Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: 3GUHJyy1ii8EDV9Y3FlLFk7Fsvct4DGpDsdEje1ln88=
Subject key identifier: 2F:68:16:04:F8:36:9D:CA:A1:2C:DD:E3:80:4A:EB:21:C6:AC:33:63
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 019CACB54EC72227B937347FDA3FD9623EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 181A
Signing time: Mon 02 Mar 2026 04:01:29 +0000
Manifest this update: Mon 02 Mar 2026 04:01:29 +0000
Manifest next update: Tue 03 Mar 2026 04:01:29 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: GJF/P5lsZSqxvp6ODWbOeaNnZNPFggZl/i0DpkiIqC0=)
2: bfmoXJzoDdpM9K6Axg6RQ6PcK7A.roa (hash: z7weft+bC6v8Gp+CtsE+ZYXb+kZuusFeVfZLKQMSX24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:4e:c7:22:27:b9:37:34:7f:da:3f:d9:62:3e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Mar 2 04:01:29 2026 GMT
Not After : Mar 3 04:01:29 2026 GMT
Subject: CN=2f681604f8369dcaa12cdde3804aeb21c6ac3363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:d7:f6:26:2d:8b:05:e7:0b:08:d0:de:b9:
86:21:d1:9d:a5:0d:06:71:aa:29:54:56:03:af:94:
70:3b:d1:22:38:c2:3b:78:c2:a6:0c:05:40:58:8f:
63:f0:0f:c8:42:07:d8:cd:19:39:9e:6b:f8:23:31:
c0:53:08:83:11:10:55:1f:52:54:06:77:fa:37:a9:
b0:4a:c2:12:87:7a:49:97:22:05:8e:53:1a:8e:b0:
87:29:e4:5c:b4:22:eb:b9:7e:93:13:ef:77:d4:65:
8b:ce:fd:13:2e:46:c9:00:d1:e3:57:66:e1:80:95:
0d:9a:88:d5:55:11:60:cf:3a:bf:d4:37:f0:05:92:
ee:84:84:e3:62:df:aa:1d:e5:16:83:52:be:1d:57:
ee:d3:b8:a0:f3:84:ec:fa:80:fd:6e:2a:dc:cd:4a:
d2:38:14:f0:7a:41:5d:74:60:61:8b:f6:44:de:99:
9a:3f:a7:c5:47:23:35:dd:41:56:20:d8:c8:e1:86:
ef:c4:58:1d:a1:27:ff:76:29:d7:ac:2d:9a:9b:bf:
12:c4:77:02:02:e9:cf:d4:9d:25:4f:3f:94:9f:f4:
b4:3a:16:b3:11:f9:be:3e:a5:8c:11:68:f5:77:33:
bc:85:cb:5f:1a:00:89:1c:b2:95:6c:1b:51:9c:b2:
8c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:68:16:04:F8:36:9D:CA:A1:2C:DD:E3:80:4A:EB:21:C6:AC:33:63
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:55:b4:30:ec:d6:b9:6c:af:6e:fe:03:30:0b:4b:dd:cc:98:
11:ff:e4:dc:be:b7:83:9c:d3:2f:b7:7b:f4:cd:e6:ad:d4:e3:
48:6e:36:67:bc:d5:68:c4:60:96:67:99:a9:a3:5c:df:72:0b:
8f:2f:f2:11:1f:7f:21:f9:4e:7e:aa:47:8f:4a:74:eb:cb:75:
6d:49:c0:95:df:8c:3f:af:f7:d0:85:95:29:b3:00:89:60:29:
f0:24:10:48:0c:1f:7c:79:4b:fc:26:93:e2:95:a6:1f:0e:31:
0d:b8:ad:2b:d2:e1:6b:73:4b:6d:39:20:5f:ef:9c:8b:b6:f4:
98:f4:f9:a1:46:18:95:48:c3:99:f2:2f:2c:5b:5f:d8:23:df:
f2:e4:1b:4d:91:94:f3:68:f4:b0:d5:be:58:a0:69:59:d7:78:
e2:00:51:69:6f:21:57:dd:94:e3:87:dd:0c:c1:f6:c1:01:28:
ed:c1:9d:8b:cb:58:dc:89:20:1a:a3:a8:4c:d7:bd:c2:32:08:
f7:a0:34:8a:ae:29:d5:00:b4:a8:64:81:18:5f:8c:cb:0a:c1:
6c:4b:83:9c:21:a0:11:d5:2e:71:cc:49:3f:d6:ea:6c:08:ae:
b8:f3:95:8f:1b:e4:a3:3a:a8:63:b5:e9:ad:68:a8:d9:ef:48:
cc:bb:55:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystU7HIie5NzR/2j/ZYj7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYmJjNzA2N2Y4YTdjNTdkNjg2ZDY3NWViNDY4ZTk5Yjg2
YmQ2MmQwHhcNMjYwMzAyMDQwMTI5WhcNMjYwMzAzMDQwMTI5WjAzMTEwLwYDVQQD
EygyZjY4MTYwNGY4MzY5ZGNhYTEyY2RkZTM4MDRhZWIyMWM2YWMzMzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1rX9iYtiwXnCwjQ3rmGIdGdpQ0G
caopVFYDr5RwO9EiOMI7eMKmDAVAWI9j8A/IQgfYzRk5nmv4IzHAUwiDERBVH1JU
Bnf6N6mwSsISh3pJlyIFjlMajrCHKeRctCLruX6TE+931GWLzv0TLkbJANHjV2bh
gJUNmojVVRFgzzq/1DfwBZLuhITjYt+qHeUWg1K+HVfu07ig84Ts+oD9birczUrS
OBTwekFddGBhi/ZE3pmaP6fFRyM13UFWINjI4YbvxFgdoSf/dinXrC2am78SxHcC
AunP1J0lTz+Un/S0OhazEfm+PqWMEWj1dzO8hctfGgCJHLKVbBtRnLKMSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9oFgT4Np3KoSzd44BK6yHGrDNjMB8GA1UdIwQY
MBaAFOK7xwZ/inxX1obWdetGjpm4a9YtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yZGFjOGItNzZjZC00MGYwLTg1NGUt
MWRhMmFjYzc2ZTExLzEvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yZGFjOGItNzZjZC00MGYwLTg1NGUtMWRhMmFjYzc2ZTEx
LzEvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFW0MOzW
uWyvbv4DMAtL3cyYEf/k3L63g5zTL7d79M3mrdTjSG42Z7zVaMRglmeZqaNc33IL
jy/yER9/IflOfqpHj0p068t1bUnAld+MP6/30IWVKbMAiWAp8CQQSAwffHlL/CaT
4pWmHw4xDbitK9Lha3NLbTkgX++ci7b0mPT5oUYYlUjDmfIvLFtf2CPf8uQbTZGU
82j0sNW+WKBpWdd44gBRaW8hV92U44fdDMH2wQEo7cGdi8tY3IkgGqOoTNe9wjII
96A0iq4p1QC0qGSBGF+MywrBbEuDnCGgEdUuccxJP9bqbAiuuPOVjxvkozqoY7Xp
rWio2e9IzLtVDg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:56:35 2026 by rpki-client