Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: Mr3qDP/86jt/TY5IKjnNRsRcBFOEecgO+mZ/nv05G1Y=
Subject key identifier: 97:29:5F:78:D4:25:0E:35:2C:34:23:F0:2D:D6:7F:5B:49:D9:34:68
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 019DA4C1E9CB42DEBA9B4D4410D74621418A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 0A4C
Signing time: Sun 19 Apr 2026 08:01:04 +0000
Manifest this update: Sun 19 Apr 2026 08:01:04 +0000
Manifest next update: Mon 20 Apr 2026 08:01:04 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: o4VRT0eWulcXK9ZUu/ih3/u3YWyA77YR1Fb9QkKA9fc=)
2: YWMzYYdq1V4GAPZh68WrmEyhVfI.roa (hash: L4cChRKUEEfDnkwJCOfQ9K/LTDSkENg728c4ezgiFqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:e9:cb:42:de:ba:9b:4d:44:10:d7:46:21:41:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Apr 19 08:01:04 2026 GMT
Not After : Apr 20 08:01:04 2026 GMT
Subject: CN=97295f78d4250e352c3423f02dd67f5b49d93468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:45:f7:7f:03:5d:65:fc:27:ea:45:0b:dd:
16:db:d9:3e:d7:e2:da:3b:cb:db:c5:e8:86:e4:8c:
37:9e:05:cf:a5:d4:2b:0c:1b:8c:96:f7:dd:93:10:
79:57:cb:9a:9f:24:ff:46:3a:fe:9a:24:f3:6b:e6:
5c:78:fd:b5:a0:11:f9:4b:70:6e:62:e5:9b:99:f9:
11:62:5e:78:c1:97:c5:43:d2:49:0f:8e:61:2f:fc:
66:31:6c:27:92:35:d6:82:26:ff:de:8f:ce:a7:a5:
8c:84:8d:55:e6:ff:9f:6f:f2:72:06:d1:75:0e:6d:
6d:f1:c1:28:67:6c:33:3d:3a:8c:c1:54:84:27:19:
24:8f:40:4c:7a:ef:fc:25:5c:7d:22:27:17:ef:ac:
35:b3:42:26:d2:3e:63:bd:af:3c:05:be:35:a3:d7:
83:cf:8c:a1:67:92:0d:81:4d:71:8a:54:d2:54:5c:
c6:07:7d:e6:5e:b1:76:8f:3d:e5:f4:83:40:17:70:
d3:59:0b:eb:87:6d:fd:b7:0c:b2:05:5c:f8:f8:5e:
5a:a0:f4:81:99:50:55:e4:71:c1:4b:cf:94:8d:31:
97:1e:5f:0c:55:b3:19:bc:5e:3f:c6:19:e4:81:bc:
99:c5:36:5b:67:ba:c6:6f:4a:17:8e:43:07:7e:49:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:29:5F:78:D4:25:0E:35:2C:34:23:F0:2D:D6:7F:5B:49:D9:34:68
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bd:dd:a6:77:7c:a1:50:fa:30:3b:af:3b:4c:65:10:b7:8c:
21:b3:c2:dc:a6:18:24:a8:46:65:b5:3a:7b:08:81:b0:b6:6b:
56:7c:b9:63:37:e0:85:83:ae:ac:07:a4:a9:16:14:93:fc:01:
9a:a3:3f:51:5f:27:b4:c4:ff:b3:51:75:cd:a9:6a:de:27:69:
f9:b3:19:5d:37:56:98:8c:bd:a9:a9:30:4c:dc:5a:67:fb:f8:
53:1f:e7:66:9b:5f:d9:4e:ed:12:4a:18:07:97:fc:e6:bc:d8:
fd:9d:f6:d4:16:70:ce:6b:a0:83:b7:72:e2:48:a9:a0:ff:b5:
67:a0:08:32:b5:85:1b:80:04:a1:2f:df:ca:3d:9d:36:c8:a5:
73:f6:c0:91:1d:90:eb:b6:a3:d2:26:c4:50:8d:04:af:53:b1:
ad:69:38:0c:79:28:e8:a4:79:80:49:9f:30:87:f4:a6:76:fb:
43:58:c3:6f:ca:f3:ee:02:50:16:60:d6:4a:2c:93:b1:26:76:
dc:a8:0b:b5:32:f3:75:73:ea:43:3c:6e:96:d0:7c:71:15:f4:
93:ea:9e:05:8f:17:7e:d3:4a:d1:3f:f1:9d:9d:80:32:5d:82:
21:0b:82:18:fe:62:7a:01:f0:47:b9:d1:28:27:39:d5:4c:bc:
7d:93:fe:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwenLQt66m01EENdGIUGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZTc3MTc3NjVlNGJjYzcxOTFiMjVkMWE0ZTY2ZDM4OGM5
YzUzZDkwHhcNMjYwNDE5MDgwMTA0WhcNMjYwNDIwMDgwMTA0WjAzMTEwLwYDVQQD
Eyg5NzI5NWY3OGQ0MjUwZTM1MmMzNDIzZjAyZGQ2N2Y1YjQ5ZDkzNDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBJF938DXWX8J+pFC90W29k+1+La
O8vbxeiG5Iw3ngXPpdQrDBuMlvfdkxB5V8uanyT/Rjr+miTza+ZceP21oBH5S3Bu
YuWbmfkRYl54wZfFQ9JJD45hL/xmMWwnkjXWgib/3o/Op6WMhI1V5v+fb/JyBtF1
Dm1t8cEoZ2wzPTqMwVSEJxkkj0BMeu/8JVx9IicX76w1s0Im0j5jva88Bb41o9eD
z4yhZ5INgU1xilTSVFzGB33mXrF2jz3l9INAF3DTWQvrh239twyyBVz4+F5aoPSB
mVBV5HHBS8+UjTGXHl8MVbMZvF4/xhnkgbyZxTZbZ7rGb0oXjkMHfklHnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcpX3jUJQ41LDQj8C3Wf1tJ2TRoMB8GA1UdIwQY
MBaAFOPncXdl5LzHGRsl0aTmbTiMnFPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQt
NTYzZDQ3YTdhYjYxLzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQtNTYzZDQ3YTdhYjYx
LzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL73dpnd8
oVD6MDuvO0xlELeMIbPC3KYYJKhGZbU6ewiBsLZrVny5YzfghYOurAekqRYUk/wB
mqM/UV8ntMT/s1F1zalq3idp+bMZXTdWmIy9qakwTNxaZ/v4Ux/nZptf2U7tEkoY
B5f85rzY/Z321BZwzmugg7dy4kipoP+1Z6AIMrWFG4AEoS/fyj2dNsilc/bAkR2Q
67aj0ibEUI0Er1OxrWk4DHko6KR5gEmfMIf0pnb7Q1jDb8rz7gJQFmDWSiyTsSZ2
3KgLtTLzdXPqQzxultB8cRX0k+qeBY8XftNK0T/xnZ2AMl2CIQuCGP5iegHwR7nR
KCc51Uy8fZP+1Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:39 2026 by rpki-client