Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
File: e4mF-uoIWYwFzDC4LigjBq95MxY.mft (raw, json)
Hash identifier: 4Cm3pA8RX67/gCbjoVzm2V8FNNTIMnO4aUT3LjAr3x4=
Subject key identifier: 92:0D:56:9A:B7:25:46:FA:D6:A5:2A:8D:38:FE:F4:9E:EB:1C:A6:3F
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 019CAAFD46B2199D3DF4F635934D448DB99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
Manifest number: 10E1
Signing time: Sun 01 Mar 2026 20:00:51 +0000
Manifest this update: Sun 01 Mar 2026 20:00:51 +0000
Manifest next update: Mon 02 Mar 2026 20:00:51 +0000
Files and hashes: 1: ctypwi_YKCa3xqtYI5R6ti_6Q04.roa (hash: qrdXq0UfoxpWYAu0rvMx4Tk+4wVIHjFefJvMtTB1BXk=)
2: e4mF-uoIWYwFzDC4LigjBq95MxY.crl (hash: T2jzLb513Y/E8CR6k2gscnE2ugeuxq61NKH9fprW8LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:46:b2:19:9d:3d:f4:f6:35:93:4d:44:8d:b9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: Mar 1 20:00:51 2026 GMT
Not After : Mar 2 20:00:51 2026 GMT
Subject: CN=920d569ab72546fad6a52a8d38fef49eeb1ca63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:e5:b8:a6:11:8e:7c:67:2f:15:35:75:3c:
11:2c:4a:72:90:4a:34:83:fc:51:6b:7c:f2:94:94:
3a:9b:35:db:ba:ff:be:dd:25:54:5c:c2:e8:c6:d9:
19:0c:53:51:61:d7:a3:bb:68:8c:11:92:8d:13:63:
80:c4:fd:81:3f:af:f3:8a:03:48:70:9f:e4:2d:6e:
a7:54:74:df:ec:1d:e5:c8:05:07:5b:3d:88:d6:ac:
20:01:eb:b5:1b:d6:73:76:62:77:7d:88:4c:a2:4b:
0c:07:5b:41:81:76:0c:75:c6:9e:7c:c4:cf:b8:b1:
61:2b:23:b0:fb:99:b9:b9:81:cc:03:13:0f:c7:42:
7f:eb:5d:45:19:0f:5d:54:76:c5:38:8c:5f:17:f2:
c8:a6:76:cb:40:8a:c0:35:14:58:73:69:7d:4e:16:
ff:c0:8e:ce:58:6a:2d:1a:b5:17:0b:79:5b:47:5e:
ae:66:f5:6a:4e:51:fd:2d:a5:fb:2b:e1:6c:23:3b:
f2:87:ea:4b:5f:41:a8:90:f5:93:be:3e:c2:50:3a:
a3:88:54:29:ee:93:a6:7e:70:c0:24:80:df:5a:b1:
37:26:c3:ea:65:df:3b:f9:a8:97:34:0d:f7:1c:7b:
55:d7:32:c3:2f:49:bc:8c:67:48:c0:86:c1:59:b6:
54:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0D:56:9A:B7:25:46:FA:D6:A5:2A:8D:38:FE:F4:9E:EB:1C:A6:3F
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:89:eb:6f:62:4a:dd:89:27:42:4f:98:6d:31:df:cc:6a:5e:
23:c1:55:a8:b4:bd:57:97:8a:de:48:42:1a:e3:13:5c:42:cf:
d6:2f:c0:37:4d:7e:a8:eb:52:8d:d6:ed:20:d4:c9:0e:bf:e5:
7f:35:b4:f4:9b:3e:52:6f:74:7c:b5:b9:b3:13:29:2e:5f:1b:
