Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
File: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json)
Hash identifier: jibvmvbmsIZAf0LgVp7AeyLevMAJUGOYpOiYClwcQ1k=
Subject key identifier: 66:90:97:15:C6:16:3E:83:DF:76:C7:FF:05:E3:BC:F2:E8:96:9F:EF
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Certificate issuer: /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial: 019CAC4784B9200410E4E2C4B38081C68339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 02:01:34 +0000
Manifest this update: Mon 02 Mar 2026 02:01:34 +0000
Manifest next update: Tue 03 Mar 2026 02:01:34 +0000
Files and hashes: 1: 1OhU1ba4r4lAxG-v3HBo5kpowjY.roa (hash: uhi47WtmC1HtS+uzfaoWnsMLVST1oI2GfXGXB1P0CWo=)
2: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: Dqr5/tjlbJkNeXo+fX+fecIJ0LUSsxT+EPRbrSqFQSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:84:b9:20:04:10:e4:e2:c4:b3:80:81:c6:83:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Validity
Not Before: Mar 2 02:01:34 2026 GMT
Not After : Mar 3 02:01:34 2026 GMT
Subject: CN=66909715c6163e83df76c7ff05e3bcf2e8969fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:b8:c6:ec:15:e7:99:af:f4:05:68:a3:2d:
f2:a8:a5:99:f7:ed:5a:c8:1f:d1:93:fd:e5:cd:a6:
46:10:e1:32:4c:6f:9b:97:b9:e4:ef:0e:23:c6:36:
12:e0:d6:9c:85:f5:38:82:eb:1e:7d:4c:33:df:44:
ef:ef:72:df:53:5f:8a:c4:5e:7f:08:3b:66:6a:02:
b0:f5:7d:30:0e:fe:10:a1:4e:7a:a7:a5:54:0a:f9:
3c:6f:f0:4b:3a:d7:24:9b:4b:c5:e7:bf:00:d7:fd:
11:6b:80:43:96:f4:15:b5:f6:27:11:4a:57:ad:10:
0b:0d:7f:d3:4a:e7:dc:30:8b:a5:53:db:67:1d:c8:
a3:53:e7:2f:46:0a:7d:1f:b0:fa:97:19:d5:a2:f4:
30:e0:3b:c0:70:13:d3:e5:e9:1d:2c:c8:92:bc:63:
5d:51:32:15:7a:17:24:3f:aa:99:89:a1:ae:aa:48:
3c:4b:fe:e5:2b:bf:c5:18:64:ad:7f:ea:56:6f:9c:
4d:3c:0b:e3:3f:77:d4:d3:44:da:f0:5b:8e:e2:b0:
bf:3e:29:05:0a:55:15:97:0f:04:e5:78:0f:27:66:
dd:45:7c:d5:4d:bc:e6:a3:75:75:e0:1a:3d:f5:e4:
c0:c3:65:d1:86:bf:64:df:7c:fb:bc:05:b7:a1:48:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:90:97:15:C6:16:3E:83:DF:76:C7:FF:05:E3:BC:F2:E8:96:9F:EF
X509v3 Authority Key Identifier:
keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fa:62:4f:80:2a:59:85:2f:a1:a0:f1:7f:71:1a:17:9f:fe:
62:cb:ef:be:73:4a:96:74:82:2b:95:a0:4b:01:82:1c:03:6e:
7e:41:ce:a0:58:83:9f:74:97:86:38:2c:b2:2b:92:ee:61:bd:
be:95:84:e1:46:27:97:96:df:cc:5b:96:3a:4a:d3:11:55:de:
7b:09:1c:92:4c:43:d2:d0:04:bb:60:2e:d2:67:1f:9e:f5:f1:
ec:cc:27:1a:44:a1:f7:a9:ba:25:f3:73:e2:96:f0:9a:91:a7:
b1:46:e4:19:83:99:31:b0:45:c0:d4:6a:8c:7f:34:d8:63:0d:
25:d7:e1:bb:71:13:4a:bc:9c:e7:47:8b:6e:04:ab:06:57:48:
90:f2:cf:0e:72:55:83:39:4f:3e:c1:07:d0:a1:39:74:f4:df:
6b:8d:d9:59:34:68:53:50:d1:e5:ad:20:e5:21:4e:6e:29:bc:
55:01:da:24:20:3c:b4:37:10:ca:1f:3f:d0:fc:7e:12:9d:7f:
3b:97:85:67:9b:33:21:3d:cf:10:77:46:70:6a:c5:a0:db:6f:
2f:08:b3:14:3e:fd:c0:5e:a2:6d:03:c1:04:9a:f9:63:ec:63:
58:0a:10:fd:7f:a2:18:fd:b7:a9:4a:12:89:c3:b4:8e:f0:af:
52:c2:4e:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR4S5IAQQ5OLEs4CBxoM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWFiYTNjMmY1NjI4M2NlNWM3NGJjZTQwNTg0NGMxNTkx
YmFiZmMwHhcNMjYwMzAyMDIwMTM0WhcNMjYwMzAzMDIwMTM0WjAzMTEwLwYDVQQD
Eyg2NjkwOTcxNWM2MTYzZTgzZGY3NmM3ZmYwNWUzYmNmMmU4OTY5ZmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoka4xuwV55mv9AVooy3yqKWZ9+1a
yB/Rk/3lzaZGEOEyTG+bl7nk7w4jxjYS4NachfU4gusefUwz30Tv73LfU1+KxF5/
CDtmagKw9X0wDv4QoU56p6VUCvk8b/BLOtckm0vF578A1/0Ra4BDlvQVtfYnEUpX
rRALDX/TSufcMIulU9tnHcijU+cvRgp9H7D6lxnVovQw4DvAcBPT5ekdLMiSvGNd
UTIVehckP6qZiaGuqkg8S/7lK7/FGGStf+pWb5xNPAvjP3fU00Ta8FuO4rC/PikF
ClUVlw8E5XgPJ2bdRXzVTbzmo3V14Bo99eTAw2XRhr9k33z7vAW3oUjWpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaQlxXGFj6D33bH/wXjvPLolp/vMB8GA1UdIwQY
MBaAFOMaujwvVig85cdLzkBYRMFZG6v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgt
NWYyODEzN2E3NjU4LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgtNWYyODEzN2E3NjU4
LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvpiT4Aq
WYUvoaDxf3EaF5/+YsvvvnNKlnSCK5WgSwGCHANufkHOoFiDn3SXhjgssiuS7mG9
vpWE4UYnl5bfzFuWOkrTEVXeewkckkxD0tAEu2Au0mcfnvXx7MwnGkSh96m6JfNz
4pbwmpGnsUbkGYOZMbBFwNRqjH802GMNJdfhu3ETSryc50eLbgSrBldIkPLPDnJV
gzlPPsEH0KE5dPTfa43ZWTRoU1DR5a0g5SFObim8VQHaJCA8tDcQyh8/0Px+Ep1/
O5eFZ5szIT3PEHdGcGrFoNtvLwizFD79wF6ibQPBBJr5Y+xjWAoQ/X+iGP23qUoS
icO0jvCvUsJOEQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:30 2026 by rpki-client