Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
File: M4YMg3IhmQcJz1rqKduBaJU-feA.mft (raw, json)
Hash identifier: U7kYDqwIWgbu0rg6Wkg+uAujHivNDJ9JxS3QvNmPnaw=
Subject key identifier: 42:FB:A7:3F:42:9D:F6:04:AE:23:5B:EF:06:2A:59:8D:E5:E9:B4:83
Authority key identifier: 33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
Certificate issuer: /CN=33860c837221990709cf5aea29db8168953e7de0
Certificate serial: 019D9B5178BDA5DE9226569EABD7E97AD858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
Manifest number: 09F9
Signing time: Fri 17 Apr 2026 12:01:40 +0000
Manifest this update: Fri 17 Apr 2026 12:01:40 +0000
Manifest next update: Sat 18 Apr 2026 12:01:40 +0000
Files and hashes: 1: M4YMg3IhmQcJz1rqKduBaJU-feA.crl (hash: cOBiGNjQ2Fci0T1MWaJ1S1oDXxIay8Oe6bksYo3h+hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:78:bd:a5:de:92:26:56:9e:ab:d7:e9:7a:d8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33860c837221990709cf5aea29db8168953e7de0
Validity
Not Before: Apr 17 12:01:40 2026 GMT
Not After : Apr 18 12:01:40 2026 GMT
Subject: CN=42fba73f429df604ae235bef062a598de5e9b483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:41:e0:f3:41:5d:17:26:bd:42:3e:70:d0:
bd:a9:d7:ad:89:05:32:a8:8d:bf:21:64:28:5a:62:
c1:1f:68:ae:19:db:3d:11:45:70:e8:26:7d:c5:54:
da:36:ec:fe:da:27:95:78:56:6e:a0:23:67:6a:20:
cd:a5:f2:27:eb:7b:55:0b:67:07:67:72:e9:2c:bc:
f6:20:4f:83:28:a0:9e:2c:bb:be:39:6f:aa:9d:ea:
5b:c5:49:8d:1d:e4:c7:f7:06:cb:22:ec:e7:ce:4e:
92:e4:0b:b3:6a:47:af:ab:e8:10:45:ec:d8:b7:f2:
60:36:47:88:04:86:8f:44:20:dc:75:cf:69:ad:b3:
4b:39:b5:33:e4:42:f1:bd:84:c6:5f:45:e6:79:0a:
de:99:10:67:0a:f7:45:62:41:d9:ba:0c:46:dc:19:
c1:a2:e6:e9:11:ee:08:75:55:60:81:17:53:5c:b5:
3f:90:04:b3:f5:03:fe:08:13:fb:b3:b7:62:4a:cd:
ed:e9:d5:81:42:f6:d3:0f:25:f6:75:ce:b9:5c:50:
e7:a1:0f:54:34:23:08:8b:eb:47:55:e2:97:a3:96:
a9:21:5e:08:2a:e3:bd:ac:54:45:74:fa:54:a1:71:
c2:b8:68:b5:66:8c:1a:d3:f6:c7:73:b7:5c:de:5b:
4b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FB:A7:3F:42:9D:F6:04:AE:23:5B:EF:06:2A:59:8D:E5:E9:B4:83
X509v3 Authority Key Identifier:
keyid:33:86:0C:83:72:21:99:07:09:CF:5A:EA:29:DB:81:68:95:3E:7D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4YMg3IhmQcJz1rqKduBaJU-feA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a5ebcb-f011-4801-94ff-b82e53010597/1/M4YMg3IhmQcJz1rqKduBaJU-feA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1b:25:6a:8b:40:5f:fd:24:9b:d2:0a:e9:34:a7:c2:66:f8:
