
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
File: K4HHU7d2Zeeln45QgxTxWTVsIo4.mft (raw, json)
Hash identifier: 6TASjrHPwcK1aI16forBQgp8K4ozbL+YgsVUn5HTg7M=
Subject key identifier: 1E:D0:35:03:1A:95:1A:91:C2:4E:B0:E3:BA:B7:06:72:51:6B:01:DD
Authority key identifier: 2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E
Certificate issuer: /CN=2b81c753b77665e7a59f8e508314f159356c228e
Certificate serial: 019D98BD1EFD7AF94C3B19E2177A7E0BA301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
Manifest number: 12CF
Signing time: Fri 17 Apr 2026 00:00:24 +0000
Manifest this update: Fri 17 Apr 2026 00:00:24 +0000
Manifest next update: Sat 18 Apr 2026 00:00:24 +0000
Files and hashes: 1: IajIOki8N-Tfh1ubDWlzntjVI-4.roa (hash: LVVvbRrnTDOYtO0x8wssTk+uRYbqHCBuMGCLmMJuSJY=)
2: K4HHU7d2Zeeln45QgxTxWTVsIo4.crl (hash: 1BiZzvePwm8xNbZnC1DzweA92lH74G6Oa/cxOUvUIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:1e:fd:7a:f9:4c:3b:19:e2:17:7a:7e:0b:a3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b81c753b77665e7a59f8e508314f159356c228e
Validity
Not Before: Apr 17 00:00:24 2026 GMT
Not After : Apr 18 00:00:24 2026 GMT
Subject: CN=1ed035031a951a91c24eb0e3bab70672516b01dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:57:26:13:2a:52:43:f6:91:b5:75:fd:27:bc:
3d:e8:59:65:04:9d:99:c0:7b:24:1a:f4:ae:76:26:
c1:03:f1:f6:9b:96:e1:df:fd:dd:22:5d:12:ba:dc:
c0:11:35:b9:6c:5e:37:99:85:fd:94:58:42:e8:4c:
34:b4:41:d9:15:91:7f:25:db:32:61:de:61:83:9e:
18:b3:57:e3:82:aa:d0:1e:76:d9:38:c3:64:7b:b9:
70:89:12:87:2a:c6:82:2b:fc:33:94:3d:4f:4b:a9:
5d:fd:72:bf:0b:b0:99:05:93:ff:8e:5c:66:c1:57:
55:59:7e:da:99:84:58:9e:0d:7f:10:e3:bb:76:55:
fb:f9:b5:8b:83:df:8f:66:4e:4c:98:ad:30:29:5c:
f1:27:06:2b:9b:63:e1:15:96:32:85:b2:41:f5:85:
e3:e4:da:08:bd:f7:b0:db:9a:c5:ec:82:ba:02:80:
43:0a:69:5c:a1:f0:f4:bc:c5:6e:82:60:86:fd:b9:
68:1e:c5:0d:1c:de:e7:47:ba:0a:11:04:04:ca:d3:
d9:1e:7a:d7:51:8c:8a:fc:9f:b8:e3:a1:fd:8f:99:
b2:a0:14:56:d6:81:0e:7c:7d:c4:10:57:9a:ea:36:
35:72:3a:0f:8c:6d:65:13:6b:36:ec:9d:8a:0f:ee:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D0:35:03:1A:95:1A:91:C2:4E:B0:E3:BA:B7:06:72:51:6B:01:DD
X509v3 Authority Key Identifier:
keyid:2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fe:d8:65:98:ee:f6:d0:35:9b:ae:98:a1:13:c2:0d:01:8e:
f0:79:c3:2a:5d:e7:35:75:a0:4c:07:6c:12:a0:99:a4:55:9a:
