee:42:d1:
e8:74:13:51:ee:9e:2d:e5:35:7b:d2:60:43:56:ed:
31:1c:09:11:25:de:3c:1e:83:df:9a:aa:cd:60:59:
e5:dc:4a:a4:ef:7f:8b:93:93:36:d8:dd:76:f8:b3:
04:81:37:6d:c2:50:d3:de:02:a2:4e:4b:49:b8:08:
9b:05:79:0e:62:05:3c:cf:cf:3a:28:b0:36:7b:18:
cd:7c:36:55:ec:43:d6:2c:35:ad:6e:9d:e0:62:10:
cd:f2:7d:5c:51:42:53:c9:43:08:10:16:08:c5:24:
24:95:4b:ea:57:e0:2c:f6:1d:c2:25:cc:9c:dc:66:
ac:07:63:bb:dc:21:68:13:fd:34:7b:4a:b5:fe:95:
2f:7d:ab:3c:d4:66:58:01:fd:b9:f0:cf:53:59:91:
26:63:55:f7:d0:0d:8f:35:d1:a8:b7:41:e1:c1:74:
e1:52:54:db:b7:1b:14:c6:4f:e9:07:9a:81:06:92:
75:be:ed:3d:4a:59:86:e4:3c:38:0d:46:68:18:e3:
21:af:be:ca:22:2b:8c:89:51:67:99:8d:be:ec:9c:
15:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A3:4A:71:8E:A6:1C:AF:90:E8:F7:4C:54:55:2F:7C:29:33:54:70
X509v3 Authority Key Identifier:
keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:02:a0:a3:f1:a0:6d:ce:ba:6a:46:27:3e:26:b6:d9:dc:f2:
d5:fa:bd:e8:2e:20:49:25:44:77:26:f1:d0:16:88:65:de:40:
1b:f4:b7:6e:8d:ff:4d:8e:39:bc:40:bb:38:01:e3:a2:be:29:
98:8f:3e:f8:86:5f:d0:26:96:df:02:68:86:b1:f5:2d:f0:e6:
dd:c3:af:b8:cb:08:bf:d5:c3:88:1c:8c:8a:76:a6:a5:6a:d6:
0a:91:f2:a9:32:d1:f8:68:7c:f7:2b:2c:e4:ab:b4:4f:97:73:
0f:0a:df:39:45:4f:37:0d:ef:66:ea:09:5a:40:77:bf:38:19:
56:df:25:ce:22:05:9a:a0:dd:fe:1d:a9:0f:ff:f2:77:1f:9b:
32:d6:78:94:1a:4d:7f:bb:28:8f:41:d2:95:f7:e0:d0:a3:92:
ab:fd:e0:fb:bc:42:c8:06:d3:cb:85:8b:1d:f9:dd:42:4a:43:
76:a0:0a:0e:ec:fe:ef:bb:d6:05:96:95:5a:2e:4b:8c:f0:57:
c8:0d:87:eb:7c:99:d6:b6:a9:6a:9c:8c:55:77:58:0c:0e:61:
13:a9:2c:54:16:97:24:0a:f3:c9:53:4c:da:e8:72:01:14:b0:
c4:ef:a4:69:cb:82:fa:2c:b7:59:de:1f:ff:88:e8:ef:f8:3b:
70:28:4e:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys6+6CKFPMzVIcgfh4y1iSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMmE5M2NlYjgyYjY3NWE4NGIwZDc4ZTc5YWU0YTc5N2Nh
OTgyMzEwHhcNMjYwMzAyMDUwMTA4WhcNMjYwMzAzMDUwMTA4WjAzMTEwLwYDVQQD
EygzMWEzNGE3MThlYTYxY2FmOTBlOGY3NGM1NDU1MmY3YzI5MzM1NDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5TXJ22nHa3cAHVPWMNZ36r7xWo3
a788Sv+jyUDOxmhnRDXFvLRQWGjuQtHodBNR7p4t5TV70mBDVu0xHAkRJd48HoPf
mqrNYFnl3Eqk73+Lk5M22N12+LMEgTdtwlDT3gKiTktJuAibBXkOYgU8z886KLA2
exjNfDZV7EPWLDWtbp3gYhDN8n1cUUJTyUMIEBYIxSQklUvqV+As9h3CJcyc3Gas
B2O73CFoE/00e0q1/pUvfas81GZYAf258M9TWZEmY1X30A2PNdGot0HhwXThUlTb
txsUxk/pB5qBBpJ1vu09SlmG5Dw4DUZoGOMhr77KIiuMiVFnmY2+7JwVpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGjSnGOphyvkOj3TFRVL3wpM1RwMB8GA1UdIwQY
MBaAFOIqk864K2dahLDXjnmuSnl8qYIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAt
ODQzMTU0YTgwYjcyLzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yZTgyY2ItNGE2ZS00MDhmLWFmMjAtODQzMTU0YTgwYjcy
LzEvNGlxVHpyZ3JaMXFFc05lT2VhNUtlWHlwZ2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQKgo/Gg
bc66akYnPia22dzy1fq96C4gSSVEdybx0BaIZd5AG/S3bo3/TY45vEC7OAHjor4p
mI8++IZf0CaW3wJohrH1LfDm3cOvuMsIv9XDiByMinampWrWCpHyqTLR+Gh89yss
5Ku0T5dzDwrfOUVPNw3vZuoJWkB3vzgZVt8lziIFmqDd/h2pD//ydx+bMtZ4lBpN
f7soj0HSlffg0KOSq/3g+7xCyAbTy4WLHfndQkpDdqAKDuz+77vWBZaVWi5LjPBX
yA2H63yZ1rapapyMVXdYDA5hE6ksVBaXJArzyVNM2uhyARSwxO+kacuC+iy3Wd4f
/4jo7/g7cChOMQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:22 2026 by rpki-client