Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
File: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft (raw, json)
Hash identifier: DhA8ykJPx1MYpuiKMkUOp0/fLe69m66n6RzmaZclXjk=
Subject key identifier: 0C:7F:CD:6A:B3:33:F7:CF:92:EB:F7:14:5B:83:ED:5B:EF:9D:88:E9
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Certificate issuer: /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial: 019D99999B8A5BC65BF02ADA267163ABAB8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
Manifest number: 14BA
Signing time: Fri 17 Apr 2026 04:01:14 +0000
Manifest this update: Fri 17 Apr 2026 04:01:14 +0000
Manifest next update: Sat 18 Apr 2026 04:01:14 +0000
Files and hashes: 1: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl (hash: SJD7w728t3OMrCnzyY2Q9ua+idR5Hphts3Gip8j0ulI=)
2: ivkUxaGtEsJtdEm-0-az5FTe9g4.roa (hash: jf7yns1EHQl0bSQHREu9Zc2V/PBevRWEVblmvAVkiQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:9b:8a:5b:c6:5b:f0:2a:da:26:71:63:ab:ab:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Validity
Not Before: Apr 17 04:01:14 2026 GMT
Not After : Apr 18 04:01:14 2026 GMT
Subject: CN=0c7fcd6ab333f7cf92ebf7145b83ed5bef9d88e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:50:e6:d3:62:34:99:8f:0c:ce:52:f7:24:60:
62:5c:ee:75:d4:4a:f0:ee:cf:da:f4:59:92:57:03:
ef:50:b8:e0:03:6a:f5:ec:57:20:19:9d:47:d6:7b:
43:29:1b:37:ce:82:ae:e7:2c:72:c1:c3:d7:c8:dd:
cc:42:39:49:e7:3d:d8:7b:5e:f8:9e:24:7f:3f:f8:
6d:3e:a7:b1:1b:9e:9d:5a:9b:c7:d2:b8:c8:f1:7e:
2a:44:1e:5d:04:f8:d7:f7:50:2d:09:5a:3b:69:be:
7e:77:b1:e2:99:a9:2c:26:3d:8b:74:2e:c9:51:e2:
ac:ac:4c:c7:eb:d0:97:69:66:07:d4:7b:6e:fd:0c:
52:a3:14:ca:9b:c6:15:39:ea:39:00:39:c7:02:21:
ff:d9:5d:93:54:96:cb:2f:63:c2:53:d5:69:fb:5e:
d2:7c:f5:97:4d:73:28:96:c9:4c:f7:5c:94:7a:d0:
05:fc:1d:96:3d:5f:33:a8:cd:f9:03:cc:f4:51:ba:
51:fb:1b:7b:0c:d8:c0:73:2c:11:cb:d3:45:60:75:
62:67:87:d1:83:39:ca:43:ba:45:11:f0:2b:97:53:
95:85:a4:1d:7b:d4:eb:0a:92:ce:f6:41:36:b0:4d:
7b:15:4a:53:74:32:74:b1:cb:40:fa:3a:43:4b:49:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7F:CD:6A:B3:33:F7:CF:92:EB:F7:14:5B:83:ED:5B:EF:9D:88:E9
X509v3 Authority Key Identifier:
keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8e:3a:e1:5d:8d:18:dc:bb:49:26:cf:41:b2:9f:f6:64:54:
07:1c:ab:6d:98:e2:70:34:7d:a0:e2:ba:ec:53:d5:3f:91:79:
