Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json)
Hash identifier: gQtKYDdRV9XrsO8OEv+JWMWjoQtWlyzMJhQaZN1EiWA=
Subject key identifier: 02:EC:CB:C3:49:DE:AE:10:24:FE:40:67:13:1A:EB:17:9F:DD:2B:74
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial: 019CAB6B0BAE13D47B649A478D81781B689E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
Manifest number: 1157
Signing time: Sun 01 Mar 2026 22:00:45 +0000
Manifest this update: Sun 01 Mar 2026 22:00:45 +0000
Manifest next update: Mon 02 Mar 2026 22:00:45 +0000
Files and hashes: 1: 0549ZLBzM4beeKAOhluORbZXoyA.roa (hash: WowH9si60Z2zpExgKOKJlrVy2XcJuZgBQ4vzt0r71L4=)
2: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: +EaiRf3NThoPQJGD53DEZrWiPBdzs2svybwWBX2kldg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:0b:ae:13:d4:7b:64:9a:47:8d:81:78:1b:68:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Validity
Not Before: Mar 1 22:00:45 2026 GMT
Not After : Mar 2 22:00:45 2026 GMT
Subject: CN=02eccbc349deae1024fe4067131aeb179fdd2b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d1:e2:7b:3b:6b:90:68:f7:e7:e1:0e:68:aa:
60:f3:36:13:a5:61:29:ca:56:69:b1:df:9e:9d:73:
d6:87:01:07:7d:7f:e6:80:9f:c7:2b:f4:61:f5:24:
3d:7e:61:56:91:0b:54:0f:17:bd:f5:37:49:bb:0a:
9b:ae:c9:4e:cb:52:99:d2:88:97:c5:93:41:a7:af:
f1:31:69:70:93:da:9d:25:66:2e:e1:8b:3e:12:b8:
89:9a:dc:c9:92:bf:e3:07:d1:ba:37:51:2b:30:1b:
3d:5e:be:cc:83:63:35:98:d2:b3:f3:4c:29:10:70:
cb:8b:41:f9:0a:cf:f8:6e:59:5a:18:ac:ec:12:00:
55:ec:fb:33:27:c8:f7:e8:af:3e:9c:ab:a2:5a:e1:
6d:d5:ee:36:44:4e:cb:14:bd:aa:27:af:1d:9e:21:
87:0f:88:c2:6a:02:e5:78:ca:da:50:aa:c8:f0:d9:
58:67:97:2d:0a:a5:63:60:e5:ab:2f:a0:6a:59:46:
e5:98:85:bf:b5:ed:f0:ad:98:f8:f3:74:7a:24:2f:
e7:d2:57:cd:c5:66:86:99:73:56:d5:7d:a2:a6:48:
b0:b3:1f:f1:3b:29:72:cb:01:62:e7:65:9e:0c:e0:
04:62:72:ea:30:60:26:78:2b:62:f4:a2:70:c9:f0:
42:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EC:CB:C3:49:DE:AE:10:24:FE:40:67:13:1A:EB:17:9F:DD:2B:74
X509v3 Authority Key Identifier:
keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:02:06:ba:69:2c:b1:01:92:be:a9:f7:4a:a4:5e:d2:d1:32:
f4:1c:0d:06:c8:32:98:23:a1:a2:03:48:13:56:64:df:11:92:
83:cc:88:6b:3f:ee:6f:51:7f:87:7d:b4:92:22:7e:1c:11:31:
1b:55:a0:9b:ee:fb:07:f7:45:8a:dd:38:8d:32:44:3b:5c:ac:
55:27:5b:da:93:11:fd:7e:7a:2f:17:f3:e1:28:74:16:44:91:
58:10:86:33:e7:ee:28:00:e6:88:02:87:94:63:63:34:ca:e0:
da:5b:4f:9b:28:77:4d:27:93:d2:d4:3c:63:b7:ea:58:e7:a7:
b8:a5:86:74:07:9b:f8:03:8d:6a:32:2e:5d:d3:ed:f6:5e:f9:
8c:af:5d:b1:9b:8a:77:1f:4a:40:21:d2:2b:65:fc:ed:13:f4:
7e:84:e3:4f:e4:20:47:97:98:79:65:a0:25:17:d8:0b:38:cb:
3e:75:ee:5d:ad:fd:b0:ab:68:f6:14:6d:63:b3:b5:de:f1:47:
d1:55:ad:32:76:34:ee:53:8e:42:4a:54:ed:67:c6:71:b4:0a:
4f:b9:76:2a:5a:1e:42:9c:37:a6:14:9f:ba:66:7b:d9:d4:ec:
ce:15:4f:ea:26:ab:cb:24:c0:43:83:24:40:92:db:fb:92:3e:
2f:9d:89:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrawuuE9R7ZJpHjYF4G2ieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZGY1ODUyYWY5MDViNDE1ZmRmNTNlMzI4NzZmNTdhNzRk
NmMxZjAwHhcNMjYwMzAxMjIwMDQ1WhcNMjYwMzAyMjIwMDQ1WjAzMTEwLwYDVQQD
EygwMmVjY2JjMzQ5ZGVhZTEwMjRmZTQwNjcxMzFhZWIxNzlmZGQyYjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dHieztrkGj35+EOaKpg8zYTpWEp
ylZpsd+enXPWhwEHfX/mgJ/HK/Rh9SQ9fmFWkQtUDxe99TdJuwqbrslOy1KZ0oiX
xZNBp6/xMWlwk9qdJWYu4Ys+EriJmtzJkr/jB9G6N1ErMBs9Xr7Mg2M1mNKz80wp
EHDLi0H5Cs/4bllaGKzsEgBV7PszJ8j36K8+nKuiWuFt1e42RE7LFL2qJ68dniGH
D4jCagLleMraUKrI8NlYZ5ctCqVjYOWrL6BqWUblmIW/te3wrZj483R6JC/n0lfN
xWaGmXNW1X2ipkiwsx/xOylyywFi52WeDOAEYnLqMGAmeCti9KJwyfBCAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALsy8NJ3q4QJP5AZxMa6xef3St0MB8GA1UdIwQY
MBaAFOHfWFKvkFtBX99T4yh29Xp01sHwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80YzkyMDYtOTVjYi00MzI0LWFiODgt
MWU2NTc3Y2ExNzJkLzEvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80YzkyMDYtOTVjYi00MzI0LWFiODgtMWU2NTc3Y2ExNzJk
LzEvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQIGumks
sQGSvqn3SqRe0tEy9BwNBsgymCOhogNIE1Zk3xGSg8yIaz/ub1F/h320kiJ+HBEx
G1Wgm+77B/dFit04jTJEO1ysVSdb2pMR/X56Lxfz4Sh0FkSRWBCGM+fuKADmiAKH
lGNjNMrg2ltPmyh3TSeT0tQ8Y7fqWOenuKWGdAeb+AONajIuXdPt9l75jK9dsZuK
dx9KQCHSK2X87RP0foTjT+QgR5eYeWWgJRfYCzjLPnXuXa39sKto9hRtY7O13vFH
0VWtMnY07lOOQkpU7WfGcbQKT7l2KloeQpw3phSfumZ72dTszhVP6iaryyTAQ4Mk
QJLb+5I+L52Juw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:28 2026 by rpki-client