Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: ZKIxfj/wgqS0tfImsaqRsL42OudGj1K1LtFj2BA92lU=
Subject key identifier: C5:72:5A:2C:81:40:81:A0:63:E7:11:F3:39:10:BD:4C:53:D2:F8:0F
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 019D9A74D4C68474544B5B49DFF394744DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 0C1D
Signing time: Fri 17 Apr 2026 08:00:41 +0000
Manifest this update: Fri 17 Apr 2026 08:00:41 +0000
Manifest next update: Sat 18 Apr 2026 08:00:41 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: eCy51ErdHPNLI3dOOupf4YxJD4hDsSA8RnZi6WZ+/28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:d4:c6:84:74:54:4b:5b:49:df:f3:94:74:4d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Apr 17 08:00:41 2026 GMT
Not After : Apr 18 08:00:41 2026 GMT
Subject: CN=c5725a2c814081a063e711f33910bd4c53d2f80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:e6:1b:74:36:9b:c5:a8:9d:0d:41:15:ce:
16:bc:3c:91:50:93:59:ad:0e:96:df:5e:e2:1c:ff:
0a:02:ef:43:24:4d:c2:3e:75:a2:56:d9:4d:89:95:
83:d4:38:55:b8:81:9d:cf:aa:c2:8d:3d:b7:20:0e:
05:bd:89:3f:90:72:c0:88:1e:6a:c2:51:ae:bf:01:
05:18:8f:97:6d:35:b9:98:a5:be:f9:b7:0e:54:40:
bc:49:6c:84:d2:76:6b:2a:33:8a:fd:be:da:12:30:
d2:f6:3e:b1:8d:db:bc:09:58:34:c9:1d:92:a6:de:
bb:17:d7:34:1e:bf:08:16:df:38:bb:73:c2:45:4d:
2d:34:40:0d:98:7f:8e:88:58:55:81:4a:0c:1c:da:
9d:ee:94:c8:49:d5:83:06:33:dc:9b:f5:25:23:2f:
c4:83:ac:50:02:96:02:a8:8d:ba:28:78:75:a2:37:
ab:01:c7:6b:d1:72:e7:c7:b8:ae:0a:1a:df:03:2a:
78:85:83:48:d0:a8:02:35:13:d5:07:3d:2d:24:92:
a9:ae:4e:8a:fe:48:19:08:18:45:8d:a6:22:87:e7:
11:42:5f:c3:17:6b:8e:74:75:59:c9:1e:3a:66:6a:
75:7e:76:5a:3e:38:84:5b:86:8b:0d:f0:5b:5e:1c:
34:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:72:5A:2C:81:40:81:A0:63:E7:11:F3:39:10:BD:4C:53:D2:F8:0F
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ef:44:15:f9:07:50:46:57:88:26:8e:1f:d5:5f:e9:83:55:
22:cd:24:41:53:c4:a1:4d:ba:56:2e:ee:41:01:6c:6d:f6:df:
84:30:3a:69:94:64:d9:ed:e2:95:d2:88:d2:f8:ae:7d:9e:c0:
15:fc:bf:c6:03:bc:79:49:91:fa:30:7f:b4:d5:7e:fa:ca:a2:
bc:29:1f:d6:07:56:2e:fb:33:11:c7:ee:9f:4c:e0:e5:f1:b9:
d0:1d:ec:40:08:86:2f:16:a2:d6:73:2e:84:ef:1e:6d:28:8e:
f9:33:76:00:63:d3:34:97:ef:ef:d9:23:aa:d4:75:d4:cf:d4:
1e:9f:32:dd:29:01:57:95:af:da:35:5d:4b:c1:25:76:30:bb:
a7:09:cd:0b:13:2e:1a:46:40:d6:2b:ac:94:56:64:fe:a9:04:
df:2e:40:f4:9e:bc:7f:3d:52:cf:80:57:2c:24:b4:01:bd:3a:
3f:2a:ee:7e:4f:36:3d:a5:76:3b:0e:5d:29:94:3f:53:4d:42:
42:b3:d5:03:c8:88:06:43:9f:c6:e9:8e:f7:9e:ec:a3:44:70:
72:fb:be:71:c7:9c:9c:c1:ce:26:8e:04:a8:a8:66:3c:53:2d:
2a:a2:34:90:55:ba:46:5d:0a:18:f3:be:75:7d:5e:76:c2:1b:
17:4c:b7:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adNTGhHRUS1tJ3/OUdE3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMmY2NGY3ZjY5N2FhOWI2ZTk5ODJjMGI3NmJiNzg0MjEz
Mzg3NmEwHhcNMjYwNDE3MDgwMDQxWhcNMjYwNDE4MDgwMDQxWjAzMTEwLwYDVQQD
EyhjNTcyNWEyYzgxNDA4MWEwNjNlNzExZjMzOTEwYmQ0YzUzZDJmODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhXmG3Q2m8WonQ1BFc4WvDyRUJNZ
rQ6W317iHP8KAu9DJE3CPnWiVtlNiZWD1DhVuIGdz6rCjT23IA4FvYk/kHLAiB5q
wlGuvwEFGI+XbTW5mKW++bcOVEC8SWyE0nZrKjOK/b7aEjDS9j6xjdu8CVg0yR2S
pt67F9c0Hr8IFt84u3PCRU0tNEANmH+OiFhVgUoMHNqd7pTISdWDBjPcm/UlIy/E
g6xQApYCqI26KHh1ojerAcdr0XLnx7iuChrfAyp4hYNI0KgCNRPVBz0tJJKprk6K
/kgZCBhFjaYih+cRQl/DF2uOdHVZyR46Zmp1fnZaPjiEW4aLDfBbXhw0EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVyWiyBQIGgY+cR8zkQvUxT0vgPMB8GA1UdIwQY
MBaAFOEvZPf2l6qbbpmCwLdrt4QhM4dqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lN2QxYTktYWM3Ni00YTlmLWIxNzUt
NDdjMTBhNWNlNTM0LzEvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lN2QxYTktYWM3Ni00YTlmLWIxNzUtNDdjMTBhNWNlNTM0
LzEvNFM5azlfYVhxcHR1bVlMQXQydTNoQ0V6aDJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANu9EFfkH
UEZXiCaOH9Vf6YNVIs0kQVPEoU26Vi7uQQFsbfbfhDA6aZRk2e3ildKI0viufZ7A
Ffy/xgO8eUmR+jB/tNV++sqivCkf1gdWLvszEcfun0zg5fG50B3sQAiGLxai1nMu
hO8ebSiO+TN2AGPTNJfv79kjqtR11M/UHp8y3SkBV5Wv2jVdS8EldjC7pwnNCxMu
GkZA1iuslFZk/qkE3y5A9J68fz1Sz4BXLCS0Ab06Pyrufk82PaV2Ow5dKZQ/U01C
QrPVA8iIBkOfxumO957so0Rwcvu+ccecnMHOJo4EqKhmPFMtKqI0kFW6Rl0KGPO+
dX1edsIbF0y3eg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:06 2026 by rpki-client