a0:fc:87:98:9e:69:7b:4c:e9:26:03:d6:85:92:33:49:77:58:
07:f4:8a:14:7c:a3:c2:0a:b4:5a:4b:0f:f0:9b:5c:57:b5:f0:
51:b7:36:8b:0f:59:f4:72:60:4f:c3:2f:a8:a2:0c:f0:0e:83:
bb:65:9d:b8:45:59:a6:81:81:f3:3b:05:fe:53:74:b4:70:5a:
84:ea:39:31:c1:f1:3a:b1:bf:e4:13:ad:a6:1e:2f:c9:20:f9:
0c:be:d4:df:ce:98:ac:40:bb:b3:57:ed:72:a0:af:c1:d8:f0:
6f:39:47:b8:13:67:7d:ca:07:a9:5d:d6:f0:50:c4:19:25:8f:
f6:3e:c5:cb:7f:c4:42:f5:aa:98:79:b4:d5:f2:25:d5:ac:62:
94:52:cf:a2:bb:96:46:a0:51:44:23:3a:91:8b:b1:4c:d8:c0:
c6:ae:a3:8b:79:8b:a0:03:0d:40:ec:1e:3a:f4:37:8f:43:29:
7c:96:a7:bf:11:b4:9c:1e:82:42:e4:b9:6f:25:67:37:21:a1:
b0:16:61:12:16:88:8b:e6:90:ca:8b:1a:b3:ec:3d:08:56:89:
72:d6:2c:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmZuKW8Zb8CraJnFjq6uLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZTEyYTI3OTViNmU0ZGYyNjVmNjVkZjBhMDBjYjdjN2U0
NWRlZWYwHhcNMjYwNDE3MDQwMTE0WhcNMjYwNDE4MDQwMTE0WjAzMTEwLwYDVQQD
EygwYzdmY2Q2YWIzMzNmN2NmOTJlYmY3MTQ1YjgzZWQ1YmVmOWQ4OGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FDm02I0mY8MzlL3JGBiXO511Erw
7s/a9FmSVwPvULjgA2r17FcgGZ1H1ntDKRs3zoKu5yxywcPXyN3MQjlJ5z3Ye174
niR/P/htPqexG56dWpvH0rjI8X4qRB5dBPjX91AtCVo7ab5+d7HimaksJj2LdC7J
UeKsrEzH69CXaWYH1Htu/QxSoxTKm8YVOeo5ADnHAiH/2V2TVJbLL2PCU9Vp+17S
fPWXTXMolslM91yUetAF/B2WPV8zqM35A8z0UbpR+xt7DNjAcywRy9NFYHViZ4fR
gznKQ7pFEfArl1OVhaQde9TrCpLO9kE2sE17FUpTdDJ0sctA+jpDS0k35QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAx/zWqzM/fPkuv3FFuD7VvvnYjpMB8GA1UdIwQY
MBaAFOHhKieVtuTfJl9l3woAy3x+Rd7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGVFcUo1VzI1TjhtWDJYZkNnRExmSDVGM3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9kZDVjMTUtODE1ZC00MTFkLThhNTYt
ODJjNmNmMTRkZmUyLzEvNGVFcUo1VzI1TjhtWDJYZkNnRExmSDVGM3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9kZDVjMTUtODE1ZC00MTFkLThhNTYtODJjNmNmMTRkZmUy
LzEvNGVFcUo1VzI1TjhtWDJYZkNnRExmSDVGM3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4464V2N
GNy7SSbPQbKf9mRUBxyrbZjicDR9oOK67FPVP5F5oPyHmJ5pe0zpJgPWhZIzSXdY
B/SKFHyjwgq0WksP8JtcV7XwUbc2iw9Z9HJgT8MvqKIM8A6Du2WduEVZpoGB8zsF
/lN0tHBahOo5McHxOrG/5BOtph4vySD5DL7U386YrEC7s1ftcqCvwdjwbzlHuBNn
fcoHqV3W8FDEGSWP9j7Fy3/EQvWqmHm01fIl1axilFLPoruWRqBRRCM6kYuxTNjA
xq6ji3mLoAMNQOweOvQ3j0MpfJanvxG0nB6CQuS5byVnNyGhsBZhEhaIi+aQyosa
s+w9CFaJctYsyQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:45:54 2026 by rpki-client