Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier: UIPqwyFdkj/9je5YVUVggmNncIKb5IwLg0EEaZsr/9Q=
Subject key identifier: 72:C1:52:F6:85:2C:28:71:65:19:10:E7:94:4A:98:3D:B1:66:69:AE
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial: 019CAB6AEB2FBCB45143A298AA0EE8D06B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:00:36 +0000
Manifest this update: Sun 01 Mar 2026 22:00:36 +0000
Manifest next update: Mon 02 Mar 2026 22:00:36 +0000
Files and hashes: 1: 1_CArV4y8iJiwF-qVbyr6lB9z1M.roa (hash: sgMm20YcGzVkjGjRqisERD3t8QppN0pvoO75EGB83sY=)
2: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: Spmu7vgYxuayhega6r/uqTTAiWcvbr7GQk8/fC8uQSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:eb:2f:bc:b4:51:43:a2:98:aa:0e:e8:d0:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
Validity
Not Before: Mar 1 22:00:36 2026 GMT
Not After : Mar 2 22:00:36 2026 GMT
Subject: CN=72c152f6852c2871651910e7944a983db16669ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:32:f7:f3:8b:05:06:d5:f1:01:05:76:96:
46:66:ff:6f:85:b0:e7:e9:67:5a:74:72:78:d6:a4:
22:60:fd:6f:94:24:77:f5:f8:f2:a8:9c:fc:df:e7:
60:57:e4:4e:83:2e:65:40:24:82:27:ba:a1:69:3f:
37:cc:0d:04:f3:ba:b2:90:da:8c:f2:1f:07:59:e4:
d4:27:ae:40:30:d0:ae:40:ef:b9:1b:55:0c:0f:85:
27:6b:32:1d:e6:95:1e:0b:6b:ca:86:c7:38:e3:22:
67:ef:19:f0:02:3f:d0:6d:96:4d:3e:04:1c:e3:27:
9f:80:e9:14:1a:e3:f1:9a:80:ea:62:54:d9:0a:27:
90:22:3e:45:c1:00:a1:bc:c5:76:ae:32:ea:e1:6e:
65:6c:f1:d3:b9:e0:52:2a:75:f1:bb:8c:17:d8:89:
d0:23:53:6c:cc:5a:1b:70:12:99:be:41:fa:82:fc:
45:ab:51:d6:d7:56:db:8a:6c:04:58:b9:87:ff:fc:
11:55:94:fb:13:bd:37:68:ae:02:87:a0:94:40:6c:
e7:43:13:6a:3e:55:f8:10:d6:c4:53:f3:7b:bd:80:
7b:58:f1:28:4e:32:73:06:2b:55:ec:03:d5:19:f6:
d4:ec:73:bf:b1:d7:61:17:c2:1a:07:4b:ca:a8:b9:
c6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C1:52:F6:85:2C:28:71:65:19:10:E7:94:4A:98:3D:B1:66:69:AE
X509v3 Authority Key Identifier:
keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:25:de:c8:a8:c7:5f:11:a5:e5:41:c6:f0:91:4e:aa:2f:ac:
8f:60:ad:31:78:72:ed:38:0b:76:b3:69:d3:57:e2:e7:18:f5:
83:30:65:19:9b:0d:72:80:44:c5:4c:61:bd:82:a3:33:8e:80:
d5:6e:90:91:a2:ec:9b:27:f3:45:49:32:d9:76:08:30:63:e0:
79:8d:27:c0:3e:26:7f:1c:4f:34:e5:bd:96:18:b2:33:1c:a7:
7b:72:6b:89:0e:cd:68:72:a4:da:32:3f:06:a2:f7:f6:62:0b:
46:9a:16:92:60:53:62:d2:c4:90:4b:58:f0:b3:4f:76:04:4d:
78:c6:e7:36:4d:d1:1d:f6:84:f0:8f:f3:7a:1a:b8:ad:56:52:
7b:6d:47:fa:9b:fc:ad:ae:08:61:b0:b3:3d:68:1a:dd:a0:ef:
51:18:7c:2f:05:16:21:a2:3c:b3:4c:65:e7:17:b4:3c:65:ed:
2a:b7:81:a2:03:54:2b:f2:de:28:62:8d:0e:c9:c0:2d:88:34:
c7:8a:cc:70:cd:b5:c1:f8:15:eb:0b:a9:34:11:a4:37:13:a5:
0f:c8:26:ef:d6:78:43:0d:b1:67:ee:35:a4:60:14:93:f0:a0:
90:d0:8a:48:11:a6:2e:46:ef:f0:65:db:ab:86:f1:91:45:5f:
3d:8f:54:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrausvvLRRQ6KYqg7o0GuAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODk0NWQxZmM3YjQ3MGU2ODczNjU1Zjc1NTkzMDBlMDk3
YTY1ZTgwHhcNMjYwMzAxMjIwMDM2WhcNMjYwMzAyMjIwMDM2WjAzMTEwLwYDVQQD
Eyg3MmMxNTJmNjg1MmMyODcxNjUxOTEwZTc5NDRhOTgzZGIxNjY2OWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+wy9/OLBQbV8QEFdpZGZv9vhbDn
6WdadHJ41qQiYP1vlCR39fjyqJz83+dgV+ROgy5lQCSCJ7qhaT83zA0E87qykNqM
8h8HWeTUJ65AMNCuQO+5G1UMD4UnazId5pUeC2vKhsc44yJn7xnwAj/QbZZNPgQc
4yefgOkUGuPxmoDqYlTZCieQIj5FwQChvMV2rjLq4W5lbPHTueBSKnXxu4wX2InQ
I1NszFobcBKZvkH6gvxFq1HW11bbimwEWLmH//wRVZT7E703aK4Ch6CUQGznQxNq
PlX4ENbEU/N7vYB7WPEoTjJzBitV7APVGfbU7HO/sddhF8IaB0vKqLnGJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLBUvaFLChxZRkQ55RKmD2xZmmuMB8GA1UdIwQY
MBaAFOCJRdH8e0cOaHNlX3VZMA4JemXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wM2EzYmYtMGNmYy00MzBhLTk4NWQt
MjhlNzczZGI5MWMyLzEvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wM2EzYmYtMGNmYy00MzBhLTk4NWQtMjhlNzczZGI5MWMy
LzEvNElsRjBmeDdSdzVvYzJWZmRWa3dEZ2w2WmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeiXeyKjH
XxGl5UHG8JFOqi+sj2CtMXhy7TgLdrNp01fi5xj1gzBlGZsNcoBExUxhvYKjM46A
1W6QkaLsmyfzRUky2XYIMGPgeY0nwD4mfxxPNOW9lhiyMxyne3JriQ7NaHKk2jI/
BqL39mILRpoWkmBTYtLEkEtY8LNPdgRNeMbnNk3RHfaE8I/zehq4rVZSe21H+pv8
ra4IYbCzPWga3aDvURh8LwUWIaI8s0xl5xe0PGXtKreBogNUK/LeKGKNDsnALYg0
x4rMcM21wfgV6wupNBGkNxOlD8gm79Z4Qw2xZ+41pGAUk/CgkNCKSBGmLkbv8GXb
q4bxkUVfPY9Uog==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:09 2026 by rpki-client