0e:a7:53:1e:7c:cb:53:e8:15:a6:75:d0:71:ac:32:fa:f6:44:
79:e9:cb:c7:0a:21:1c:b1:cb:3f:ae:7a:1a:93:30:2f:4f:4f:
4b:aa:60:cd:27:0a:45:32:12:06:53:0d:29:53:2d:3a:db:76:
bc:1e:3f:d6:ed:6a:19:09:6e:2e:04:8b:b6:58:f1:93:95:d3:
48:d2:c2:51:f3:1d:f9:8d:8c:86:52:b4:dc:c9:0b:99:31:c3:
c4:52:7e:87:0c:44:ee:20:4c:0e:22:9c:79:5c:78:91:4d:22:
b5:8e:47:c2:80:dd:4f:46:8c:e2:17:ce:d9:fa:84:a5:3c:6d:
f4:3f:16:85:b5:90:eb:17:22:2d:3b:dd:ec:1e:a7:87:35:94:
d7:d8:0e:fc:3d:7b:6d:3f:68:ff:59:12:57:f5:36:b6:d2:52:
42:0a:db:e2:3f:47:63:5e:4a:57:12:f0:8f:f2:a4:b8:12:9d:
9a:ea:6e:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/UayGZ099PY1k01EjbmeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODk4NWZhZWEwODU5OGMwNWNjMzBiODJlMjgyMzA2YWY3
OTMzMTYwHhcNMjYwMzAxMjAwMDUxWhcNMjYwMzAyMjAwMDUxWjAzMTEwLwYDVQQD
Eyg5MjBkNTY5YWI3MjU0NmZhZDZhNTJhOGQzOGZlZjQ5ZWViMWNhNjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlbluKYRjnxnLxU1dTwRLEpykEo0
g/xRa3zylJQ6mzXbuv++3SVUXMLoxtkZDFNRYdeju2iMEZKNE2OAxP2BP6/zigNI
cJ/kLW6nVHTf7B3lyAUHWz2I1qwgAeu1G9ZzdmJ3fYhMoksMB1tBgXYMdcaefMTP
uLFhKyOw+5m5uYHMAxMPx0J/611FGQ9dVHbFOIxfF/LIpnbLQIrANRRYc2l9Thb/
wI7OWGotGrUXC3lbR16uZvVqTlH9LaX7K+FsIzvyh+pLX0GokPWTvj7CUDqjiFQp
7pOmfnDAJIDfWrE3JsPqZd87+aiXNA33HHtV1zLDL0m8jGdIwIbBWbZUtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJINVpq3JUb61qUqjTj+9J7rHKY/MB8GA1UdIwQY
MBaAFHuJhfrqCFmMBcwwuC4oIwaveTMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRtRi11b0lXWXdGekRDNExpZ2pCcTk1TXhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNTliYTEtM2Q1Yi00Mjk5LWE4NTIt
MzdjODZlMzU1MjY3LzEvZTRtRi11b0lXWXdGekRDNExpZ2pCcTk1TXhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lNTliYTEtM2Q1Yi00Mjk5LWE4NTItMzdjODZlMzU1MjY3
LzEvZTRtRi11b0lXWXdGekRDNExpZ2pCcTk1TXhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4nrb2JK
3YknQk+YbTHfzGpeI8FVqLS9V5eK3khCGuMTXELP1i/AN01+qOtSjdbtINTJDr/l
fzW09Js+Um90fLW5sxMpLl8bDqdTHnzLU+gVpnXQcawy+vZEeenLxwohHLHLP656
GpMwL09PS6pgzScKRTISBlMNKVMtOtt2vB4/1u1qGQluLgSLtljxk5XTSNLCUfMd
+Y2MhlK03MkLmTHDxFJ+hwxE7iBMDiKceVx4kU0itY5HwoDdT0aM4hfO2fqEpTxt
9D8WhbWQ6xciLTvd7B6nhzWU19gO/D17bT9o/1kSV/U2ttJSQgrb4j9HY15KVxLw
j/KkuBKdmupuYA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:44 2026 by rpki-client