Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: TazMab/7ibJqYDGCoBNCXWQVsrA+S1qLQop1oFyuS7k=
Subject key identifier: 25:3E:A8:47:48:C9:7C:3A:E7:4B:82:54:F9:FD:9C:99:76:8A:A7:00
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 019D9962B0CAEC6FB151B1BAFD5EB2A649C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 0ED9
Signing time: Fri 17 Apr 2026 03:01:14 +0000
Manifest this update: Fri 17 Apr 2026 03:01:14 +0000
Manifest next update: Sat 18 Apr 2026 03:01:14 +0000
Files and hashes: 1: 28qciXJsiY_HinbmOHfVFSyJkQk.roa (hash: UYVCwyOsNlY276CdR8TOzS4Rj720VMSX5696EeMarho=)
2: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: kbnJn9vqoodltKgWCje/ZpQHI3/25bARELXK7WEMPBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:b0:ca:ec:6f:b1:51:b1:ba:fd:5e:b2:a6:49:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Apr 17 03:01:14 2026 GMT
Not After : Apr 18 03:01:14 2026 GMT
Subject: CN=253ea84748c97c3ae74b8254f9fd9c99768aa700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:b3:bc:a6:1a:92:19:6b:c5:2c:2a:c2:99:
ac:ce:4f:88:f1:98:4e:c8:54:e1:61:af:95:fd:ba:
2a:3d:38:c0:30:37:01:d9:a4:d5:c9:ea:23:4c:e9:
1a:1f:91:05:32:b3:a7:f0:e2:99:c0:ff:eb:c7:00:
1e:75:1e:20:4d:97:8e:ad:bf:7f:b4:cb:9f:dd:85:
91:cb:6c:fe:a4:d5:70:8a:7e:6a:65:ac:d5:f2:5d:
62:c1:2d:3b:57:90:11:cf:b6:16:e9:d1:fb:bd:66:
23:09:92:3b:f8:bf:9c:0d:d8:7b:6b:6e:91:81:75:
c3:0d:90:e4:d5:14:0b:6d:48:7e:eb:e0:82:a1:ef:
3d:82:32:07:16:c5:74:ca:f1:74:9b:05:d4:28:93:
b2:c8:72:97:c3:58:f9:7f:fc:e1:0b:7e:a0:b4:79:
d4:19:62:da:83:4a:3b:c6:db:34:cc:e7:2c:65:ea:
79:f5:7a:48:4d:27:01:40:26:2a:e7:cb:22:0e:58:
cf:f6:42:aa:a2:c5:b2:9c:02:67:fe:f6:09:36:d1:
e8:c7:a2:a0:99:ef:33:c7:f7:9d:d4:28:06:a3:12:
22:82:fd:47:6e:bc:fe:2c:9b:09:f7:e4:54:ac:d3:
1a:63:92:a3:0b:27:41:0c:3d:31:87:80:da:06:3d:
1d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3E:A8:47:48:C9:7C:3A:E7:4B:82:54:F9:FD:9C:99:76:8A:A7:00
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:52:69:9b:ee:9c:39:d4:03:c5:71:b4:0e:e1:d5:5c:61:29:
50:d1:d8:c4:30:06:b6:f5:89:3e:a6:11:50:d3:0e:cc:00:56:
bb:3f:bf:fa:d4:7c:cd:6c:da:ee:ff:e0:75:ce:f4:bc:0a:df:
bc:54:2a:49:cc:ca:8c:9b:35:cf:99:db:64:27:15:34:74:5e:
6c:6d:b3:38:ba:25:70:2e:a7:9d:a9:da:6c:85:4e:d9:de:47:
f8:d2:69:f3:58:39:63:99:ed:2d:f2:33:ba:2c:97:87:42:64:
21:19:5f:1a:2b:63:3c:f2:7a:e3:f4:f1:ab:22:3b:e5:56:86:
5d:af:5a:fe:4a:3c:53:3b:65:ba:b5:1a:7f:2d:60:56:36:f5:
32:3a:13:e2:c8:f8:c7:75:73:b7:1e:17:1b:73:db:55:d3:7a:
a7:06:62:db:da:c2:6d:d5:2c:93:64:91:d9:c3:01:94:c0:95:
a8:7f:05:02:b5:cf:87:70:dc:a2:2c:a2:ac:13:59:19:97:27:
8f:69:8c:bc:c1:b4:e5:eb:b4:d2:7a:ea:ce:e9:fe:dc:5a:36:
cf:39:dd:34:20:95:f1:3a:d0:5d:d5:3b:b1:ba:bf:7c:84:e9:
e8:1f:1e:1f:21:c7:3b:56:63:75:dc:61:60:47:8e:62:4c:78:
78:36:66:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYrDK7G+xUbG6/V6ypknHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMzBkZTVmZDNjMjQ1NTE3M2JhNjk2YTk5NDQxZDk2MjBk
ODFkMzgwHhcNMjYwNDE3MDMwMTE0WhcNMjYwNDE4MDMwMTE0WjAzMTEwLwYDVQQD
EygyNTNlYTg0NzQ4Yzk3YzNhZTc0YjgyNTRmOWZkOWM5OTc2OGFhNzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl46zvKYakhlrxSwqwpmszk+I8ZhO
yFThYa+V/boqPTjAMDcB2aTVyeojTOkaH5EFMrOn8OKZwP/rxwAedR4gTZeOrb9/
tMuf3YWRy2z+pNVwin5qZazV8l1iwS07V5ARz7YW6dH7vWYjCZI7+L+cDdh7a26R
gXXDDZDk1RQLbUh+6+CCoe89gjIHFsV0yvF0mwXUKJOyyHKXw1j5f/zhC36gtHnU
GWLag0o7xts0zOcsZep59XpITScBQCYq58siDljP9kKqosWynAJn/vYJNtHox6Kg
me8zx/ed1CgGoxIigv1Hbrz+LJsJ9+RUrNMaY5KjCydBDD0xh4DaBj0d9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCU+qEdIyXw650uCVPn9nJl2iqcAMB8GA1UdIwQY
MBaAFOIw3l/TwkVRc7ppaplEHZYg2B04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDct
ZmI1YzU4MmU0MDk3LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mYWM3ZWQtOTAxOC00NWRiLTg5NDctZmI1YzU4MmU0MDk3
LzEvNGpEZVg5UENSVkZ6dW1scW1VUWRsaURZSFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1Jpm+6c
OdQDxXG0DuHVXGEpUNHYxDAGtvWJPqYRUNMOzABWuz+/+tR8zWza7v/gdc70vArf
vFQqSczKjJs1z5nbZCcVNHRebG2zOLolcC6nnanabIVO2d5H+NJp81g5Y5ntLfIz
uiyXh0JkIRlfGitjPPJ64/TxqyI75VaGXa9a/ko8UztlurUafy1gVjb1MjoT4sj4
x3Vztx4XG3PbVdN6pwZi29rCbdUsk2SR2cMBlMCVqH8FArXPh3DcoiyirBNZGZcn
j2mMvMG05eu00nrqzun+3Fo2zzndNCCV8TrQXdU7sbq/fITp6B8eHyHHO1Zjddxh
YEeOYkx4eDZm/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:51 2026 by rpki-client