Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: qcAkpfuVS/Ag2TcLINp0PspwoNI07KytchI9lS66SHg=
Subject key identifier: 85:95:87:68:5E:45:B5:C8:AF:66:6C:28:97:28:5F:5B:22:7A:80:94
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 019D981902F8C2B50F7B024EBDE0537B0627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 0927
Signing time: Thu 16 Apr 2026 21:01:09 +0000
Manifest this update: Thu 16 Apr 2026 21:01:09 +0000
Manifest next update: Fri 17 Apr 2026 21:01:09 +0000
Files and hashes: 1: 1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa (hash: /XeBvwgyOqHyg56chvGRDFMd+7ExlJpVYmiAYZyhDGM=)
2: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: RWDr+SzW7gAS9C+4BokovN6Fo8y9rifxBexEaO6CgK4=)
3: cgkSjyInxeBAfsrMtADKQej1dQA.roa (hash: NJBBWIxm8P9FWZLPw5DFC5dmcCI2sjb8UDnkU7sydo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:19:02:f8:c2:b5:0f:7b:02:4e:bd:e0:53:7b:06:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Apr 16 21:01:09 2026 GMT
Not After : Apr 17 21:01:09 2026 GMT
Subject: CN=859587685e45b5c8af666c2897285f5b227a8094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:b5:19:cb:2b:63:5c:0c:1c:76:85:e2:01:
ed:5c:19:ca:a1:c9:3b:7f:ca:a5:e9:35:af:b7:6e:
f7:3a:ba:9d:4a:d1:64:3f:0a:fe:10:23:ae:e2:2e:
fd:d6:08:0c:98:bb:46:e8:5d:2a:d8:c5:ef:1f:89:
7f:4a:52:47:b3:24:17:c7:98:73:d2:42:7d:39:58:
73:6a:91:22:77:91:5f:34:56:aa:1e:ff:1e:a7:78:
f2:b8:65:c4:cc:a1:3e:2e:9b:70:0c:1c:31:3c:14:
68:56:58:1c:3a:de:61:dd:05:0e:0d:06:3c:8e:65:
31:fb:db:ab:1d:bb:ba:28:18:44:32:a5:ff:0b:df:
60:f9:be:86:54:85:fc:59:c9:fa:c3:7b:c2:b5:33:
4b:e5:46:f4:73:ab:61:e4:6d:07:32:f9:ef:57:15:
61:dc:a0:13:23:87:d2:43:a5:c7:6f:77:28:58:62:
fd:05:c2:f4:9e:a1:a1:dd:4f:2a:50:c4:6f:7c:c6:
b3:f8:5b:12:4c:93:04:bf:e6:9f:4d:08:92:bf:a1:
03:58:b9:97:e3:7d:84:0c:bb:8d:26:25:51:c0:54:
ba:e8:17:32:44:46:80:9a:79:42:12:54:52:ad:75:
ca:0f:5c:09:25:44:08:61:0a:13:d0:ec:20:07:be:
57:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:95:87:68:5E:45:B5:C8:AF:66:6C:28:97:28:5F:5B:22:7A:80:94
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:30:90:12:b9:88:7a:66:b6:9f:a9:53:bf:06:e1:39:59:0e:
5f:5b:35:53:0f:10:fc:c6:21:fc:c4:6d:eb:8c:cc:8e:7d:c4:
3d:43:4d:b0:68:90:7c:ab:f3:0d:63:2b:95:2b:cd:87:c4:7f:
7b:f6:c6:9f:0a:b7:a8:c8:14:61:05:3a:4b:8e:5c:16:0b:9a:
c6:95:10:70:a4:a0:44:ec:bd:f4:6d:0a:1f:ef:14:78:7c:bc:
2f:4d:e6:c1:79:f2:71:6b:61:dc:d9:36:2f:51:27:26:1f:d9:
f0:ce:3b:14:4b:38:9d:2c:5f:b6:9c:72:61:ee:e6:c4:6b:36:
90:7e:0d:f8:b9:fa:90:f2:2d:ab:26:93:b0:a0:21:72:80:ed:
7a:ee:1c:b8:54:2d:20:23:f6:69:29:fc:1b:a0:16:5f:64:ad:
f3:e8:47:dc:60:f3:d1:0c:24:10:be:c4:c0:3f:07:3f:f2:de:
31:ed:ab:cc:86:cc:7d:5e:e5:71:52:c9:62:a2:4c:b8:9f:5e:
08:4f:c4:1b:78:d2:77:d7:d2:b9:b5:d2:68:e6:6f:7d:2a:a4:
db:a8:61:e7:47:69:a4:81:68:2c:37:36:62:70:80:c6:4c:84:
5a:4d:cb:2d:66:d8:08:bb:89:fa:a9:39:78:ea:3a:c0:19:80:
32:0e:e2:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGQL4wrUPewJOveBTewYnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDE3YWRhNjQzOTI4OGMyOTcwM2NmNzA1ZWY2NGFmYjM4
MjBhZDkwHhcNMjYwNDE2MjEwMTA5WhcNMjYwNDE3MjEwMTA5WjAzMTEwLwYDVQQD
Eyg4NTk1ODc2ODVlNDViNWM4YWY2NjZjMjg5NzI4NWY1YjIyN2E4MDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBu1GcsrY1wMHHaF4gHtXBnKock7
f8ql6TWvt273OrqdStFkPwr+ECOu4i791ggMmLtG6F0q2MXvH4l/SlJHsyQXx5hz
0kJ9OVhzapEid5FfNFaqHv8ep3jyuGXEzKE+LptwDBwxPBRoVlgcOt5h3QUODQY8
jmUx+9urHbu6KBhEMqX/C99g+b6GVIX8Wcn6w3vCtTNL5Ub0c6th5G0HMvnvVxVh
3KATI4fSQ6XHb3coWGL9BcL0nqGh3U8qUMRvfMaz+FsSTJMEv+afTQiSv6EDWLmX
432EDLuNJiVRwFS66BcyREaAmnlCElRSrXXKD1wJJUQIYQoT0OwgB75XYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWVh2heRbXIr2ZsKJcoX1sieoCUMB8GA1UdIwQY
MBaAFOLRetpkOSiMKXA89wXvZK+zggrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDkt
Yzk5N2I4N2I0YjVmLzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDktYzk5N2I4N2I0YjVm
LzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjCQErmI
ema2n6lTvwbhOVkOX1s1Uw8Q/MYh/MRt64zMjn3EPUNNsGiQfKvzDWMrlSvNh8R/
e/bGnwq3qMgUYQU6S45cFguaxpUQcKSgROy99G0KH+8UeHy8L03mwXnycWth3Nk2
L1EnJh/Z8M47FEs4nSxftpxyYe7mxGs2kH4N+Ln6kPItqyaTsKAhcoDteu4cuFQt
ICP2aSn8G6AWX2St8+hH3GDz0QwkEL7EwD8HP/LeMe2rzIbMfV7lcVLJYqJMuJ9e
CE/EG3jSd9fSubXSaOZvfSqk26hh50dppIFoLDc2YnCAxkyEWk3LLWbYCLuJ+qk5
eOo6wBmAMg7iqQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:13:30 2026 by rpki-client