Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier: qa3wjvxrZT7UpwZafm0W/3EaXlMe6GqSunmZLThWehw=
Subject key identifier: 24:D5:BD:DB:7A:BA:FF:DD:4A:A4:5E:12:37:6A:D9:EF:94:8A:8D:D9
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 019CA9B38988B2FB9474F96AE5FA0934222D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number: 079F
Signing time: Sun 01 Mar 2026 14:00:41 +0000
Manifest this update: Sun 01 Mar 2026 14:00:41 +0000
Manifest next update: Mon 02 Mar 2026 14:00:41 +0000
Files and hashes: 1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: p5S+X4s7oDvaZohWH250/+F2mDt7Afc6aVP8YJXUGXo=)
2: NyZecqDxZWfaHCuoM0IhIFWnpqg.roa (hash: iqpBZxFEqsIO8elb98oBs7HFDqASdANh9B/9XR18vAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:89:88:b2:fb:94:74:f9:6a:e5:fa:09:34:22:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Mar 1 14:00:41 2026 GMT
Not After : Mar 2 14:00:41 2026 GMT
Subject: CN=24d5bddb7abaffdd4aa45e12376ad9ef948a8dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:a5:77:1b:89:29:94:b1:b0:5c:ec:8a:6e:
3a:36:59:2e:94:9b:bc:e7:18:46:52:07:a0:13:d4:
46:df:6d:ac:9b:6e:9e:2d:ec:f0:05:92:85:35:4e:
d0:8b:11:ab:71:27:dc:fd:e1:a4:33:e3:31:a2:48:
65:95:a2:f7:42:65:3d:6e:6a:e5:18:d1:3e:40:fb:
a0:ef:28:02:73:62:c1:ff:ff:5c:1e:66:97:12:24:
a7:6f:eb:61:1e:cc:19:ef:6d:f0:b1:dc:6d:a2:74:
f5:6b:ae:46:46:f5:bd:ad:0c:ab:51:bc:18:85:44:
f5:b4:3a:4d:9e:01:b4:6c:a6:9a:c4:89:78:3b:5c:
6d:45:9b:91:73:63:4f:05:a3:96:57:73:09:61:5e:
24:47:7c:aa:7a:cb:05:ae:60:61:13:9f:df:ae:f3:
68:0a:75:9d:65:69:6d:c3:f1:a1:0d:ae:f0:d4:de:
e9:d8:19:81:ee:cf:e2:9b:ed:a3:30:07:72:ec:8f:
2f:f7:7f:b0:81:f5:84:df:51:d9:f9:06:87:7b:19:
8c:55:3e:b4:f2:69:4b:a2:67:69:d0:6f:59:ac:33:
b3:ee:cf:ba:00:20:a5:75:46:33:d1:23:27:56:45:
7c:2f:2b:5f:b8:8b:b6:71:51:60:01:d4:7a:54:85:
02:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D5:BD:DB:7A:BA:FF:DD:4A:A4:5E:12:37:6A:D9:EF:94:8A:8D:D9
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1b:22:4e:e1:50:9d:7e:45:9b:b5:08:2c:ff:58:80:3c:f6:
b8:b9:36:4e:16:21:4f:a2:f7:ef:cd:45:52:b5:4b:91:75:5d:
a4:6a:cf:d2:c4:79:9c:34:a2:51:9e:9f:d0:d8:08:d2:25:69:
1f:36:14:79:99:44:2f:09:a6:41:09:13:ae:f6:a9:f1:48:cd:
bf:0f:8e:96:d3:35:ea:5f:51:1a:68:ad:7d:79:4a:01:54:90:
f5:a7:d1:bd:1e:bd:b9:20:9d:c8:b0:1b:9f:9d:ca:57:ea:b4:
74:5e:7b:54:4f:d1:4a:2e:7e:fe:c7:0b:ae:33:c9:19:4e:e6:
34:f3:61:d7:fc:a8:fc:a5:2e:e0:15:c6:52:b5:7b:73:c5:d8:
da:3d:60:a4:77:9b:47:3b:90:55:44:57:63:da:4c:79:cd:ce:
b7:ad:66:34:79:81:36:09:9e:b2:8a:40:e2:89:fd:52:43:9e:
be:42:c3:90:50:23:40:3f:9c:bc:c8:ad:7c:73:ec:41:82:b0:
f4:5a:42:cb:ad:4c:c2:e6:a0:d0:99:4f:97:b7:7a:a2:4c:45:
6b:74:31:c5:ed:ce:d7:9c:fc:8f:25:a5:f5:1c:6e:0d:80:f5:
e7:c2:aa:33:05:87:1b:40:e4:01:14:86:49:c7:51:55:96:c0:
e3:40:b2:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps4mIsvuUdPlq5foJNCItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyN2UxZGQwNzQ2NjI3ODAzNmJhNWNkOTQzZDdiMGUwMjFj
Zjg2MjgwHhcNMjYwMzAxMTQwMDQxWhcNMjYwMzAyMTQwMDQxWjAzMTEwLwYDVQQD
EygyNGQ1YmRkYjdhYmFmZmRkNGFhNDVlMTIzNzZhZDllZjk0OGE4ZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FeldxuJKZSxsFzsim46NlkulJu8
5xhGUgegE9RG322sm26eLezwBZKFNU7QixGrcSfc/eGkM+MxokhllaL3QmU9bmrl
GNE+QPug7ygCc2LB//9cHmaXEiSnb+thHswZ723wsdxtonT1a65GRvW9rQyrUbwY
hUT1tDpNngG0bKaaxIl4O1xtRZuRc2NPBaOWV3MJYV4kR3yqessFrmBhE5/frvNo
CnWdZWltw/GhDa7w1N7p2BmB7s/im+2jMAdy7I8v93+wgfWE31HZ+QaHexmMVT60
8mlLomdp0G9ZrDOz7s+6ACCldUYz0SMnVkV8LytfuIu2cVFgAdR6VIUCvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTVvdt6uv/dSqReEjdq2e+Uio3ZMB8GA1UdIwQY
MBaAFOJ+HdB0ZieANrpc2UPXsOAhz4YoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDIt
NWVjMzM2YmY3NDNiLzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDItNWVjMzM2YmY3NDNi
LzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxsiTuFQ
nX5Fm7UILP9YgDz2uLk2ThYhT6L3781FUrVLkXVdpGrP0sR5nDSiUZ6f0NgI0iVp
HzYUeZlELwmmQQkTrvap8UjNvw+OltM16l9RGmitfXlKAVSQ9afRvR69uSCdyLAb
n53KV+q0dF57VE/RSi5+/scLrjPJGU7mNPNh1/yo/KUu4BXGUrV7c8XY2j1gpHeb
RzuQVURXY9pMec3Ot61mNHmBNgmesopA4on9UkOevkLDkFAjQD+cvMitfHPsQYKw
9FpCy61Mwuag0JlPl7d6okxFa3Qxxe3O15z8jyWl9RxuDYD158KqMwWHG0DkARSG
ScdRVZbA40Cy4Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:44 2026 by rpki-client