Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: wW8j700zhgeUQ1o0/kKs8dwvDxgo2r/eQ/Gqfh7icb4=
Subject key identifier: E7:2C:EE:14:BD:A9:37:2E:40:CC:9C:60:C2:EC:B9:B7:0D:0F:F5:3B
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 019D9962523DF9EB174D4BD480921F53E3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 03:00:50 +0000
Manifest this update: Fri 17 Apr 2026 03:00:50 +0000
Manifest next update: Sat 18 Apr 2026 03:00:50 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: ceXho46K0L8UGHSzKSh9tUtF4eCAKsqVCnf01Wqv1cg=)
2: Z-KRt-a6fFf_5XtERzEP16Ujm4E.roa (hash: UsGPZBKjWrTYFqihznPKPakXtZqMZXtabA/JlRVq59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:52:3d:f9:eb:17:4d:4b:d4:80:92:1f:53:e3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Apr 17 03:00:50 2026 GMT
Not After : Apr 18 03:00:50 2026 GMT
Subject: CN=e72cee14bda9372e40cc9c60c2ecb9b70d0ff53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b9:6d:b6:57:bf:ee:64:2e:52:6f:b6:73:78:
75:bc:01:d2:27:ee:db:b4:c5:98:28:4d:94:f7:b4:
17:e3:3b:8a:17:40:64:a7:3b:8a:8b:49:5c:ea:b9:
c8:e8:f2:ec:1f:28:18:53:ae:7f:02:b4:2a:78:55:
01:e3:7e:cc:dd:e0:a6:62:75:9a:02:d0:54:74:ac:
08:6a:03:0f:b5:78:de:0f:d0:46:84:23:75:d5:9b:
ac:c9:d0:8f:bd:99:7c:ce:8e:d4:54:bc:d6:1e:20:
6e:73:bf:d1:b6:34:07:86:36:70:2e:eb:2e:d5:f6:
c4:e1:b3:a8:5a:21:b6:f0:8e:dc:df:b5:be:d0:84:
38:da:f6:23:30:73:c4:fa:90:59:29:67:70:98:d0:
ea:d4:ac:3c:b0:06:d3:6f:7f:99:b5:66:89:a7:f7:
8b:c3:33:aa:51:30:85:35:8c:64:dc:aa:9a:ec:70:
3d:f6:bf:df:ca:38:72:3e:30:0e:75:4c:d6:b6:7a:
a3:60:c4:b9:a6:46:dd:b7:40:ac:46:54:4a:78:36:
e4:bd:98:33:12:66:e8:4d:ab:9d:b3:ff:23:5c:28:
d2:15:13:6d:ae:0f:e7:cd:ed:1a:bb:62:e9:f7:91:
7a:6f:f0:bf:dc:d0:b9:0c:d6:95:d6:e2:00:18:c4:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:2C:EE:14:BD:A9:37:2E:40:CC:9C:60:C2:EC:B9:B7:0D:0F:F5:3B
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:48:62:ce:66:2e:5c:fc:6c:34:17:ba:d1:81:b4:0b:15:00:
f5:3e:3b:e1:c5:f1:79:70:33:ea:e6:b0:3f:57:d8:37:d7:aa:
f8:97:86:3a:fa:ae:fa:50:60:00:70:46:50:ff:8b:1d:32:76:
0c:2d:51:0e:66:ea:48:34:73:83:16:75:c0:81:30:71:5e:ed:
46:36:7f:34:b5:38:61:08:4e:cb:92:83:e7:51:00:77:23:30:
36:a6:0b:e5:8a:7f:39:c0:83:4b:95:e6:0e:21:7f:32:3d:3b:
f0:54:79:19:7a:fe:c6:57:ad:7e:37:f8:b7:85:19:89:85:43:
fb:1d:29:33:94:c3:8b:1f:cb:2b:1e:b1:7b:fe:06:4a:a9:fd:
7b:14:30:e5:c1:46:b6:b8:6d:d4:47:4a:37:41:a9:0b:09:b8:
53:87:17:01:3b:92:57:00:75:69:bb:79:4f:79:e8:92:2c:0e:
ad:2a:d0:43:95:7e:53:8a:b3:ad:68:24:de:7f:88:bf:14:b0:
e4:b4:26:d3:f3:5a:eb:1a:7f:db:c0:ce:20:d3:d8:9f:98:d7:
f4:86:f6:75:58:32:96:8a:b5:18:6b:84:6a:38:8b:7e:ad:84:
0d:4a:f4:63:22:a4:92:50:14:ed:30:14:0f:90:dd:41:0b:0a:
cb:73:75:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYlI9+esXTUvUgJIfU+PfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZWE1OTM0NjQ4NThlMjkzOTUyMzQ1Y2Y0ZTk3NzkyYzg4
MTEwNTcwHhcNMjYwNDE3MDMwMDUwWhcNMjYwNDE4MDMwMDUwWjAzMTEwLwYDVQQD
EyhlNzJjZWUxNGJkYTkzNzJlNDBjYzljNjBjMmVjYjliNzBkMGZmNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLlttle/7mQuUm+2c3h1vAHSJ+7b
tMWYKE2U97QX4zuKF0BkpzuKi0lc6rnI6PLsHygYU65/ArQqeFUB437M3eCmYnWa
AtBUdKwIagMPtXjeD9BGhCN11ZusydCPvZl8zo7UVLzWHiBuc7/RtjQHhjZwLusu
1fbE4bOoWiG28I7c37W+0IQ42vYjMHPE+pBZKWdwmNDq1Kw8sAbTb3+ZtWaJp/eL
wzOqUTCFNYxk3Kqa7HA99r/fyjhyPjAOdUzWtnqjYMS5pkbdt0CsRlRKeDbkvZgz
EmboTauds/8jXCjSFRNtrg/nze0au2Lp95F6b/C/3NC5DNaV1uIAGMQLXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcs7hS9qTcuQMycYMLsubcND/U7MB8GA1UdIwQY
MBaAFOLqWTRkhY4pOVI0XPTpd5LIgRBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEt
NjJlNGJhZWU0ZmM1LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEtNjJlNGJhZWU0ZmM1
LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkhizmYu
XPxsNBe60YG0CxUA9T474cXxeXAz6uawP1fYN9eq+JeGOvqu+lBgAHBGUP+LHTJ2
DC1RDmbqSDRzgxZ1wIEwcV7tRjZ/NLU4YQhOy5KD51EAdyMwNqYL5Yp/OcCDS5Xm
DiF/Mj078FR5GXr+xletfjf4t4UZiYVD+x0pM5TDix/LKx6xe/4GSqn9exQw5cFG
trht1EdKN0GpCwm4U4cXATuSVwB1abt5T3nokiwOrSrQQ5V+U4qzrWgk3n+IvxSw
5LQm0/Na6xp/28DOINPYn5jX9Ib2dVgyloq1GGuEajiLfq2EDUr0YyKkklAU7TAU
D5DdQQsKy3N1Mw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:04 2026 by rpki-client