Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: V51IymDMKubAZKnw/V6h32tAJXGBy4rOZNPdw/GyzJQ=
Subject key identifier: 3E:09:E5:70:1B:EE:F0:C6:D4:F1:6C:B0:EE:D2:02:63:BB:97:CB:E0
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 019CADC7E2B71498E05DD33BC15F78B86061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 09:01:23 +0000
Manifest this update: Mon 02 Mar 2026 09:01:23 +0000
Manifest next update: Tue 03 Mar 2026 09:01:23 +0000
Files and hashes: 1: BvnR5KCMhsoLCz2hSAnbNfkHGk0.roa (hash: hDwrjYY17s8gLiCt6EYouA8sleyAadnkSLPmIcLH8nw=)
2: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: cnGh/zyoy4hNmC+UUHI8JWIjAyckUnLanjvnXNoZuFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:e2:b7:14:98:e0:5d:d3:3b:c1:5f:78:b8:60:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Mar 2 09:01:23 2026 GMT
Not After : Mar 3 09:01:23 2026 GMT
Subject: CN=3e09e5701beef0c6d4f16cb0eed20263bb97cbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:08:32:14:92:6c:28:83:8e:c2:35:eb:e9:
2a:cb:33:63:56:43:bb:3e:7f:09:34:62:74:8e:29:
47:c9:0d:f4:81:68:7b:8f:e2:6a:e6:4c:54:34:87:
db:d2:b9:70:18:81:fc:c0:76:69:9e:83:a7:87:3c:
8e:ef:21:5d:ab:8a:3e:f4:57:94:02:4d:ec:16:19:
27:96:2a:9c:ed:03:a3:85:44:5c:62:c6:f6:5d:18:
c1:bd:f2:cb:05:07:90:67:95:4e:75:a4:dc:36:1f:
58:5a:2f:74:b8:1b:1a:b9:fe:53:2c:5c:42:72:a9:
fd:6f:af:6c:9e:c3:d5:7b:e1:8a:e6:76:0b:22:7d:
49:b7:90:ff:cc:13:87:94:0a:87:5e:2f:c0:d5:a8:
81:44:fb:54:b5:19:27:54:29:db:f9:db:02:91:bc:
c9:7b:81:9b:6c:45:67:c3:5e:3c:84:49:62:c7:39:
70:dd:1b:9d:56:7e:44:9c:11:09:23:7c:29:f4:71:
4b:7b:e0:6e:e6:54:19:2b:4a:d0:13:6c:f5:55:3a:
0b:9a:72:08:b2:d8:fa:2f:9d:45:3e:fe:80:ed:da:
60:7c:29:05:d8:80:17:7c:e1:d8:02:ba:a3:b0:a2:
23:15:64:fd:6b:8d:46:be:2b:7a:4e:74:54:a5:1f:
28:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:09:E5:70:1B:EE:F0:C6:D4:F1:6C:B0:EE:D2:02:63:BB:97:CB:E0
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fa:c6:1b:88:64:ed:67:1d:ed:01:02:29:55:6c:95:bf:45:
e1:af:52:a8:51:eb:bd:96:d0:88:81:97:63:21:c0:72:83:9f:
31:c0:4d:00:98:c1:4e:0b:38:94:b6:4a:cd:d7:73:e7:26:51:
da:86:c3:c2:a6:79:cf:0a:db:25:f3:9e:45:ae:e7:c2:ec:f1:
1d:37:0a:84:98:a7:26:d9:03:03:92:2e:8b:a5:b3:ca:29:dd:
a8:3c:56:63:9c:b7:76:ba:c1:18:cd:bd:03:c8:d3:a6:a0:cc:
9e:e1:94:3b:f2:95:91:6d:09:39:4b:d9:62:18:72:6d:01:f7:
b5:9e:b7:57:bc:4a:b7:8a:86:78:c0:5b:ae:45:4e:1d:dc:42:
8f:a0:0a:c9:40:b6:5e:05:27:0b:b9:2a:b0:ee:a2:29:dd:bd:
1e:a0:8b:04:64:07:93:24:f6:86:f7:38:70:8d:b3:8a:98:8d:
b0:9e:63:e3:16:85:1e:93:23:7a:91:05:b3:88:0e:59:71:ab:
b8:47:2b:f8:73:dd:8b:a8:2f:86:9d:fd:e8:0a:68:bb:8b:98:
be:ea:89:49:0d:4c:f6:8e:5b:1a:78:15:6d:81:f5:dd:a7:66:
a8:85:09:9d:83:fb:41:be:46:19:d2:b1:9e:6b:3d:42:fb:7f:
e4:f0:73:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx+K3FJjgXdM7wV94uGBhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOGNlZDNiMDlhOTA1ZWI5Njg2OWM1OGY2NmI0ZjhiNTkx
NTAzYjAwHhcNMjYwMzAyMDkwMTIzWhcNMjYwMzAzMDkwMTIzWjAzMTEwLwYDVQQD
EygzZTA5ZTU3MDFiZWVmMGM2ZDRmMTZjYjBlZWQyMDI2M2JiOTdjYmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW4IMhSSbCiDjsI16+kqyzNjVkO7
Pn8JNGJ0jilHyQ30gWh7j+Jq5kxUNIfb0rlwGIH8wHZpnoOnhzyO7yFdq4o+9FeU
Ak3sFhknliqc7QOjhURcYsb2XRjBvfLLBQeQZ5VOdaTcNh9YWi90uBsauf5TLFxC
cqn9b69snsPVe+GK5nYLIn1Jt5D/zBOHlAqHXi/A1aiBRPtUtRknVCnb+dsCkbzJ
e4GbbEVnw148hElixzlw3RudVn5EnBEJI3wp9HFLe+Bu5lQZK0rQE2z1VToLmnII
stj6L51FPv6A7dpgfCkF2IAXfOHYArqjsKIjFWT9a41Gvit6TnRUpR8oKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4J5XAb7vDG1PFssO7SAmO7l8vgMB8GA1UdIwQY
MBaAFP+M7TsJqQXrloacWPZrT4tZFQOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMTYwOGQtMDhmMS00YWI1LWE5MjYt
YmU1NjFjY2RlZDJjLzEvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wMTYwOGQtMDhmMS00YWI1LWE5MjYtYmU1NjFjY2RlZDJj
LzEvXzR6dE93bXBCZXVXaHB4WTltdFBpMWtWQTdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvrGG4hk
7Wcd7QECKVVslb9F4a9SqFHrvZbQiIGXYyHAcoOfMcBNAJjBTgs4lLZKzddz5yZR
2obDwqZ5zwrbJfOeRa7nwuzxHTcKhJinJtkDA5Iui6WzyindqDxWY5y3drrBGM29
A8jTpqDMnuGUO/KVkW0JOUvZYhhybQH3tZ63V7xKt4qGeMBbrkVOHdxCj6AKyUC2
XgUnC7kqsO6iKd29HqCLBGQHkyT2hvc4cI2zipiNsJ5j4xaFHpMjepEFs4gOWXGr
uEcr+HPdi6gvhp396Apou4uYvuqJSQ1M9o5bGngVbYH13admqIUJnYP7Qb5GGdKx
nms9Qvt/5PBz4Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:35 2026 by rpki-client