Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
File: 4auG-AxLsqxW5B7HokauKWnY01g.mft (raw, json)
Hash identifier: cEfd2UBTm1M3gPD+NgeyeyPEZ7B2m44NaQybXKGJD1c=
Subject key identifier: 23:F4:A7:F5:14:4F:62:3D:EC:3B:BB:0D:30:20:FB:30:9F:06:21:85
Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Certificate serial: 019D9BF5B916AB65AFFC2AA1E117EE628F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
Manifest number: 088C
Signing time: Fri 17 Apr 2026 15:01:05 +0000
Manifest this update: Fri 17 Apr 2026 15:01:05 +0000
Manifest next update: Sat 18 Apr 2026 15:01:05 +0000
Files and hashes: 1: 4auG-AxLsqxW5B7HokauKWnY01g.crl (hash: 5JKhZ9FZJHafgguFVTAW4d4jgW1Cc8yftj2RlL06/RE=)
2: KNOVXoGQsdCxPsZM3zKJ6uFmptI.roa (hash: UiYbuT4DjmIashb94arKXLuitUGRN2TvoEQlDnO6RSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:b9:16:ab:65:af:fc:2a:a1:e1:17:ee:62:8f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Validity
Not Before: Apr 17 15:01:05 2026 GMT
Not After : Apr 18 15:01:05 2026 GMT
Subject: CN=23f4a7f5144f623dec3bbb0d3020fb309f062185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7d:4c:18:f4:2a:85:db:f1:4d:54:f8:e1:3c:
51:3d:f4:da:f5:9e:7d:92:5d:5d:77:8d:4d:2f:2c:
fa:e7:39:2d:74:29:8b:42:5d:f5:a5:1f:8d:81:ac:
d0:05:1e:c0:f0:28:7d:48:1a:67:c2:98:3b:32:1b:
94:0f:a5:48:e4:00:be:fd:ff:3d:05:45:1b:cf:d6:
2f:15:e8:c3:73:3d:fd:e4:78:da:2f:a0:a6:4d:6a:
22:bb:46:b0:6b:e8:bc:91:43:2d:ee:1a:f3:f4:f6:
b2:fb:ac:86:d5:f2:fc:e2:9c:0b:cf:37:8d:58:fd:
f8:69:b0:c2:29:67:ce:80:94:f7:8d:ad:0b:60:04:
0d:54:19:cb:d6:c1:4c:21:c9:be:f8:df:67:28:e9:
53:ed:35:f8:96:4f:96:6b:ab:ca:b5:c0:96:93:b6:
7c:36:16:62:98:b6:40:8a:dc:4f:42:e5:97:54:a6:
a5:a8:92:b2:fb:b5:c6:d5:61:f4:07:54:51:50:30:
b7:cb:dc:87:6d:ee:2e:f0:27:e7:48:5d:22:a0:79:
b1:fb:bd:e3:db:ec:d7:f7:2f:12:30:53:40:7b:0e:
69:de:52:a1:55:f6:f4:b9:a4:ac:3a:73:03:50:75:
86:ce:5b:c6:b5:fd:fe:52:3a:40:b7:61:7c:27:06:
23:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F4:A7:F5:14:4F:62:3D:EC:3B:BB:0D:30:20:FB:30:9F:06:21:85
X509v3 Authority Key Identifier:
keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3e:dd:89:c9:ef:8a:df:15:57:5d:f2:e6:94:ea:0a:d6:ce:
6a:45:ab:88:a5:e3:df:71:81:b1:d4:31:1b:3b:50:21:80:32:
98:0b:2d:8f:f3:49:6b:68:ed:2c:b9:4c:53:00:70:27:0d:27:
97:dd:5b:2f:36:3a:f9:4a:e7:ab:26:69:46:6b:45:dc:d6:6b:
6d:85:83:d5:02:b1:f2:5c:e9:f1:6e:71:ea:d2:56:b0:b4:93:
82:4e:02:88:3e:0a:02:98:3c:84:3c:44:4a:c2:17:7a:be:74:
69:0f:04:08:e8:9b:23:42:f0:8a:0a:11:6d:fd:44:74:81:06:
30:37:2a:c2:ec:b2:e7:a0:0d:e5:a8:4a:d6:38:9d:d6:37:43:
a4:d6:13:96:1c:19:df:56:11:25:a4:54:8e:86:65:33:eb:ea:
b5:14:47:55:d6:b8:f7:0b:58:21:39:f7:c5:60:22:b6:22:52:
ca:34:f4:86:a9:b3:6f:d9:13:13:66:4c:bb:ef:9e:52:08:9b:
5d:1f:bb:9b:26:ed:3f:68:a1:b9:c7:b7:3e:19:27:72:f0:5e:
bd:07:fc:a0:cc:2e:91:fb:95:fe:c5:ab:85:19:a4:ba:ed:4c:
9f:b0:dc:8c:15:e3:0a:1b:e8:6a:c4:ed:51:8a:eb:2d:14:47:
04:98:e6:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9bkWq2Wv/Cqh4RfuYo85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYWI4NmY4MGM0YmIyYWM1NmU0MWVjN2EyNDZhZTI5Njlk
OGQzNTgwHhcNMjYwNDE3MTUwMTA1WhcNMjYwNDE4MTUwMTA1WjAzMTEwLwYDVQQD
EygyM2Y0YTdmNTE0NGY2MjNkZWMzYmJiMGQzMDIwZmIzMDlmMDYyMTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H1MGPQqhdvxTVT44TxRPfTa9Z59
kl1dd41NLyz65zktdCmLQl31pR+NgazQBR7A8Ch9SBpnwpg7MhuUD6VI5AC+/f89
BUUbz9YvFejDcz395HjaL6CmTWoiu0awa+i8kUMt7hrz9Pay+6yG1fL84pwLzzeN
WP34abDCKWfOgJT3ja0LYAQNVBnL1sFMIcm++N9nKOlT7TX4lk+Wa6vKtcCWk7Z8
NhZimLZAitxPQuWXVKalqJKy+7XG1WH0B1RRUDC3y9yHbe4u8CfnSF0ioHmx+73j
2+zX9y8SMFNAew5p3lKhVfb0uaSsOnMDUHWGzlvGtf3+UjpAt2F8JwYjxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCP0p/UUT2I97Du7DTAg+zCfBiGFMB8GA1UdIwQY
MBaAFOGrhvgMS7KsVuQex6JGrilp2NNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMjQwZWItYmFiNC00NWFkLTkzODct
NTE2ZjExYWNiM2FlLzEvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xMjQwZWItYmFiNC00NWFkLTkzODctNTE2ZjExYWNiM2Fl
LzEvNGF1Ry1BeExzcXhXNUI3SG9rYXVLV25ZMDFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlj7dicnv
it8VV13y5pTqCtbOakWriKXj33GBsdQxGztQIYAymAstj/NJa2jtLLlMUwBwJw0n
l91bLzY6+UrnqyZpRmtF3NZrbYWD1QKx8lzp8W5x6tJWsLSTgk4CiD4KApg8hDxE
SsIXer50aQ8ECOibI0LwigoRbf1EdIEGMDcqwuyy56AN5ahK1jid1jdDpNYTlhwZ
31YRJaRUjoZlM+vqtRRHVda49wtYITn3xWAitiJSyjT0hqmzb9kTE2ZMu++eUgib
XR+7mybtP2ihuce3PhkncvBevQf8oMwukfuV/sWrhRmkuu1Mn7DcjBXjChvoasTt
UYrrLRRHBJjmmA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:29 2026 by rpki-client