Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: U1mdpv6qpLKX9V51UOJhX8t/plRv8b9XY6nLDWY3GbU=
Subject key identifier: 5D:21:30:0B:76:CC:72:B1:80:D3:6F:57:60:B7:F5:36:D6:9F:77:0B
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 019D9B197F119CA1BE05ADC2FBD454956267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 15D4
Signing time: Fri 17 Apr 2026 11:00:32 +0000
Manifest this update: Fri 17 Apr 2026 11:00:32 +0000
Manifest next update: Sat 18 Apr 2026 11:00:32 +0000
Files and hashes: 1: 1eykC-2BnVsWo7Ye-BCUzkQkUoQ.roa (hash: XORzzia+v0TQle6S3eSeTmbfXijHFXJwl9VwUUmAcRw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: sBeRSUsa47cL7rfOY2cdLmwnOYMJG3bYacIVWhXHTbE=)
3: NJ7RBZaPFrtdiuUdVgaQ-xGvohc.roa (hash: 3elpIcyAaRbsEU++I8EIRcmrePMiDX7Ycf8Xs+7sNy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:7f:11:9c:a1:be:05:ad:c2:fb:d4:54:95:62:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Apr 17 11:00:32 2026 GMT
Not After : Apr 18 11:00:32 2026 GMT
Subject: CN=5d21300b76cc72b180d36f5760b7f536d69f770b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:ae:b0:74:88:ad:14:5f:d7:27:24:d0:26:
d2:87:a0:fb:83:20:7b:63:04:ae:3a:99:45:dd:6d:
15:29:d4:a1:5c:69:de:d7:e6:37:a6:a9:17:f1:0b:
66:3f:9a:e9:d4:0d:8f:c3:cd:01:8f:4d:cc:8a:6d:
fe:65:3e:f4:02:7d:42:64:23:c5:f5:6a:be:d8:61:
3d:67:63:e0:c1:15:82:e7:69:32:c1:fb:7c:49:a1:
8c:c0:b7:bc:67:27:f3:87:21:b8:23:d2:1b:cb:9d:
ed:cf:bb:70:62:45:85:d1:b0:39:5e:8b:73:0e:84:
5e:cc:48:e1:5b:d9:ff:16:f3:be:e7:50:99:12:78:
01:be:d0:0f:56:2a:a9:16:d1:fa:ed:24:db:f8:29:
7e:71:83:09:e8:84:09:51:9a:0a:9b:e7:51:f4:21:
f2:e4:ba:de:bb:85:6b:01:24:99:ff:8c:3a:2b:04:
b9:85:c3:7d:e5:e7:b3:90:13:e7:fa:a2:13:e1:9a:
69:ff:d6:99:8b:1d:c1:03:4f:6f:e1:8b:d9:db:90:
23:05:55:9b:85:e4:ba:5c:ed:b6:81:63:22:ce:1c:
cc:fe:5c:1e:fd:8b:08:7b:8a:8f:3f:84:fc:26:6f:
f4:bd:a0:f1:e9:fc:74:d4:02:ed:0d:31:fe:1f:12:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:21:30:0B:76:CC:72:B1:80:D3:6F:57:60:B7:F5:36:D6:9F:77:0B
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f6:b3:d0:b6:85:f9:fd:1b:ed:82:e0:a8:c4:8d:bd:63:65:
a6:52:0f:0b:2e:3c:0b:46:c2:2f:f3:e3:00:79:2d:b0:87:f5:
e5:d7:17:2b:7d:12:11:cf:e1:d8:89:8f:ae:5e:b2:89:72:7b:
6c:15:13:92:61:70:48:0f:6e:b5:c9:d0:84:44:00:a4:a8:76:
ae:78:78:48:9e:68:e6:5a:57:52:2e:be:cd:93:ee:55:0d:ba:
76:dc:f2:81:7a:4d:9b:a8:57:bd:da:79:6a:47:7f:20:ff:76:
d5:6a:aa:3e:ad:41:16:1b:9d:77:c5:09:a7:e2:ce:4d:e6:2f:
f3:7f:6c:e6:c1:df:13:54:fe:c2:58:78:8d:b6:35:67:77:5c:
7c:1a:dd:67:a6:9b:4d:76:f4:48:3d:16:82:e0:8c:8b:ad:23:
e0:41:1b:55:14:95:aa:dd:bb:37:58:bd:99:fe:50:eb:27:32:
30:0c:99:58:51:f2:16:6d:80:5f:30:b6:36:bc:f2:22:02:01:
f7:e2:db:b9:51:d3:47:6c:ef:57:43:94:6c:f9:a4:8a:b7:8d:
fc:05:31:14:cd:0a:d6:f8:d7:4a:62:cc:8b:7c:9e:9d:ab:71:
49:81:bb:31:2c:5c:ba:85:57:b0:5c:0c:3b:e5:6d:6e:ab:15:
01:af:b4:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGX8RnKG+Ba3C+9RUlWJnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjQ3YzExYTNhM2NhZTA2YTE5Mjg2MGE5NmM1MDUzZWMw
NGI1ZGMwHhcNMjYwNDE3MTEwMDMyWhcNMjYwNDE4MTEwMDMyWjAzMTEwLwYDVQQD
Eyg1ZDIxMzAwYjc2Y2M3MmIxODBkMzZmNTc2MGI3ZjUzNmQ2OWY3NzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwyusHSIrRRf1yck0CbSh6D7gyB7
YwSuOplF3W0VKdShXGne1+Y3pqkX8QtmP5rp1A2Pw80Bj03Mim3+ZT70An1CZCPF
9Wq+2GE9Z2PgwRWC52kywft8SaGMwLe8ZyfzhyG4I9Iby53tz7twYkWF0bA5Xotz
DoRezEjhW9n/FvO+51CZEngBvtAPViqpFtH67STb+Cl+cYMJ6IQJUZoKm+dR9CHy
5Lreu4VrASSZ/4w6KwS5hcN95eezkBPn+qIT4Zpp/9aZix3BA09v4YvZ25AjBVWb
heS6XO22gWMizhzM/lwe/YsIe4qPP4T8Jm/0vaDx6fx01ALtDTH+HxJJNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0hMAt2zHKxgNNvV2C39TbWn3cLMB8GA1UdIwQY
MBaAFOH0fBGjo8rgahkoYKlsUFPsBLXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzIt
MzFjNzMzMTk3MDczLzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzItMzFjNzMzMTk3MDcz
LzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvaz0LaF
+f0b7YLgqMSNvWNlplIPCy48C0bCL/PjAHktsIf15dcXK30SEc/h2ImPrl6yiXJ7
bBUTkmFwSA9utcnQhEQApKh2rnh4SJ5o5lpXUi6+zZPuVQ26dtzygXpNm6hXvdp5
akd/IP921WqqPq1BFhudd8UJp+LOTeYv839s5sHfE1T+wlh4jbY1Z3dcfBrdZ6ab
TXb0SD0WguCMi60j4EEbVRSVqt27N1i9mf5Q6ycyMAyZWFHyFm2AXzC2NrzyIgIB
9+LbuVHTR2zvV0OUbPmkireN/AUxFM0K1vjXSmLMi3yenatxSYG7MSxcuoVXsFwM
O+VtbqsVAa+04g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:43:54 2026 by rpki-client