Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
File: 4SLitYIzoZPR9yd4Vl1smNdhY6c.mft (raw, json)
Hash identifier: 8xAhKpM4worVO14lKWHBN4QQnJM5fbYi5Zphc9YijMM=
Subject key identifier: 49:A7:5E:0C:2E:B8:D8:3E:07:14:C2:C9:A2:56:A4:35:1A:52:11:8E
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial: 019CA9458BC0D26FC77D392710F1D2427240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
Manifest number: 1424
Signing time: Sun 01 Mar 2026 12:00:33 +0000
Manifest this update: Sun 01 Mar 2026 12:00:33 +0000
Manifest next update: Mon 02 Mar 2026 12:00:33 +0000
Files and hashes: 1: 4SLitYIzoZPR9yd4Vl1smNdhY6c.crl (hash: 3rWYJj8Y66KSOIBxKPoOFua0B2B8di4vxOlU6FW1IZw=)
2: R3kq7Tu6gRsTs905XA3OIx0hnx8.asa (hash: i0v0le2V8KgOYY+tMlhW7yajuhdDrHP/SvNGEb/LiEQ=)
3: XT_1jof6p0-6Rq9yGMKNddmG5gc.roa (hash: zoD4X0KwRY+rISekdKuEzTq6itAQw0dp7xwB+9IQQEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:8b:c0:d2:6f:c7:7d:39:27:10:f1:d2:42:72:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
Validity
Not Before: Mar 1 12:00:33 2026 GMT
Not After : Mar 2 12:00:33 2026 GMT
Subject: CN=49a75e0c2eb8d83e0714c2c9a256a4351a52118e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:26:7d:03:c2:d6:02:55:67:61:71:3b:4b:
d9:04:8b:83:31:14:8b:a4:11:51:27:c6:93:cd:ac:
4a:52:b2:b5:54:c5:16:b9:0d:5a:5b:c4:d6:0f:dc:
89:78:bb:be:19:73:e9:39:0a:ea:c3:76:84:5c:43:
67:af:f0:54:fe:eb:87:5c:71:a3:bc:02:a5:c5:16:
90:d8:00:67:87:8d:e0:ef:5c:d1:f5:fd:0a:4e:a8:
e3:57:d5:cf:b4:08:c8:9e:6d:10:9e:48:80:a4:eb:
e4:6e:ee:4c:39:72:23:77:17:2b:f1:9d:64:1a:16:
e0:71:05:d5:58:16:14:a6:e4:42:bc:d0:44:16:17:
16:bc:2c:f8:5c:a6:8a:d1:98:fa:f3:fc:34:f3:27:
e1:12:4b:6e:52:db:a2:aa:19:b6:bb:c1:51:f8:69:
7c:85:57:47:76:32:4d:0e:df:99:f2:94:4f:09:4a:
96:22:d6:1a:7c:d9:47:91:a7:c1:1b:94:24:c3:08:
2e:91:bb:88:3d:80:04:29:f6:97:a5:47:69:fb:17:
4b:c6:8b:fc:8a:35:ab:10:62:d1:d8:5b:9d:59:a8:
13:71:5c:fa:fc:ab:f3:18:7f:ed:f8:08:c5:f8:9e:
6b:ec:88:06:b5:45:08:07:15:22:4d:0e:1a:1d:38:
40:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A7:5E:0C:2E:B8:D8:3E:07:14:C2:C9:A2:56:A4:35:1A:52:11:8E
X509v3 Authority Key Identifier:
keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4b:14:36:52:0b:96:2d:a2:e8:77:07:52:40:3f:17:60:a4:
82:27:69:68:bd:3b:dc:54:fd:85:4d:ab:61:61:55:5e:94:54:
45:c4:d5:7f:a9:2a:42:9d:87:0a:8d:c5:b1:44:1a:f1:16:b4:
