Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier: 9FNJ0LdGgj+Ikpiq+Ko5q71sEf6xCKEuDuXw0FbwAwA=
Subject key identifier: D5:08:ED:14:EE:46:5C:44:1A:63:6D:36:A5:65:40:D8:F8:6A:1F:2F
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 019CAA591B03E1D8BA4D7CA88631C74E5CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number: 1784
Signing time: Sun 01 Mar 2026 17:01:32 +0000
Manifest this update: Sun 01 Mar 2026 17:01:32 +0000
Manifest next update: Mon 02 Mar 2026 17:01:32 +0000
Files and hashes: 1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: hyD8+XUqPV9a1RvYFFBSv+tqYIOdaD1iLaEDsIMjZAY=)
2: pZ2DG9liFeCKNbzetKHvN52UJO0.roa (hash: ngpoJdoTiDK1ogZAlMttmztrBQw9vwYksg/OwsA6X2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:1b:03:e1:d8:ba:4d:7c:a8:86:31:c7:4e:5c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Mar 1 17:01:32 2026 GMT
Not After : Mar 2 17:01:32 2026 GMT
Subject: CN=d508ed14ee465c441a636d36a56540d8f86a1f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f0:0d:aa:69:80:96:f6:d9:06:f0:b2:31:29:
0f:0a:20:f2:7e:a5:15:45:fb:f0:62:e9:fb:89:df:
df:bc:c4:67:4e:1e:29:41:c2:76:90:3c:b0:60:0f:
69:7e:2d:53:ac:7d:05:2e:be:49:6c:a7:26:cf:f8:
bb:7d:5e:13:63:1e:82:60:84:60:b5:b4:92:b0:e3:
f1:b5:dd:9e:ba:de:3a:2f:78:3a:e3:2d:b3:97:8e:
c9:f5:ca:6f:61:fb:f8:4e:3b:d6:78:3d:b3:bb:af:
9b:35:5a:a5:91:38:d5:85:83:43:00:5a:a9:e4:30:
d8:e8:c0:6f:db:df:3d:cc:5b:43:e4:0a:dd:9f:91:
32:2d:e4:3e:48:31:79:af:f5:ec:51:ca:74:84:cb:
42:11:1e:9f:a1:b3:0d:bd:6b:4d:cb:03:36:f6:dc:
2d:c1:2b:7a:eb:2b:7b:c1:14:3c:3e:d3:8d:fd:5c:
00:7a:c9:d2:e9:ee:b5:3f:f0:60:f0:bc:27:f2:db:
99:19:a4:b5:2e:1b:3d:15:29:b2:bd:1c:30:79:8d:
1d:1d:92:76:0b:88:e1:4f:10:06:97:5f:78:35:85:
73:1e:8f:d7:ab:db:e0:a1:54:4e:c6:0a:77:6d:d2:
ac:05:c4:2f:3f:e2:48:2e:5d:ee:f2:02:1c:43:26:
2e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:08:ED:14:EE:46:5C:44:1A:63:6D:36:A5:65:40:D8:F8:6A:1F:2F
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:89:ad:80:4a:b0:e5:40:21:a0:c1:f0:2d:8e:67:d1:aa:d0:
bc:6a:fc:89:86:d7:23:2b:ff:e8:fd:9b:1e:3a:0c:7e:69:f1:
b8:88:79:bb:f7:26:fe:09:4e:23:a4:94:0d:7f:97:93:0b:60:
59:98:d1:27:7f:2f:06:7f:e3:3d:be:79:46:72:91:46:c6:d5:
03:15:63:34:9a:73:ee:50:22:dd:07:9c:e3:88:83:b0:32:44:
53:91:27:7c:90:9c:33:18:4f:07:54:34:3d:54:9e:7b:fc:c5:
98:ea:d4:08:a1:9b:bd:71:ab:74:62:be:c8:10:a4:0e:b2:3a:
82:54:61:70:4e:3a:d8:b7:22:37:2e:96:2a:23:3f:10:86:3b:
9b:b5:00:8a:a5:ea:e6:e4:db:69:a3:b0:c5:d8:3b:13:f2:b6:
4a:a4:63:1e:5c:4b:6e:73:b4:19:24:f2:a9:47:3a:1a:c1:5b:
55:3d:73:c4:1f:6c:f2:e1:96:a0:bf:55:45:b7:bc:c3:7b:b6:
96:73:58:d6:7e:0c:91:ae:11:1c:50:72:a9:be:aa:93:e8:30:
a1:0b:36:bd:05:e0:17:92:2f:9a:3d:e2:2c:ab:30:37:28:82:
da:85:51:87:a5:30:8e:46:a1:66:bb:14:a7:4e:e2:b5:2a:7c:
20:0b:f7:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWRsD4di6TXyohjHHTlz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjlhM2NlMGY1OTM5MTA4MTljMzI3MWUxZThkMGJkMTM3
MWE2YmUwHhcNMjYwMzAxMTcwMTMyWhcNMjYwMzAyMTcwMTMyWjAzMTEwLwYDVQQD
EyhkNTA4ZWQxNGVlNDY1YzQ0MWE2MzZkMzZhNTY1NDBkOGY4NmExZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fANqmmAlvbZBvCyMSkPCiDyfqUV
RfvwYun7id/fvMRnTh4pQcJ2kDywYA9pfi1TrH0FLr5JbKcmz/i7fV4TYx6CYIRg
tbSSsOPxtd2eut46L3g64y2zl47J9cpvYfv4TjvWeD2zu6+bNVqlkTjVhYNDAFqp
5DDY6MBv2989zFtD5Ardn5EyLeQ+SDF5r/XsUcp0hMtCER6fobMNvWtNywM29twt
wSt66yt7wRQ8PtON/VwAesnS6e61P/Bg8Lwn8tuZGaS1Lhs9FSmyvRwweY0dHZJ2
C4jhTxAGl194NYVzHo/Xq9vgoVROxgp3bdKsBcQvP+JILl3u8gIcQyYuQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUI7RTuRlxEGmNtNqVlQNj4ah8vMB8GA1UdIwQY
MBaAFOG5o84PWTkQgZwyceHo0L0Tcaa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTIt
YmE0YzU2ZDhjMGNlLzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTItYmE0YzU2ZDhjMGNl
LzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAImtgEqw
5UAhoMHwLY5n0arQvGr8iYbXIyv/6P2bHjoMfmnxuIh5u/cm/glOI6SUDX+Xkwtg
WZjRJ38vBn/jPb55RnKRRsbVAxVjNJpz7lAi3Qec44iDsDJEU5EnfJCcMxhPB1Q0
PVSee/zFmOrUCKGbvXGrdGK+yBCkDrI6glRhcE462LciNy6WKiM/EIY7m7UAiqXq
5uTbaaOwxdg7E/K2SqRjHlxLbnO0GSTyqUc6GsFbVT1zxB9s8uGWoL9VRbe8w3u2
lnNY1n4Mka4RHFByqb6qk+gwoQs2vQXgF5Ivmj3iLKswNyiC2oVRh6UwjkahZrsU
p07itSp8IAv3tw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:34 2026 by rpki-client