Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier: JOiPytK7u7Zj6gdrWxDRBpuFX5iFIWIIZdd6COfjnpc=
Subject key identifier: E7:08:86:7A:AC:F8:36:C8:D7:AD:E0:ED:E0:20:C0:66:09:3C:79:EA
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial: 019EBDD98EEA8CB3CF1325C2D777AB32E419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number: 17ED
Signing time: Fri 12 Jun 2026 22:00:12 +0000
Manifest this update: Fri 12 Jun 2026 22:00:12 +0000
Manifest next update: Sat 13 Jun 2026 22:00:12 +0000
Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: UFgsK3B8z72/VaMten+O67vtWnnPZEQ88DRlOiYKnJU=)
2: r2j9KB_d9qlo6DM4VIzlnk-FGnA.roa (hash: EzpW7vs8EG39ibzlPvK/9rhPpBxeklGzxbYhWxFufes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:8e:ea:8c:b3:cf:13:25:c2:d7:77:ab:32:e4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Validity
Not Before: Jun 12 22:00:12 2026 GMT
Not After : Jun 13 22:00:12 2026 GMT
Subject: CN=e708867aacf836c8d7ade0ede020c066093c79ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:f5:40:eb:a9:c7:d0:c0:c8:9a:48:11:0e:
ec:e0:fc:63:32:5e:ad:83:be:89:32:20:7a:9c:1d:
5f:42:ba:de:f1:c5:96:37:50:cc:c5:a6:76:de:3f:
3c:7e:28:a3:94:ce:51:c0:23:e2:c7:00:ad:58:8a:
72:ce:c3:e3:67:72:ba:f3:85:c8:af:cf:18:03:75:
60:10:e6:26:16:4a:37:17:25:c0:fd:9f:8e:93:93:
df:95:ab:df:ab:89:76:53:fc:1c:4e:cf:c4:15:83:
24:7b:09:6d:b0:27:2b:30:3a:54:57:13:3f:eb:f5:
e1:c5:39:81:2c:f6:04:61:69:e3:78:79:5f:70:b5:
1a:02:3b:13:17:36:20:40:68:75:e3:cd:c0:4a:d8:
cd:ec:7c:1d:e6:33:37:2f:c1:37:bb:06:46:a4:9e:
e9:7c:5c:c2:29:27:e0:21:41:a2:f0:50:96:d8:80:
e4:55:66:5c:2a:e7:2b:b3:ed:a6:a6:a3:c3:e6:ec:
85:49:22:df:c7:96:bf:83:3a:19:41:8b:54:a3:64:
dc:c3:ad:15:b9:95:37:42:e1:03:55:d8:b1:2b:39:
72:a0:53:bf:14:93:04:38:19:92:eb:de:ec:ca:fd:
f5:6b:dc:89:36:0f:84:21:c2:fa:f7:b7:51:94:43:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:08:86:7A:AC:F8:36:C8:D7:AD:E0:ED:E0:20:C0:66:09:3C:79:EA
X509v3 Authority Key Identifier:
keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c9:f0:e9:8d:a7:c0:db:0d:fb:94:9d:0f:fe:54:ce:87:7f:
ac:47:bb:e9:ff:cc:b7:75:74:b9:6c:8d:26:25:74:b0:fe:bb:
f2:7c:ee:7a:7a:ab:86:48:b2:03:fa:0a:a5:cb:55:a1:d8:8d:
66:97:e8:62:00:24:10:b8:89:09:ec:9d:3c:be:0f:8a:d1:5a:
d7:84:0f:a1:fb:33:b5:6e:d9:4f:59:c9:2b:53:e8:94:1b:78:
3f:80:ba:8a:f1:f3:bc:4a:07:cb:dc:2e:a6:04:13:c6:ed:80:
d1:c0:11:1a:b9:ee:d2:bc:1a:c7:de:84:a6:f3:af:e2:b2:24:
25:81:7a:62:c9:8b:e9:d9:5f:09:c3:1a:14:21:96:14:dc:de:
88:d3:ab:fe:a8:d6:75:7a:10:49:85:5c:8a:0f:bb:b4:75:32:
0b:de:2e:77:bc:fe:f5:b2:b7:ed:51:fa:64:c2:12:f9:02:6a:
2c:4c:d4:c1:1f:1b:bf:8f:ef:94:40:7e:66:6b:a7:e1:81:6b:
ae:3e:7f:87:f7:3d:b6:23:24:84:c7:f1:bb:49:d7:f9:6f:29:
b9:58:5f:1b:41:71:2f:a7:94:f0:5d:66:bc:11:df:25:fa:a9:
74:b9:fe:a1:0f:2e:79:28:9e:c6:34:19:5d:5d:ec:ec:ba:e8:
d6:d1:df:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692Y7qjLPPEyXC13erMuQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTU0YWRiNWEyZWQ5OTljZjFkYjljMTI3MWIyMjA5ZGFk
MzQ0OWUwHhcNMjYwNjEyMjIwMDEyWhcNMjYwNjEzMjIwMDEyWjAzMTEwLwYDVQQD
EyhlNzA4ODY3YWFjZjgzNmM4ZDdhZGUwZWRlMDIwYzA2NjA5M2M3OWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS71QOupx9DAyJpIEQ7s4PxjMl6t
g76JMiB6nB1fQrre8cWWN1DMxaZ23j88fiijlM5RwCPixwCtWIpyzsPjZ3K684XI
r88YA3VgEOYmFko3FyXA/Z+Ok5Pflavfq4l2U/wcTs/EFYMkewltsCcrMDpUVxM/
6/XhxTmBLPYEYWnjeHlfcLUaAjsTFzYgQGh1483AStjN7Hwd5jM3L8E3uwZGpJ7p
fFzCKSfgIUGi8FCW2IDkVWZcKucrs+2mpqPD5uyFSSLfx5a/gzoZQYtUo2Tcw60V
uZU3QuEDVdixKzlyoFO/FJMEOBmS697syv31a9yJNg+EIcL697dRlENeLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcIhnqs+DbI163g7eAgwGYJPHnqMB8GA1UdIwQY
MBaAFOMVSttaLtmZzx25wScbIgna00SeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDct
MTQyZmNhY2Q3YTQ5LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDctMTQyZmNhY2Q3YTQ5
LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsnw6Y2n
wNsN+5SdD/5Uzod/rEe76f/Mt3V0uWyNJiV0sP678nzuenqrhkiyA/oKpctVodiN
ZpfoYgAkELiJCeydPL4PitFa14QPofsztW7ZT1nJK1PolBt4P4C6ivHzvEoHy9wu
pgQTxu2A0cARGrnu0rwax96EpvOv4rIkJYF6YsmL6dlfCcMaFCGWFNzeiNOr/qjW
dXoQSYVcig+7tHUyC94ud7z+9bK37VH6ZMIS+QJqLEzUwR8bv4/vlEB+Zmun4YFr
rj5/h/c9tiMkhMfxu0nX+W8puVhfG0FxL6eU8F1mvBHfJfqpdLn+oQ8ueSiexjQZ
XV3s7Lro1tHfLA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:16 2026 by rpki-client