b2:19:f3:c1:11:63:53:66:42:86:7c:55:fb:ac:2b:fa:75:3f:
77:f9:74:2c:23:3d:fc:21:8b:36:22:00:49:c4:38:bb:85:1d:
48:dc:38:cb:ff:43:b3:9e:78:64:24:53:36:d2:3f:06:1d:1b:
b5:9a:a7:b3:0d:8f:fe:68:da:84:67:a2:81:cc:b6:df:74:b5:
78:e0:06:72:f9:95:9d:95:3e:14:c1:83:84:0e:d7:e8:b9:e3:
0b:dc:b6:37:69:47:55:4d:a7:07:ac:1e:35:61:1d:25:bd:42:
30:7d:84:2e:57:ac:9d:de:a5:22:37:dd:5a:54:34:90:52:fd:
4c:e7:c4:c0:f6:45:5a:45:f0:2b:78:12:62:0c:55:80:70:85:
2a:e4:c6:b7:70:4e:68:c8:41:eb:5b:7a:dd:38:a5:b7:ab:59:
5b:b9:3a:79:bc:73:f2:61:dd:95:b9:68:92:01:c3:03:fc:00:
b9:7b:54:21:6e:a6:c4:79:f4:9f:34:78:b0:cf:74:06:b4:d6:
44:30:98:2f:35:a3:fc:2d:f7:72:5a:86:2b:97:98:d3:21:51:
a0:45:35:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvR79evlMOxniF3p+C6MBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiODFjNzUzYjc3NjY1ZTdhNTlmOGU1MDgzMTRmMTU5MzU2
YzIyOGUwHhcNMjYwNDE3MDAwMDI0WhcNMjYwNDE4MDAwMDI0WjAzMTEwLwYDVQQD
EygxZWQwMzUwMzFhOTUxYTkxYzI0ZWIwZTNiYWI3MDY3MjUxNmIwMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1cmEypSQ/aRtXX9J7w96FllBJ2Z
wHskGvSudibBA/H2m5bh3/3dIl0SutzAETW5bF43mYX9lFhC6Ew0tEHZFZF/Jdsy
Yd5hg54Ys1fjgqrQHnbZOMNke7lwiRKHKsaCK/wzlD1PS6ld/XK/C7CZBZP/jlxm
wVdVWX7amYRYng1/EOO7dlX7+bWLg9+PZk5MmK0wKVzxJwYrm2PhFZYyhbJB9YXj
5NoIvfew25rF7IK6AoBDCmlcofD0vMVugmCG/bloHsUNHN7nR7oKEQQEytPZHnrX
UYyK/J+446H9j5myoBRW1oEOfH3EEFea6jY1cjoPjG1lE2s27J2KD+4OpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7QNQMalRqRwk6w47q3BnJRawHdMB8GA1UdIwQY
MBaAFCuBx1O3dmXnpZ+OUIMU8Vk1bCKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzRISFU3ZDJaZWVsbjQ1UWd4VHhXVFZzSW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lZjdiMDMtZTc5Ni00MGFkLWI2NmIt
NTg3YWVmNmRjMjg1LzEvSzRISFU3ZDJaZWVsbjQ1UWd4VHhXVFZzSW80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9lZjdiMDMtZTc5Ni00MGFkLWI2NmItNTg3YWVmNmRjMjg1
LzEvSzRISFU3ZDJaZWVsbjQ1UWd4VHhXVFZzSW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABv7YZZju
9tA1m66YoRPCDQGO8HnDKl3nNXWgTAdsEqCZpFWashnzwRFjU2ZChnxV+6wr+nU/
d/l0LCM9/CGLNiIAScQ4u4UdSNw4y/9Ds554ZCRTNtI/Bh0btZqnsw2P/mjahGei
gcy233S1eOAGcvmVnZU+FMGDhA7X6LnjC9y2N2lHVU2nB6weNWEdJb1CMH2ELles
nd6lIjfdWlQ0kFL9TOfEwPZFWkXwK3gSYgxVgHCFKuTGt3BOaMhB61t63Tilt6tZ
W7k6ebxz8mHdlblokgHDA/wAuXtUIW6mxHn0nzR4sM90BrTWRDCYLzWj/C33clqG
K5eY0yFRoEU1RA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:13 2026 by rpki-client