ae:79:ba:27:57:2d:c7:4f:d5:1b:18:4e:2e:e0:ef:0e:fa:8a:
1e:73:6b:f1:b6:4f:65:eb:43:92:0b:24:3a:95:6c:8c:65:78:
fa:be:08:1e:c4:32:18:db:03:ee:0a:dc:5a:d6:7a:41:32:4b:
09:eb:af:47:1b:4c:2e:74:81:88:12:a4:d0:66:e2:f0:5f:f4:
d2:8f:c7:51:28:5b:5a:7b:21:3c:8b:64:de:e9:6e:41:7a:47:
27:d4:8b:59:4a:c9:13:df:fd:17:aa:7e:f9:6a:8f:00:27:78:
98:5c:b3:88:70:1a:63:4d:f6:2d:1e:5f:2f:c9:08:3f:2d:a3:
af:ee:3e:c6:7b:76:ba:08:86:13:34:e6:96:58:b0:07:b3:3a:
cf:10:f9:12:6c:43:96:bd:a8:31:5b:82:85:b8:e9:bc:3d:5e:
d9:cc:f5:60:c2:d7:bd:20:7a:c1:69:4e:c8:2b:24:bb:a7:f1:
4e:cf:5a:55:17:2e:6b:6d:c5:14:9e:60:be:a9:3e:4e:f1:01:
d8:37:9f:fb:35:ce:4a:ec:fa:20:01:58:22:62:22:4e:a2:b6:
10:86:59:53:22:d9:b5:77:23:ce:b8:4a:86:42:e4:ed:27:b7:
ab:5f:57:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUXi9pd6SJlaeq9fpethYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzODYwYzgzNzIyMTk5MDcwOWNmNWFlYTI5ZGI4MTY4OTUz
ZTdkZTAwHhcNMjYwNDE3MTIwMTQwWhcNMjYwNDE4MTIwMTQwWjAzMTEwLwYDVQQD
Eyg0MmZiYTczZjQyOWRmNjA0YWUyMzViZWYwNjJhNTk4ZGU1ZTliNDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8FB4PNBXRcmvUI+cNC9qdetiQUy
qI2/IWQoWmLBH2iuGds9EUVw6CZ9xVTaNuz+2ieVeFZuoCNnaiDNpfIn63tVC2cH
Z3LpLLz2IE+DKKCeLLu+OW+qnepbxUmNHeTH9wbLIuznzk6S5Auzakevq+gQRezY
t/JgNkeIBIaPRCDcdc9prbNLObUz5ELxvYTGX0XmeQremRBnCvdFYkHZugxG3BnB
oubpEe4IdVVggRdTXLU/kASz9QP+CBP7s7diSs3t6dWBQvbTDyX2dc65XFDnoQ9U
NCMIi+tHVeKXo5apIV4IKuO9rFRFdPpUoXHCuGi1Zowa0/bHc7dc3ltLJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEL7pz9CnfYEriNb7wYqWY3l6bSDMB8GA1UdIwQY
MBaAFDOGDINyIZkHCc9a6inbgWiVPn3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTRZTWczSWhtUWNKejFycUtkdUJhSlUtZmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hNWViY2ItZjAxMS00ODAxLTk0ZmYt
YjgyZTUzMDEwNTk3LzEvTTRZTWczSWhtUWNKejFycUtkdUJhSlUtZmVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hNWViY2ItZjAxMS00ODAxLTk0ZmYtYjgyZTUzMDEwNTk3
LzEvTTRZTWczSWhtUWNKejFycUtkdUJhSlUtZmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBslaotA
X/0km9IK6TSnwmb4rnm6J1ctx0/VGxhOLuDvDvqKHnNr8bZPZetDkgskOpVsjGV4
+r4IHsQyGNsD7grcWtZ6QTJLCeuvRxtMLnSBiBKk0Gbi8F/00o/HUShbWnshPItk
3uluQXpHJ9SLWUrJE9/9F6p++WqPACd4mFyziHAaY032LR5fL8kIPy2jr+4+xnt2
ugiGEzTmlliwB7M6zxD5EmxDlr2oMVuChbjpvD1e2cz1YMLXvSB6wWlOyCsku6fx
Ts9aVRcua23FFJ5gvqk+TvEB2Def+zXOSuz6IAFYImIiTqK2EIZZUyLZtXcjzrhK
hkLk7Se3q19X0A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:10:44 2026 by rpki-client