91:14:1e:76:49:91:4c:bd:2a:d4:d2:5e:8d:82:cd:c2:5c:1e:
4f:57:df:94:06:e5:91:a2:25:8c:8d:a9:12:7f:16:b7:95:99:
07:7d:4b:ad:d2:f7:ed:a3:f7:78:fb:52:8c:0d:4a:94:47:44:
58:90:08:44:70:75:8d:1b:01:ac:0b:65:f3:a9:eb:2c:2f:2d:
5a:4b:b5:92:be:d3:ec:00:7f:ae:dc:48:45:0e:e1:b6:5e:5e:
66:ff:25:6f:45:cf:98:2a:49:1d:35:73:9d:91:71:2c:51:93:
12:ec:f4:2e:28:93:a5:eb:4e:91:77:0e:96:1f:30:c4:b1:7c:
e6:63:d4:11:22:76:ab:a9:8a:2e:d7:b3:7a:d6:9d:bd:73:a5:
58:06:05:84:b4:f4:6a:d4:38:54:a7:93:9e:ec:95:4a:95:81:
8e:4b:e9:f9:67:aa:64:8d:1e:60:e8:92:ee:4d:6f:94:33:02:
67:47:b4:9b:b6:7b:c5:2d:c8:f3:ac:ea:1f:48:e1:71:82:e2:
3b:9c:d1:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRYvA0m/HfTknEPHSQnJAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMjJlMmI1ODIzM2ExOTNkMWY3Mjc3ODU2NWQ2Yzk4ZDc2
MTYzYTcwHhcNMjYwMzAxMTIwMDMzWhcNMjYwMzAyMTIwMDMzWjAzMTEwLwYDVQQD
Eyg0OWE3NWUwYzJlYjhkODNlMDcxNGMyYzlhMjU2YTQzNTFhNTIxMThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+EmfQPC1gJVZ2FxO0vZBIuDMRSL
pBFRJ8aTzaxKUrK1VMUWuQ1aW8TWD9yJeLu+GXPpOQrqw3aEXENnr/BU/uuHXHGj
vAKlxRaQ2ABnh43g71zR9f0KTqjjV9XPtAjInm0QnkiApOvkbu5MOXIjdxcr8Z1k
GhbgcQXVWBYUpuRCvNBEFhcWvCz4XKaK0Zj68/w08yfhEktuUtuiqhm2u8FR+Gl8
hVdHdjJNDt+Z8pRPCUqWItYafNlHkafBG5QkwwgukbuIPYAEKfaXpUdp+xdLxov8
ijWrEGLR2FudWagTcVz6/KvzGH/t+AjF+J5r7IgGtUUIBxUiTQ4aHThAowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmnXgwuuNg+BxTCyaJWpDUaUhGOMB8GA1UdIwQY
MBaAFOEi4rWCM6GT0fcneFZdbJjXYWOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFNMaXRZSXpvWlBSOXlkNFZsMXNtTmRoWTZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kODE1ZmQtY2ZhYi00YTRhLTk1OTUt
NDE2NmI3NWIwOGFmLzEvNFNMaXRZSXpvWlBSOXlkNFZsMXNtTmRoWTZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kODE1ZmQtY2ZhYi00YTRhLTk1OTUtNDE2NmI3NWIwOGFm
LzEvNFNMaXRZSXpvWlBSOXlkNFZsMXNtTmRoWTZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaksUNlIL
li2i6HcHUkA/F2CkgidpaL073FT9hU2rYWFVXpRURcTVf6kqQp2HCo3FsUQa8Ra0
kRQedkmRTL0q1NJejYLNwlweT1fflAblkaIljI2pEn8Wt5WZB31LrdL37aP3ePtS
jA1KlEdEWJAIRHB1jRsBrAtl86nrLC8tWku1kr7T7AB/rtxIRQ7htl5eZv8lb0XP
mCpJHTVznZFxLFGTEuz0LiiTpetOkXcOlh8wxLF85mPUESJ2q6mKLtezetadvXOl
WAYFhLT0atQ4VKeTnuyVSpWBjkvp+WeqZI0eYOiS7k1vlDMCZ0e0m7Z7xS3I86zq
H0jhcYLiO5zRcA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:09 2026 by rpki-client