Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: tUd4ru0yhFiAzv2Qfz6PVEBBKQUXTUK24d+akgnVRRE=
Subject key identifier: 6B:D1:E0:F0:EF:B0:49:67:14:38:EF:5B:8E:DF:02:B5:F8:75:91:4B
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 019CAAC6142508FDBC7EBE4ABAFD9127802B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 0B7E
Signing time: Sun 01 Mar 2026 19:00:33 +0000
Manifest this update: Sun 01 Mar 2026 19:00:33 +0000
Manifest next update: Mon 02 Mar 2026 19:00:33 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: e+ZN5pl+Eqie60EJ5H7gEBvdCi28M0LzZrMWkdR8taU=)
2: ErpeCUDkmubemk25x6bhiE8fSGc.roa (hash: TTJUK42mws9XlE8j1BxdD7GShsktqMxOOwmtU5mBiJY=)
3: T0pinHQE9eLRbdmXpvSn-pLDjUA.roa (hash: fpKBkag1Eq814ryw6TGAsVdMfo9isfHsmaeJ5gB+g6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:14:25:08:fd:bc:7e:be:4a:ba:fd:91:27:80:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: Mar 1 19:00:33 2026 GMT
Not After : Mar 2 19:00:33 2026 GMT
Subject: CN=6bd1e0f0efb049671438ef5b8edf02b5f875914b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:18:0e:12:f0:45:2f:e2:7e:9f:44:c3:dc:ea:
1e:39:de:89:e3:ec:cc:8a:67:85:db:ad:23:44:d8:
03:6c:ad:dc:05:4f:f3:0c:17:18:34:1b:4e:22:45:
cd:0f:4b:b6:b6:9a:a3:5f:b0:41:36:23:74:d3:51:
12:b2:ac:43:68:56:21:63:7a:04:23:ea:a3:a4:6b:
e0:e4:91:f4:f2:ff:c9:0a:60:af:67:68:9c:f4:cc:
37:d0:e6:4d:1f:be:f4:27:0e:79:83:a1:d5:59:5c:
f8:fd:99:cb:12:ec:22:35:cf:1f:35:3f:9a:26:2d:
da:df:53:59:e6:3b:8c:b9:79:3f:96:9b:9a:3c:29:
ab:78:80:55:65:e9:ba:61:99:d1:25:7d:3a:7c:f3:
44:02:eb:12:7a:64:a5:7f:96:c1:6e:85:df:dd:e4:
4e:b7:21:a7:b2:4d:6a:3b:7d:3a:3e:a3:24:f3:bf:
1e:4f:82:d1:9a:2d:9b:42:7b:1b:99:c3:9d:9a:15:
89:01:e2:43:b2:da:9a:af:20:b7:99:4d:26:07:b0:
d1:a9:80:87:57:bd:a2:2f:58:34:60:37:3c:c8:ec:
67:c0:5d:79:b9:81:e1:38:2d:c0:93:44:9d:af:c6:
fa:7b:6e:0b:64:bc:4d:3b:df:dd:dd:a4:0f:6b:87:
64:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D1:E0:F0:EF:B0:49:67:14:38:EF:5B:8E:DF:02:B5:F8:75:91:4B
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8e:b7:c3:25:f6:dc:8c:a6:09:0c:75:95:83:ca:c2:a3:39:
44:85:86:d4:c4:b7:d8:67:92:67:58:ab:c4:1a:b0:84:ae:0f:
f1:66:45:a2:d7:87:57:6c:ed:f8:66:41:99:4a:28:1a:3d:d6:
58:af:87:c4:97:b8:a7:ef:c7:0d:77:78:f5:d2:1d:ef:98:be:
2c:83:62:48:40:6a:13:6f:26:50:81:0b:79:a2:05:5a:c2:e6:
a3:a5:86:a6:0b:fd:ef:b8:d4:a3:ab:1b:99:41:f7:51:2a:86:
4d:11:24:07:65:66:06:e1:4f:cd:35:56:b2:a0:b7:d3:e4:51:
10:2c:5e:74:53:d1:52:a7:e2:47:e0:75:77:cd:5c:c7:51:7b:
6d:ef:42:f4:78:48:33:a5:d6:2f:7f:49:5e:03:1f:b1:46:95:
cf:cb:36:d0:eb:fa:e6:2d:24:c5:ba:05:f8:ce:53:22:66:1b:
b7:d7:55:cc:73:52:c2:03:19:42:cf:d1:f4:99:51:58:f8:27:
fb:24:0d:6d:d7:f9:cf:82:69:d3:ff:15:24:1c:35:28:33:3a:
60:6b:ef:48:83:58:73:54:4f:f9:2b:d3:54:ab:9b:36:07:af:
5f:0d:83:61:2e:da:42:b0:97:58:f2:42:08:17:18:63:fe:e3:
ef:b9:da:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxhQlCP28fr5Kuv2RJ4ArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyM2NiN2Q5ZTUyMWU2NDY5ZmQ3ZTJhZDEzNjAzZmI3ZWVi
ZmUwZTAwHhcNMjYwMzAxMTkwMDMzWhcNMjYwMzAyMTkwMDMzWjAzMTEwLwYDVQQD
Eyg2YmQxZTBmMGVmYjA0OTY3MTQzOGVmNWI4ZWRmMDJiNWY4NzU5MTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxgOEvBFL+J+n0TD3OoeOd6J4+zM
imeF260jRNgDbK3cBU/zDBcYNBtOIkXND0u2tpqjX7BBNiN001ESsqxDaFYhY3oE
I+qjpGvg5JH08v/JCmCvZ2ic9Mw30OZNH770Jw55g6HVWVz4/ZnLEuwiNc8fNT+a
Ji3a31NZ5juMuXk/lpuaPCmreIBVZem6YZnRJX06fPNEAusSemSlf5bBboXf3eRO
tyGnsk1qO306PqMk878eT4LRmi2bQnsbmcOdmhWJAeJDstqaryC3mU0mB7DRqYCH
V72iL1g0YDc8yOxnwF15uYHhOC3Ak0Sdr8b6e24LZLxNO9/d3aQPa4dkxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvR4PDvsElnFDjvW47fArX4dZFLMB8GA1UdIwQY
MBaAFOI8t9nlIeZGn9firRNgP7fuv+DgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iMjY5OGMtNjQwOS00NTljLWIwNDYt
ZWE2ZjcwNWQyYzBkLzEvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9iMjY5OGMtNjQwOS00NTljLWIwNDYtZWE2ZjcwNWQyYzBk
LzEvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPI63wyX2
3IymCQx1lYPKwqM5RIWG1MS32GeSZ1irxBqwhK4P8WZFoteHV2zt+GZBmUooGj3W
WK+HxJe4p+/HDXd49dId75i+LINiSEBqE28mUIELeaIFWsLmo6WGpgv977jUo6sb
mUH3USqGTREkB2VmBuFPzTVWsqC30+RRECxedFPRUqfiR+B1d81cx1F7be9C9HhI
M6XWL39JXgMfsUaVz8s20Ov65i0kxboF+M5TImYbt9dVzHNSwgMZQs/R9JlRWPgn
+yQNbdf5z4Jp0/8VJBw1KDM6YGvvSINYc1RP+SvTVKubNgevXw2DYS7aQrCXWPJC
CBcYY/7j77naqA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:31 2026 by rpki-client