Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
File: 4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json)
Hash identifier: gcEyd+5ifLaybH35vy1JJmdJA2ISk+3m8uWp9sprbyE=
Subject key identifier: AF:2E:55:FF:60:9D:15:44:9A:1F:43:E9:EA:5A:80:94:99:B4:89:D3
Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f
Certificate serial: 019D9BF51C3806C70C9ED7197643BBB1FA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
Manifest number: 0709
Signing time: Fri 17 Apr 2026 15:00:25 +0000
Manifest this update: Fri 17 Apr 2026 15:00:25 +0000
Manifest next update: Sat 18 Apr 2026 15:00:25 +0000
Files and hashes: 1: 2mEadFySpEWsuPH6ldVwsZTSUzE.roa (hash: ip58kYIdg4i0vj70PKOUYbGKVF2v+wgNn3j2A07Pob4=)
2: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: efsxxHbu08Un1hU8gh/q9UDsfPYKeR4Bh0DFcHFCemU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:1c:38:06:c7:0c:9e:d7:19:76:43:bb:b1:fa:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f
Validity
Not Before: Apr 17 15:00:25 2026 GMT
Not After : Apr 18 15:00:25 2026 GMT
Subject: CN=af2e55ff609d15449a1f43e9ea5a809499b489d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:eb:75:5b:8c:c9:0a:4a:cd:fb:f1:aa:c9:92:
3e:2a:9f:78:4d:21:05:fb:4d:f9:0b:a1:a9:82:9e:
25:7e:bc:32:3e:83:0a:97:a2:19:84:79:d9:03:a5:
b9:13:82:ca:b7:fc:52:e8:34:4c:9f:04:5d:c6:34:
a6:23:32:f7:14:4a:8b:1f:be:0b:e8:a5:c6:c7:38:
f9:10:d3:28:ce:94:be:3a:8f:38:48:29:f8:ab:49:
c6:82:54:06:c9:c7:5f:c6:80:22:79:21:fd:6b:c7:
c7:94:51:82:03:e9:45:98:4c:1c:e0:a9:c3:38:cd:
60:b2:03:1d:29:c7:04:f5:da:99:b5:c3:b3:78:b5:
6f:d5:1f:e2:09:26:c2:fd:51:80:80:4c:8d:c3:20:
79:44:3a:2c:9c:38:90:84:7e:ad:5e:60:1b:eb:b3:
09:3b:cf:de:d5:b4:47:6c:ac:e7:aa:66:72:67:69:
5d:d8:0c:b0:21:c8:07:f5:42:34:5f:44:62:eb:68:
4f:25:d5:1b:9f:40:61:05:42:25:7b:28:42:12:a8:
c8:ce:39:0c:b2:67:3d:24:51:e6:53:98:0b:58:9a:
1a:78:d5:5e:ef:1c:63:07:6e:90:b7:67:5b:07:d8:
93:62:59:69:7d:2c:89:9a:11:1b:2a:56:48:62:5a:
00:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2E:55:FF:60:9D:15:44:9A:1F:43:E9:EA:5A:80:94:99:B4:89:D3
X509v3 Authority Key Identifier:
keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d1:4e:e8:72:da:f7:93:4b:09:37:a2:16:11:7f:2f:52:6f:
85:e2:78:2f:d4:3c:e0:6d:0d:66:38:7d:9c:2b:e2:f9:92:ce:
26:62:54:fe:70:f3:9a:84:fb:ba:fa:02:1a:a2:ed:04:a2:14:
1d:42:e3:87:e3:03:5f:19:03:f8:fb:28:24:e0:e2:1e:42:61:
a0:7a:2e:c8:a7:b2:25:aa:e2:fe:b0:00:3e:c0:a7:c9:36:21:
a8:9c:7d:43:de:01:c4:0d:1b:9c:ae:fa:5c:d9:c2:82:90:2b:
c0:80:4a:25:7f:c9:97:1b:f4:e3:ff:05:2c:67:39:f8:14:08:
21:ca:f8:2a:08:6a:a0:a4:b8:2b:7c:0d:7f:02:aa:bf:94:85:
d9:f8:ba:59:19:a4:d1:55:a8:3a:ea:cc:5d:e0:cd:5d:a2:a0:
da:f7:f4:7b:33:41:fb:30:c7:0d:2a:88:56:d2:f5:aa:b4:ef:
f8:d8:5f:c9:46:bd:06:07:d6:5c:45:cf:b1:29:c1:88:e8:77:
3d:86:52:1c:ce:cf:20:f6:99:66:67:3a:44:a8:2d:ae:97:f0:
d1:e6:c0:76:f9:d4:62:67:5d:ae:76:b8:88:39:2f:c8:8d:8f:
36:94:57:e2:17:6a:e6:46:2c:16:c1:02:87:95:da:43:9b:49:
66:a8:bd:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9Rw4BscMntcZdkO7sfpSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNzUzMzlkYWMxNjUzNWQ0NTdhZTg4NjJiNTM1YmNlNTFl
MTIyMGYwHhcNMjYwNDE3MTUwMDI1WhcNMjYwNDE4MTUwMDI1WjAzMTEwLwYDVQQD
EyhhZjJlNTVmZjYwOWQxNTQ0OWExZjQzZTllYTVhODA5NDk5YjQ4OWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6et1W4zJCkrN+/GqyZI+Kp94TSEF
+035C6Gpgp4lfrwyPoMKl6IZhHnZA6W5E4LKt/xS6DRMnwRdxjSmIzL3FEqLH74L
6KXGxzj5ENMozpS+Oo84SCn4q0nGglQGycdfxoAieSH9a8fHlFGCA+lFmEwc4KnD
OM1gsgMdKccE9dqZtcOzeLVv1R/iCSbC/VGAgEyNwyB5RDosnDiQhH6tXmAb67MJ
O8/e1bRHbKznqmZyZ2ld2AywIcgH9UI0X0Ri62hPJdUbn0BhBUIleyhCEqjIzjkM
smc9JFHmU5gLWJoaeNVe7xxjB26Qt2dbB9iTYllpfSyJmhEbKlZIYloABQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8uVf9gnRVEmh9D6epagJSZtInTMB8GA1UdIwQY
MBaAFOB1M52sFlNdRXrohitTW85R4SIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zM2Q2MzktNDljMi00MzAxLWI2YzMt
YmI2YzZjNDU3ODE3LzEvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zM2Q2MzktNDljMi00MzAxLWI2YzMtYmI2YzZjNDU3ODE3
LzEvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9FO6HLa
95NLCTeiFhF/L1JvheJ4L9Q84G0NZjh9nCvi+ZLOJmJU/nDzmoT7uvoCGqLtBKIU
HULjh+MDXxkD+PsoJODiHkJhoHouyKeyJari/rAAPsCnyTYhqJx9Q94BxA0bnK76
XNnCgpArwIBKJX/Jlxv04/8FLGc5+BQIIcr4KghqoKS4K3wNfwKqv5SF2fi6WRmk
0VWoOurMXeDNXaKg2vf0ezNB+zDHDSqIVtL1qrTv+NhfyUa9BgfWXEXPsSnBiOh3
PYZSHM7PIPaZZmc6RKgtrpfw0ebAdvnUYmddrna4iDkvyI2PNpRX4hdq5kYsFsEC
h5XaQ5tJZqi9CQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:35 2026 by rpki-client