Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
File: 4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json)
Hash identifier: MEO4LE26me4VQgA6PrdV3wP6697ebo4hEtIY/gRTo/Q=
Subject key identifier: E3:F4:3D:4B:94:E9:96:13:ED:1A:3A:4B:2B:99:FF:B1:DD:8C:4A:6F
Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
Certificate issuer: /CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Certificate serial: 019CAC0FEF1478B23C9B7E83E33B65C05874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
Manifest number: 05AD
Signing time: Mon 02 Mar 2026 01:00:51 +0000
Manifest this update: Mon 02 Mar 2026 01:00:51 +0000
Manifest next update: Tue 03 Mar 2026 01:00:51 +0000
Files and hashes: 1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: Hmm403Y2SvhVJnPfC9uZkW8Lg6h8Xg8JuS7XZxbBECM=)
2: WoJCGFQyPD7fJgWRXTNxxrmi7IA.roa (hash: rPmZbrV7SIsTdeGu/1qJQQ8AkYuLMStM58OYdp4CW6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ef:14:78:b2:3c:9b:7e:83:e3:3b:65:c0:58:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Validity
Not Before: Mar 2 01:00:51 2026 GMT
Not After : Mar 3 01:00:51 2026 GMT
Subject: CN=e3f43d4b94e99613ed1a3a4b2b99ffb1dd8c4a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:ee:17:17:5e:77:b2:69:c7:50:5d:6f:fa:
93:06:74:87:2b:9e:95:56:90:7f:06:93:22:cb:bd:
be:e0:6c:56:f0:24:16:62:11:9c:5c:e4:26:fa:80:
53:77:fe:8b:8e:ac:78:d7:89:aa:0c:d9:2e:3e:12:
ed:b3:54:c9:d9:36:fe:71:f7:d2:b2:12:19:61:c0:
6e:bb:d0:f5:3f:90:db:89:70:97:1d:c9:57:3a:f3:
1e:08:1c:fb:32:e5:f0:4c:2f:0e:bf:7a:61:3e:89:
56:16:f2:22:4e:54:02:f3:f0:6b:78:33:7c:33:f1:
46:b2:c5:3d:36:98:54:25:9e:34:4a:af:2d:18:a2:
57:c6:0e:27:2d:51:04:68:51:03:7d:d5:f5:f8:37:
60:7c:42:83:e7:b4:1a:a5:55:72:f7:0f:b2:bf:6b:
f9:1d:f9:18:ee:9f:48:04:c9:0e:8b:83:4e:05:2b:
6f:7e:13:39:89:25:6e:96:e6:cf:b4:d0:13:08:1c:
d5:33:75:e0:8b:46:d9:cd:c7:f3:bb:d3:eb:de:f1:
05:4c:0a:7f:b7:90:bb:15:67:cb:aa:64:b1:05:d1:
dd:37:16:e5:e4:aa:ce:2a:4f:08:36:11:fc:27:11:
6e:f4:3f:d7:70:d1:da:fc:bd:fe:66:d0:c7:76:83:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F4:3D:4B:94:E9:96:13:ED:1A:3A:4B:2B:99:FF:B1:DD:8C:4A:6F
X509v3 Authority Key Identifier:
keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9c:6d:60:f7:1a:63:98:38:d5:79:9e:b1:da:9f:b4:6c:1d:
68:30:80:48:f9:ff:dc:a7:f4:d4:c9:22:d1:8f:df:9d:eb:e5:
66:29:40:25:ae:c0:65:69:1f:44:29:64:90:6c:da:31:54:51:
04:87:26:26:ca:42:98:f4:b8:4d:16:08:05:06:f5:86:33:46:
e9:cf:dc:7f:98:97:1c:cf:17:6f:04:08:d1:06:9e:95:2c:63:
63:72:8e:bf:40:aa:cc:27:e9:a9:79:38:f8:26:86:fc:ed:f9:
64:8f:99:d7:37:e1:7b:d9:65:b4:5e:0e:e3:bf:34:0b:13:8e:
85:da:62:8e:0d:a2:2d:14:75:10:c9:f9:30:8f:1c:ca:eb:3a:
e1:66:fc:7e:c5:6c:06:73:10:dd:5a:7a:0e:55:14:e7:6e:e8:
cf:68:6e:99:ca:b5:44:2e:85:e9:05:89:4d:b6:1b:f5:18:12:
7a:68:04:33:ff:cf:79:25:e2:a5:3b:e0:89:e5:fa:58:b2:c5:
40:ef:17:cc:0d:9f:a7:8b:b0:b4:ad:f6:cb:93:f0:63:9a:00:
a7:82:80:77:ac:58:27:99:b8:0c:5e:e2:74:0a:aa:cb:3f:67:
59:6a:2d:57:39:cf:52:0c:b5:4a:b8:e5:fb:8f:cd:56:24:01:
25:f4:55:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD+8UeLI8m36D4ztlwFh0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMTEwNjA2ZjUyNGRiYWE1MzhlNjdlMTIzY2FmYmM2ZGYz
Mzg2YzAwHhcNMjYwMzAyMDEwMDUxWhcNMjYwMzAzMDEwMDUxWjAzMTEwLwYDVQQD
EyhlM2Y0M2Q0Yjk0ZTk5NjEzZWQxYTNhNGIyYjk5ZmZiMWRkOGM0YTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDXuFxded7Jpx1Bdb/qTBnSHK56V
VpB/BpMiy72+4GxW8CQWYhGcXOQm+oBTd/6Ljqx414mqDNkuPhLts1TJ2Tb+cffS
shIZYcBuu9D1P5DbiXCXHclXOvMeCBz7MuXwTC8Ov3phPolWFvIiTlQC8/BreDN8
M/FGssU9NphUJZ40Sq8tGKJXxg4nLVEEaFEDfdX1+DdgfEKD57QapVVy9w+yv2v5
HfkY7p9IBMkOi4NOBStvfhM5iSVulubPtNATCBzVM3Xgi0bZzcfzu9Pr3vEFTAp/
t5C7FWfLqmSxBdHdNxbl5KrOKk8INhH8JxFu9D/XcNHa/L3+ZtDHdoPnwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOP0PUuU6ZYT7Ro6SyuZ/7HdjEpvMB8GA1UdIwQY
MBaAFOARBgb1JNuqU45n4SPK+8bfM4bAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGIt
ZTJjMWFiYWZhYTZjLzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83M2Y3NDktNDU2MC00YWJlLThkMGItZTJjMWFiYWZhYTZj
LzEvNEJFR0J2VWsyNnBUam1maEk4cjd4dDh6aHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpxtYPca
Y5g41XmesdqftGwdaDCASPn/3Kf01Mki0Y/fnevlZilAJa7AZWkfRClkkGzaMVRR
BIcmJspCmPS4TRYIBQb1hjNG6c/cf5iXHM8XbwQI0QaelSxjY3KOv0CqzCfpqXk4
+CaG/O35ZI+Z1zfhe9lltF4O4780CxOOhdpijg2iLRR1EMn5MI8cyus64Wb8fsVs
BnMQ3Vp6DlUU527oz2humcq1RC6F6QWJTbYb9RgSemgEM//PeSXipTvgieX6WLLF
QO8XzA2fp4uwtK32y5PwY5oAp4KAd6xYJ5m4DF7idAqqyz9nWWotVznPUgy1Srjl
+4/NViQBJfRVlQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:03 2026 by rpki-client