Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
File: 4N6QuLKkhGwldFi_G_tset6TLss.mft (raw, json)
Hash identifier: fcLxXiqI9ckB/a8jndB/tx7xgw4teQWB3kjfIJBEXS8=
Subject key identifier: 79:9F:B4:EE:BB:95:F6:87:75:83:F0:83:1E:2D:3A:ED:0B:70:0C:63
Authority key identifier: E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB
Certificate issuer: /CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
Certificate serial: 019CAAFD587E56F9634FD8294A1BA231FA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
Manifest number: 053B
Signing time: Sun 01 Mar 2026 20:00:55 +0000
Manifest this update: Sun 01 Mar 2026 20:00:55 +0000
Manifest next update: Mon 02 Mar 2026 20:00:55 +0000
Files and hashes: 1: 4N6QuLKkhGwldFi_G_tset6TLss.crl (hash: 2tR8UsoW5sWa7J1j9SaJnGbk+mHLx5KmA+nHQRxrCcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:58:7e:56:f9:63:4f:d8:29:4a:1b:a2:31:fa:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
Validity
Not Before: Mar 1 20:00:55 2026 GMT
Not After : Mar 2 20:00:55 2026 GMT
Subject: CN=799fb4eebb95f6877583f0831e2d3aed0b700c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:6d:83:1e:3f:40:1e:a9:11:63:7f:85:9c:
80:1c:bd:e3:98:10:fe:e5:c8:ba:9e:4e:3f:96:cf:
a2:c1:10:bf:c4:77:0d:2a:20:aa:69:aa:7f:d0:e3:
2c:66:31:35:b4:68:24:8b:82:dd:12:46:60:e8:a8:
0b:45:cf:15:15:b3:e3:df:11:87:4c:00:60:d4:ee:
4f:7d:cd:2f:70:3a:e5:69:2d:cf:1e:8e:53:3d:2c:
78:e4:b3:30:05:d2:70:b1:26:04:ef:00:8e:d1:1e:
bf:cf:81:63:fc:80:8f:72:c5:da:1a:3c:65:e0:af:
81:df:93:5b:65:16:99:1d:8d:c7:bd:8f:dd:3b:4b:
ea:04:58:f5:d6:68:3d:09:0e:e6:86:99:84:46:a8:
cf:33:66:cb:27:b7:5e:c7:41:95:c7:2a:f5:15:ff:
f5:6f:5e:2c:76:4f:17:24:5f:dd:b6:e1:78:41:11:
53:6d:87:c1:95:a7:60:63:3d:f2:96:e6:ff:17:53:
c6:eb:98:fa:7b:71:12:95:df:55:a9:98:9d:61:56:
45:7a:d2:8f:fb:dc:3d:de:dc:ed:47:df:ce:c2:f2:
22:48:2e:85:2a:83:0e:1c:5e:10:98:0e:2b:d6:50:
90:79:80:8e:62:1d:90:58:74:9a:9d:1a:3e:e4:e8:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9F:B4:EE:BB:95:F6:87:75:83:F0:83:1E:2D:3A:ED:0B:70:0C:63
X509v3 Authority Key Identifier:
keyid:E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e4:3c:f7:3e:96:68:c2:4c:e2:ad:3b:93:5b:b5:c6:1b:6f:
0e:e4:d4:9d:80:0b:22:5e:aa:6c:34:cb:00:58:92:1c:78:7d:
50:96:d8:1b:a1:39:fc:fa:1c:e6:eb:91:47:c1:a9:94:b8:aa:
92:5d:d0:93:6d:9c:13:bf:f1:a4:3c:31:9b:61:c5:cc:24:42:
eb:22:58:d9:40:ab:a2:a0:19:a0:0b:4e:13:fd:35:55:8e:6b:
54:2e:d1:8c:45:a1:6d:ed:21:8e:ab:4a:3b:60:6f:10:61:40:
46:29:f4:e8:8e:72:63:a3:18:2b:34:49:37:e9:af:10:33:db:
3e:f3:dc:d2:f8:c1:3d:e8:b9:0a:7e:6c:97:39:4e:94:b4:d8:
84:e5:3c:4d:ca:f8:4e:1a:2d:93:d0:53:cf:96:1a:a0:a0:9b:
9c:a4:71:6b:a7:d4:3a:b6:a6:a3:f4:c2:76:6b:f7:38:e7:0f:
6a:a6:9a:4d:3d:74:88:92:9d:0c:79:3e:cb:8b:e5:d9:d6:e5:
a4:b0:e0:51:b2:79:bf:1d:99:31:ba:41:6e:1a:64:36:37:33:
a7:e1:bb:4e:fe:3e:f1:22:ed:27:d4:9e:bf:92:18:fe:fc:c5:
cf:9b:9a:34:35:ff:a7:af:62:a8:0f:bf:62:39:84:29:5e:56:
d0:10:45:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Vh+VvljT9gpShuiMfoRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZGU5MGI4YjJhNDg0NmMyNTc0NThiZjFiZmI2YzdhZGU5
MzJlY2IwHhcNMjYwMzAxMjAwMDU1WhcNMjYwMzAyMjAwMDU1WjAzMTEwLwYDVQQD
Eyg3OTlmYjRlZWJiOTVmNjg3NzU4M2YwODMxZTJkM2FlZDBiNzAwYzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gltgx4/QB6pEWN/hZyAHL3jmBD+
5ci6nk4/ls+iwRC/xHcNKiCqaap/0OMsZjE1tGgki4LdEkZg6KgLRc8VFbPj3xGH
TABg1O5Pfc0vcDrlaS3PHo5TPSx45LMwBdJwsSYE7wCO0R6/z4Fj/ICPcsXaGjxl
4K+B35NbZRaZHY3HvY/dO0vqBFj11mg9CQ7mhpmERqjPM2bLJ7dex0GVxyr1Ff/1
b14sdk8XJF/dtuF4QRFTbYfBladgYz3ylub/F1PG65j6e3ESld9VqZidYVZFetKP
+9w93tztR9/OwvIiSC6FKoMOHF4QmA4r1lCQeYCOYh2QWHSanRo+5OhBWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmftO67lfaHdYPwgx4tOu0LcAxjMB8GA1UdIwQY
MBaAFODekLiypIRsJXRYvxv7bHreky7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE42UXVMS2toR3dsZEZpX0dfdHNldDZUTHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iNWQ3NzAtOGUzZS00MmY2LTlmZGMt
NDdkZjRhNTcxZjVhLzEvNE42UXVMS2toR3dsZEZpX0dfdHNldDZUTHNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iNWQ3NzAtOGUzZS00MmY2LTlmZGMtNDdkZjRhNTcxZjVh
LzEvNE42UXVMS2toR3dsZEZpX0dfdHNldDZUTHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUeQ89z6W
aMJM4q07k1u1xhtvDuTUnYALIl6qbDTLAFiSHHh9UJbYG6E5/Poc5uuRR8GplLiq
kl3Qk22cE7/xpDwxm2HFzCRC6yJY2UCroqAZoAtOE/01VY5rVC7RjEWhbe0hjqtK
O2BvEGFARin06I5yY6MYKzRJN+mvEDPbPvPc0vjBPei5Cn5slzlOlLTYhOU8Tcr4
Thotk9BTz5YaoKCbnKRxa6fUOramo/TCdmv3OOcPaqaaTT10iJKdDHk+y4vl2dbl
pLDgUbJ5vx2ZMbpBbhpkNjczp+G7Tv4+8SLtJ9Sev5IY/vzFz5uaNDX/p69iqA+/
YjmEKV5W0BBF5g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:28 2026 by rpki-client