Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File: 4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier: bCNd5oB97aQb0NJ2VHwjzXewbqly1OdUYmiIFhRIrJs=
Subject key identifier: 13:8F:83:6B:8E:44:4E:CA:E4:7E:9F:AF:16:66:5B:87:BA:76:0F:8C
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer: /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial: 019D9A752FC356C61E42160D5E0ADDFB2848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number: 0C05
Signing time: Fri 17 Apr 2026 08:01:04 +0000
Manifest this update: Fri 17 Apr 2026 08:01:04 +0000
Manifest next update: Sat 18 Apr 2026 08:01:04 +0000
Files and hashes: 1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: pJC+js1cvCecEtYz+LjP8K4Q+KzRe/48rwGrO9ly8Pw=)
2: NCPy2V4MTJIxw6Eeglyn4k9-c8k.roa (hash: e6t60cVHGwxB0yMWg7tXzy3uxaUsUhD5hfxLuTTJHN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:2f:c3:56:c6:1e:42:16:0d:5e:0a:dd:fb:28:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Validity
Not Before: Apr 17 08:01:04 2026 GMT
Not After : Apr 18 08:01:04 2026 GMT
Subject: CN=138f836b8e444ecae47e9faf16665b87ba760f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:5f:da:2b:11:b5:e1:bb:88:e9:5f:0d:b6:
7d:f8:04:f2:db:23:f9:b9:f0:14:de:8a:4f:f8:f4:
a3:e4:5e:6f:5d:30:01:86:29:28:38:56:3b:99:57:
3a:ab:1d:3b:05:d1:69:52:81:d4:59:11:48:2e:0d:
3c:e5:2a:97:d2:74:44:2c:73:e8:ce:56:1e:b7:09:
9e:8c:33:ad:c6:35:f0:70:fa:36:48:0a:46:b6:56:
cd:48:a6:64:94:2b:0d:b8:4b:2d:b2:9c:1c:88:89:
8f:4c:71:b3:01:74:49:1e:f2:f8:8c:5d:4a:75:8c:
d5:89:07:0f:23:81:7f:92:eb:51:8e:8d:7c:5a:ff:
c0:fe:e8:9d:51:5c:ae:16:e9:f2:cd:e4:ce:44:4a:
15:5f:c4:3e:24:02:60:02:e2:3d:c6:2d:2c:54:5b:
fd:12:27:d0:4c:83:ec:85:ac:23:e2:84:50:b4:69:
43:5c:ac:77:af:80:3b:c2:ea:c6:34:21:41:eb:49:
99:63:f9:5e:5b:6d:44:9e:d7:23:14:72:d2:76:5b:
28:20:fe:2b:7b:34:d4:0a:37:48:56:6a:f1:d6:96:
66:8e:cb:a6:fe:af:ee:9d:e8:d8:54:86:4b:fb:af:
30:57:8a:5a:66:2b:41:1d:cf:10:44:42:74:29:1c:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8F:83:6B:8E:44:4E:CA:E4:7E:9F:AF:16:66:5B:87:BA:76:0F:8C
X509v3 Authority Key Identifier:
keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e4:36:3f:34:14:71:53:ff:cf:7c:fe:53:9a:1a:2c:ae:6e:
9f:25:b7:c8:34:f6:21:e0:dc:6f:96:9f:de:fb:e6:61:cf:da:
6f:ec:6e:7b:09:29:97:b7:2a:c6:e5:04:dc:12:da:09:a2:71:
af:b8:33:d9:e7:13:41:a2:3f:24:e8:1c:38:db:ad:64:59:6e:
dc:e1:4c:f2:98:e7:03:dd:6e:6d:a4:07:40:1a:0a:fd:e6:e5:
a9:a8:24:e2:60:3e:b2:4c:b2:7d:e8:ce:d0:e9:6b:7a:51:1c:
3b:e6:64:f7:57:bb:f3:66:bf:a8:6e:e2:a5:61:9c:08:dd:74:
47:dc:4d:d0:1d:e5:c6:3a:6e:eb:0c:a5:fb:49:f3:e5:8f:eb:
ca:0f:58:7e:b3:5a:05:1e:49:99:d8:ba:f7:a5:3a:20:bd:6b:
45:49:bf:75:b7:44:57:0c:4e:74:bc:db:f0:0e:74:3d:71:70:
75:12:8c:1d:27:e2:8f:ff:2b:8f:0d:5a:c0:74:ae:b7:5b:0c:
c5:7d:50:62:97:df:86:92:03:91:ae:d9:36:ee:03:1d:9b:ac:
8d:ca:10:70:d3:a3:85:21:54:42:f0:8a:28:49:63:aa:ea:3a:
88:7b:f6:f8:69:a2:30:6e:a5:2b:18:c5:ec:e3:55:c5:c2:74:
24:47:ec:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adS/DVsYeQhYNXgrd+yhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTJhYjBhMjc1YTJkMDRmMWUyNjM1YWIyYzc3ZWIzYWU2
MDM4Y2MwHhcNMjYwNDE3MDgwMTA0WhcNMjYwNDE4MDgwMTA0WjAzMTEwLwYDVQQD
EygxMzhmODM2YjhlNDQ0ZWNhZTQ3ZTlmYWYxNjY2NWI4N2JhNzYwZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri5f2isRteG7iOlfDbZ9+ATy2yP5
ufAU3opP+PSj5F5vXTABhikoOFY7mVc6qx07BdFpUoHUWRFILg085SqX0nRELHPo
zlYetwmejDOtxjXwcPo2SApGtlbNSKZklCsNuEstspwciImPTHGzAXRJHvL4jF1K
dYzViQcPI4F/kutRjo18Wv/A/uidUVyuFunyzeTOREoVX8Q+JAJgAuI9xi0sVFv9
EifQTIPshawj4oRQtGlDXKx3r4A7wurGNCFB60mZY/leW21EntcjFHLSdlsoIP4r
ezTUCjdIVmrx1pZmjsum/q/unejYVIZL+68wV4paZitBHc8QREJ0KRwLjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOPg2uORE7K5H6frxZmW4e6dg+MMB8GA1UdIwQY
MBaAFOKiqwonWi0E8eJjWrLHfrOuYDjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQ5MmMtZDNlMi00ZGExLThkNTMt
N2U0N2RhMWNlNDA2LzEvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81NWQ5MmMtZDNlMi00ZGExLThkNTMtN2U0N2RhMWNlNDA2
LzEvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuQ2PzQU
cVP/z3z+U5oaLK5unyW3yDT2IeDcb5af3vvmYc/ab+xuewkpl7cqxuUE3BLaCaJx
r7gz2ecTQaI/JOgcONutZFlu3OFM8pjnA91ubaQHQBoK/eblqagk4mA+skyyfejO
0OlrelEcO+Zk91e782a/qG7ipWGcCN10R9xN0B3lxjpu6wyl+0nz5Y/ryg9YfrNa
BR5Jmdi696U6IL1rRUm/dbdEVwxOdLzb8A50PXFwdRKMHSfij/8rjw1awHSut1sM
xX1QYpffhpIDka7ZNu4DHZusjcoQcNOjhSFUQvCKKEljquo6iHv2+GmiMG6lKxjF
7ONVxcJ0JEfsiA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:22 2026 by rpki-client