Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier: y4JAfkQwflQ7ABz8svyMSfeIjhx8D1uH/IFJ+YXuaww=
Subject key identifier: 4B:41:D9:7B:83:03:A2:6C:2E:A8:A5:6B:81:48:39:6C:35:32:06:9B
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial: 019CADC780BA194CC47066AF55BE47A40EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number: 0F2C
Signing time: Mon 02 Mar 2026 09:00:58 +0000
Manifest this update: Mon 02 Mar 2026 09:00:58 +0000
Manifest next update: Tue 03 Mar 2026 09:00:58 +0000
Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: eG4LID4h4wq6KEMu5cJWyQPikyLd91UxEVDOeINTT88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:80:ba:19:4c:c4:70:66:af:55:be:47:a4:0e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Validity
Not Before: Mar 2 09:00:58 2026 GMT
Not After : Mar 3 09:00:58 2026 GMT
Subject: CN=4b41d97b8303a26c2ea8a56b8148396c3532069b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:f6:2c:80:3a:4c:86:4e:0b:ef:52:41:d2:
7d:08:20:58:df:6e:28:26:92:10:0b:1b:a5:66:99:
d5:73:d9:a2:56:93:9f:e3:95:f7:77:97:f9:37:d1:
4c:9b:39:b7:1f:e9:99:9d:43:30:36:39:2e:f2:72:
4e:0e:dd:73:57:c5:99:d3:7e:8e:21:d9:50:65:8d:
53:7d:72:56:9e:5d:67:f6:91:5b:49:af:f2:c1:bd:
29:b9:9a:d5:84:0a:b0:ff:72:81:a2:a1:c8:27:88:
e8:6f:93:40:0d:d8:1e:5f:e0:e8:9e:91:58:1f:55:
94:6d:65:d0:11:42:6e:1d:fd:4e:2f:2b:f6:db:83:
a6:45:9a:37:46:f2:c6:a0:2a:6f:6c:ca:e5:03:7a:
2b:af:eb:c7:79:37:05:57:2d:f2:ec:b1:b7:fa:d2:
c4:e6:e7:f3:cb:46:8e:3e:dd:ee:ba:0b:c5:09:04:
33:f0:ab:64:e6:98:1d:58:33:4e:5d:25:b9:d4:91:
6c:1b:b9:93:17:99:36:83:5d:04:f2:24:2c:1d:48:
c4:45:b0:a6:e1:ee:a8:0f:a4:c8:1e:0b:48:b9:83:
94:69:9a:1b:28:11:c5:39:e3:db:56:05:4a:e8:1b:
c5:44:8a:39:d9:e5:6f:a4:cc:4b:ac:62:5a:32:30:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:41:D9:7B:83:03:A2:6C:2E:A8:A5:6B:81:48:39:6C:35:32:06:9B
X509v3 Authority Key Identifier:
keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5a:a7:f2:ef:7a:ce:58:23:00:6b:af:5d:6e:31:b0:73:b6:
0b:3f:03:98:95:5c:ec:ae:a8:77:b0:9b:5e:20:66:d6:fd:e9:
98:cc:a7:16:f9:3d:0e:9d:af:18:11:a5:c1:3e:55:9b:68:d4:
cb:14:95:88:23:4d:b2:cb:ce:7c:5d:60:c9:48:30:86:1e:5f:
82:44:a3:5c:64:1e:33:8c:98:66:b4:17:04:45:43:3c:e9:db:
09:c2:f7:f8:76:aa:cf:63:95:c2:67:46:5b:35:76:03:66:5b:
1e:f8:c0:f1:d0:5f:94:23:23:67:b4:d0:b1:72:13:cc:c9:c9:
03:9e:f3:6a:d1:49:9b:7f:ad:28:03:4b:cc:35:d2:76:5c:c2:
62:78:7c:67:24:5a:55:83:55:13:af:1a:7f:89:9b:4a:94:02:
b5:13:6d:12:38:da:e9:90:ab:65:5f:6e:06:70:be:64:89:ab:
1b:48:2b:59:9b:b4:88:35:7a:41:0a:ec:0b:a7:4d:bd:7a:ab:
01:c0:86:9e:e0:93:44:79:44:35:d5:82:8a:13:b2:15:5d:6c:
67:48:60:8e:d1:bd:71:04:f1:92:86:96:81:f9:8f:a1:5a:ae:
7d:00:77:af:a6:43:02:ef:91:69:f3:28:a9:01:36:75:c6:df:
3b:bc:4e:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx4C6GUzEcGavVb5HpA7aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMmI3YjMwN2I4Yzk2ZTZjNzdiNWI4YTc4M2ZmNTVlMzc5
MDc2MzYwHhcNMjYwMzAyMDkwMDU4WhcNMjYwMzAzMDkwMDU4WjAzMTEwLwYDVQQD
Eyg0YjQxZDk3YjgzMDNhMjZjMmVhOGE1NmI4MTQ4Mzk2YzM1MzIwNjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNj2LIA6TIZOC+9SQdJ9CCBY324o
JpIQCxulZpnVc9miVpOf45X3d5f5N9FMmzm3H+mZnUMwNjku8nJODt1zV8WZ036O
IdlQZY1TfXJWnl1n9pFbSa/ywb0puZrVhAqw/3KBoqHIJ4job5NADdgeX+DonpFY
H1WUbWXQEUJuHf1OLyv224OmRZo3RvLGoCpvbMrlA3orr+vHeTcFVy3y7LG3+tLE
5ufzy0aOPt3uugvFCQQz8Ktk5pgdWDNOXSW51JFsG7mTF5k2g10E8iQsHUjERbCm
4e6oD6TIHgtIuYOUaZobKBHFOePbVgVK6BvFRIo52eVvpMxLrGJaMjD4QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtB2XuDA6JsLqila4FIOWw1MgabMB8GA1UdIwQY
MBaAFOArezB7jJbmx3tbing/9V43kHY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iNTE4OTAtMjJmMC00NmY3LTk0Zjkt
MjIwZGRiZTJjMDlmLzEvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9iNTE4OTAtMjJmMC00NmY3LTk0ZjktMjIwZGRiZTJjMDlm
LzEvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1qn8u96
zlgjAGuvXW4xsHO2Cz8DmJVc7K6od7CbXiBm1v3pmMynFvk9Dp2vGBGlwT5Vm2jU
yxSViCNNssvOfF1gyUgwhh5fgkSjXGQeM4yYZrQXBEVDPOnbCcL3+Haqz2OVwmdG
WzV2A2ZbHvjA8dBflCMjZ7TQsXITzMnJA57zatFJm3+tKANLzDXSdlzCYnh8ZyRa
VYNVE68af4mbSpQCtRNtEjja6ZCrZV9uBnC+ZImrG0grWZu0iDV6QQrsC6dNvXqr
AcCGnuCTRHlENdWCihOyFV1sZ0hgjtG9cQTxkoaWgfmPoVqufQB3r6ZDAu+RafMo
qQE2dcbfO7xOhw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:16:10 2026 by rpki-client