Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
File: 4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json)
Hash identifier: sePynf7vRDm9J0Txa9JEq21SuOSFJeigF7e84pti8+4=
Subject key identifier: 29:81:51:B7:4D:69:BC:49:5D:4B:D6:47:29:C6:56:6C:E5:42:90:99
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Certificate issuer: /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial: 019CA8A15F26B09D652842BAB7389492209C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
Manifest number: 0738
Signing time: Sun 01 Mar 2026 09:01:13 +0000
Manifest this update: Sun 01 Mar 2026 09:01:13 +0000
Manifest next update: Mon 02 Mar 2026 09:01:13 +0000
Files and hashes: 1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: jM1HSWQt4j0azBohvZG907mfaCbB65jsv5kHouvMrug=)
2: kJBFWcdH75SmtIn8uA9jCwfUX4o.roa (hash: ysJ0LU5rMa1kB1xrN2ppHOMAzf664V0YwglsAj8KzHs=)
3: wqXxgKLtEKW7BSlepVMRDTpNWM0.asa (hash: hQjKffOZktpgqNZU9Z705S9+cY/2MAGq57iVWSoX52s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:5f:26:b0:9d:65:28:42:ba:b7:38:94:92:20:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Validity
Not Before: Mar 1 09:01:13 2026 GMT
Not After : Mar 2 09:01:13 2026 GMT
Subject: CN=298151b74d69bc495d4bd64729c6566ce5429099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:66:f6:e9:50:42:0f:71:c5:90:9b:02:64:50:
fd:7d:b0:f6:ac:ee:34:0e:71:f1:d2:0e:4d:12:42:
fb:57:a0:b1:af:72:a7:48:92:79:e0:c4:26:33:5c:
61:6a:12:6e:df:11:ed:95:c5:18:5c:ce:25:7d:0e:
28:2b:85:ee:55:6b:71:dd:20:e2:27:c7:ea:74:1b:
6a:ac:b9:09:c1:bc:57:a0:0d:e4:35:93:e1:df:11:
7d:e5:00:56:db:28:b7:cc:77:c4:da:f5:10:de:25:
c6:60:3a:62:3b:73:b1:7d:72:fa:98:5a:10:26:76:
a5:17:b8:b9:f6:14:cc:c2:f2:2a:8b:ce:20:f6:d1:
d1:64:6f:d1:ad:a3:cf:c0:48:5d:50:79:da:6f:00:
68:78:7e:f5:d5:4b:4f:fd:a4:3b:f6:a4:fe:87:c6:
e9:c2:c9:6e:69:ad:d3:df:95:76:1a:ed:e5:7d:d1:
40:60:f2:7b:1b:72:49:0b:62:d7:73:fb:b2:0a:e5:
1a:03:4b:1e:8f:9b:0a:ad:0e:ef:74:f8:51:2f:f2:
11:2d:7a:80:dc:19:b6:1c:f1:64:e8:b3:aa:3f:17:
48:94:07:6e:0d:75:0f:9b:0f:9b:6c:32:81:1b:99:
ab:da:fe:20:44:04:e7:79:02:dc:84:68:c2:a4:a4:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:81:51:B7:4D:69:BC:49:5D:4B:D6:47:29:C6:56:6C:E5:42:90:99
X509v3 Authority Key Identifier:
keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b4:6a:1e:03:6f:43:39:c7:27:99:a5:58:77:4d:8b:a4:ab:
f8:03:22:9c:fd:76:82:db:87:df:35:ad:e2:6e:49:ac:a7:26:
cc:89:3c:f9:33:9e:f8:1d:ec:50:8d:0c:f1:9b:e9:3c:fd:ff:
68:2a:70:88:e9:9d:df:32:05:e8:56:30:bd:6b:60:cf:ac:e4:
5a:68:6f:db:21:55:72:f9:84:80:d5:cf:35:a8:53:7b:f2:0b:
98:ef:87:a5:53:46:0e:83:d7:94:ef:9e:59:7d:23:87:9f:5f:
65:71:17:02:38:8d:4c:15:87:27:e4:7a:5e:91:8c:a7:33:09:
b1:ca:12:0c:b4:93:a6:df:bf:24:4d:87:92:32:8c:eb:f1:37:
fd:62:fb:0b:b9:e4:01:f1:fe:d9:87:b0:5a:fc:8e:fd:30:91:
3b:e5:9e:64:cd:e8:03:fc:cc:1c:9c:24:51:04:bd:02:4f:db:
0a:75:df:66:de:9f:7d:59:4a:30:34:d9:d3:24:55:39:e9:2a:
b0:52:b0:1c:e5:15:87:4e:d3:1e:f3:1b:a1:cb:35:1d:96:91:
ed:e7:7e:f0:70:0b:1f:01:23:35:44:f2:d8:05:18:0b:24:9b:
54:13:9c:1b:87:3d:aa:19:6a:68:1b:61:38:e5:c6:05:9d:9f:
3d:ad:1c:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyooV8msJ1lKEK6tziUkiCcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjM1Mjk2YmQyNjUyZDc1NmI5YzRhMmYwYWNkMmZkZGE3
OTA5N2MwHhcNMjYwMzAxMDkwMTEzWhcNMjYwMzAyMDkwMTEzWjAzMTEwLwYDVQQD
EygyOTgxNTFiNzRkNjliYzQ5NWQ0YmQ2NDcyOWM2NTY2Y2U1NDI5MDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Wb26VBCD3HFkJsCZFD9fbD2rO40
DnHx0g5NEkL7V6Cxr3KnSJJ54MQmM1xhahJu3xHtlcUYXM4lfQ4oK4XuVWtx3SDi
J8fqdBtqrLkJwbxXoA3kNZPh3xF95QBW2yi3zHfE2vUQ3iXGYDpiO3OxfXL6mFoQ
JnalF7i59hTMwvIqi84g9tHRZG/RraPPwEhdUHnabwBoeH711UtP/aQ79qT+h8bp
wsluaa3T35V2Gu3lfdFAYPJ7G3JJC2LXc/uyCuUaA0sej5sKrQ7vdPhRL/IRLXqA
3Bm2HPFk6LOqPxdIlAduDXUPmw+bbDKBG5mr2v4gRATneQLchGjCpKRl5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmBUbdNabxJXUvWRynGVmzlQpCZMB8GA1UdIwQY
MBaAFOPzUpa9JlLXVrnEovCs0v3aeQl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQt
MDU5MDhjNjNiNDVhLzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQtMDU5MDhjNjNiNDVh
LzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7RqHgNv
QznHJ5mlWHdNi6Sr+AMinP12gtuH3zWt4m5JrKcmzIk8+TOe+B3sUI0M8ZvpPP3/
aCpwiOmd3zIF6FYwvWtgz6zkWmhv2yFVcvmEgNXPNahTe/ILmO+HpVNGDoPXlO+e
WX0jh59fZXEXAjiNTBWHJ+R6XpGMpzMJscoSDLSTpt+/JE2HkjKM6/E3/WL7C7nk
AfH+2YewWvyO/TCRO+WeZM3oA/zMHJwkUQS9Ak/bCnXfZt6ffVlKMDTZ0yRVOekq
sFKwHOUVh07THvMbocs1HZaR7ed+8HALHwEjNUTy2AUYCySbVBOcG4c9qhlqaBth
OOXGBZ2fPa0c3A==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:27:16 2026 by rpki-client