Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File: INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier: R7USaERBT5fb/Tz17QiYLVILVoavcgAPuyMdu5b+wNA=
Subject key identifier: 4F:D2:60:42:90:0C:CC:E9:C1:27:51:0C:01:C9:08:F3:91:BE:48:F4
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial: 019CAB345671467746BFAF4AD43655321D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number: 0D8D
Signing time: Sun 01 Mar 2026 21:00:59 +0000
Manifest this update: Sun 01 Mar 2026 21:00:59 +0000
Manifest next update: Mon 02 Mar 2026 21:00:59 +0000
Files and hashes: 1: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: 6VpaXiquUsNVrobR6pyFXs+kRqJpI58T2Kpj31Ry7wA=)
2: QFN1Pmp0QiKx5d3w_NYc2ZWKHEw.roa (hash: Xxu/WKTNsoIWst3QbQSPutJklBpFRyV1E6yTl52XKwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:56:71:46:77:46:bf:af:4a:d4:36:55:32:1d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
Validity
Not Before: Mar 1 21:00:59 2026 GMT
Not After : Mar 2 21:00:59 2026 GMT
Subject: CN=4fd26042900ccce9c127510c01c908f391be48f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:1c:86:17:2f:bd:b3:36:9b:9a:aa:7f:84:
ec:77:fa:e0:4a:a2:06:ab:50:f6:e7:7d:6d:55:8c:
3a:f5:46:52:ec:6f:55:12:a1:41:57:81:c5:0f:7a:
9d:6c:84:d2:53:e3:e3:9a:a6:10:3c:1b:64:f2:e0:
70:dd:22:2a:fb:1d:6f:f2:3b:ed:74:ba:45:78:b2:
1b:aa:2c:7e:81:7c:45:b8:7c:d5:4a:0f:81:b7:62:
63:08:cf:a8:78:fb:74:32:b6:d2:12:5d:25:86:cf:
1a:3e:c6:8a:df:d2:b6:bd:82:f6:43:5b:70:3e:a1:
a9:1c:aa:3c:e8:72:e8:61:55:f9:ce:d1:08:a2:a6:
11:8c:40:ca:c7:42:17:37:11:34:5d:3b:08:b8:a6:
40:44:6b:52:09:8f:f5:ea:a5:20:0b:a7:10:58:2d:
25:ca:5b:da:a7:90:da:fd:42:8f:3e:81:0f:c0:cb:
f3:04:ae:ae:0d:1c:4d:6e:6d:9d:4e:54:25:e6:d6:
d2:db:43:c1:99:f6:88:3b:5e:46:06:0e:dd:0d:2c:
d3:5e:29:29:d0:d9:12:67:3b:d7:31:dd:0d:c3:55:
d2:2c:07:67:87:98:10:17:32:1c:f9:e9:0c:48:37:
e9:c0:b6:d3:88:62:aa:fb:67:92:87:9e:56:4f:8f:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D2:60:42:90:0C:CC:E9:C1:27:51:0C:01:C9:08:F3:91:BE:48:F4
X509v3 Authority Key Identifier:
keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a3:78:9c:78:72:d8:5f:11:a9:7c:cf:3e:73:1b:53:18:5e:
46:cf:54:f3:58:44:b9:21:87:d7:73:a5:2f:3f:63:6e:2e:85:
b0:94:7a:98:dc:53:c4:8a:82:ec:76:27:3c:e6:21:bb:bb:6c:
d4:b0:a2:c6:43:34:e2:61:a8:29:bd:51:3e:58:90:0f:02:7c:
e2:41:0b:e4:20:0b:58:77:06:9a:15:d7:3c:82:16:4b:52:dc:
49:87:32:e5:e3:ee:f3:81:ae:f7:a6:06:f5:16:e6:f0:85:6a:
fb:eb:47:49:8e:cd:b5:73:cd:fa:1d:e3:78:f2:2f:ab:df:4b:
0e:56:97:ae:2c:a7:9b:2a:5f:57:9a:95:9b:76:7f:1e:ac:e2:
7a:83:dd:ec:bd:a7:cb:1c:9f:f4:0e:2a:d8:cf:3b:5a:d2:1d:
f1:c4:59:cf:d4:3b:e4:13:ab:7c:0e:52:b2:48:db:3d:eb:d2:
36:47:35:7c:78:b7:bb:96:ac:41:c1:c7:13:92:39:eb:32:96:
70:97:b8:ef:63:aa:1f:7b:36:01:51:41:34:a7:7d:e1:42:83:
31:56:9c:24:f9:6b:66:96:8e:91:3d:66:36:ff:0b:78:b6:64:
bd:47:09:25:32:0c:7d:1e:f3:99:ce:f0:50:f3:50:0e:44:ca:
37:5d:a4:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNFZxRndGv69K1DZVMh0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDViODQ4M2IxNzEyYjcwMjM1NDEwNTZlNzMwODUzNjZk
MjkzNDYwHhcNMjYwMzAxMjEwMDU5WhcNMjYwMzAyMjEwMDU5WjAzMTEwLwYDVQQD
Eyg0ZmQyNjA0MjkwMGNjY2U5YzEyNzUxMGMwMWM5MDhmMzkxYmU0OGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPAchhcvvbM2m5qqf4Tsd/rgSqIG
q1D2531tVYw69UZS7G9VEqFBV4HFD3qdbITSU+PjmqYQPBtk8uBw3SIq+x1v8jvt
dLpFeLIbqix+gXxFuHzVSg+Bt2JjCM+oePt0MrbSEl0lhs8aPsaK39K2vYL2Q1tw
PqGpHKo86HLoYVX5ztEIoqYRjEDKx0IXNxE0XTsIuKZARGtSCY/16qUgC6cQWC0l
ylvap5Da/UKPPoEPwMvzBK6uDRxNbm2dTlQl5tbS20PBmfaIO15GBg7dDSzTXikp
0NkSZzvXMd0Nw1XSLAdnh5gQFzIc+ekMSDfpwLbTiGKq+2eSh55WT49BWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/SYEKQDMzpwSdRDAHJCPORvkj0MB8GA1UdIwQY
MBaAFCDVuEg7FxK3AjVBBW5zCFNm0pNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEt
MGMyZmY3OTM3ZTZmLzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEtMGMyZmY3OTM3ZTZm
LzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaN4nHhy
2F8RqXzPPnMbUxheRs9U81hEuSGH13OlLz9jbi6FsJR6mNxTxIqC7HYnPOYhu7ts
1LCixkM04mGoKb1RPliQDwJ84kEL5CALWHcGmhXXPIIWS1LcSYcy5ePu84Gu96YG
9Rbm8IVq++tHSY7NtXPN+h3jePIvq99LDlaXriynmypfV5qVm3Z/HqzieoPd7L2n
yxyf9A4q2M87WtId8cRZz9Q75BOrfA5SskjbPevSNkc1fHi3u5asQcHHE5I56zKW
cJe472OqH3s2AVFBNKd94UKDMVacJPlrZpaOkT1mNv8LeLZkvUcJJTIMfR7zmc7w
UPNQDkTKN12ktA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:38 2026 by rpki-client