Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
File: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json)
Hash identifier: qQCsIvxDnhVSzniNe0SFRpp38EFEcID1Nm4nWNzFZTE=
Subject key identifier: 9D:FA:E7:65:E6:CE:D8:25:81:8A:67:05:F2:B1:29:B8:83:53:42:C6
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial: 019D9A3E088859C8BC792B5C4D50BB812C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
Manifest number: 05DD
Signing time: Fri 17 Apr 2026 07:00:49 +0000
Manifest this update: Fri 17 Apr 2026 07:00:49 +0000
Manifest next update: Sat 18 Apr 2026 07:00:49 +0000
Files and hashes: 1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: JOY4idWN9sx12YU21PQlENCKtKGIZwo9e6G349ZWogg=)
2: mX8HnTFvLthfSZ2ZAzBIL5WiGxo.roa (hash: JasekT6eOU4dUWNEwUdVF7G0JwY0SRq9zwzctkh7yh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:08:88:59:c8:bc:79:2b:5c:4d:50:bb:81:2c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Validity
Not Before: Apr 17 07:00:49 2026 GMT
Not After : Apr 18 07:00:49 2026 GMT
Subject: CN=9dfae765e6ced825818a6705f2b129b8835342c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:c2:e6:b2:57:20:eb:15:85:34:d7:5e:d8:
5a:81:03:e7:f4:a3:1d:c0:9c:d9:19:8a:b2:f1:ff:
52:f0:59:3a:05:0c:2d:4d:09:16:e2:c8:78:e5:8a:
e6:49:73:93:f4:c3:25:94:f1:82:8b:cd:3c:7d:29:
8b:5e:8c:8c:db:3c:83:84:47:9d:11:e5:4e:02:cd:
41:5c:f1:0c:b9:ae:fb:2f:c8:c5:f4:93:e1:94:6f:
f9:cd:62:87:18:de:73:d6:dd:18:f8:bf:68:fd:a7:
77:73:e3:41:29:06:e5:58:21:5d:22:5e:7c:d6:23:
f4:ed:34:02:76:3e:83:0d:3a:b8:8a:0d:bc:37:a1:
9a:2e:27:63:23:79:61:1f:4f:c1:b8:da:84:53:77:
bc:23:54:51:41:cb:1b:19:6a:86:ca:c3:0f:19:9d:
a0:1e:48:a8:5f:b5:79:c3:1c:f4:17:9e:c5:df:02:
5a:c0:1b:c7:66:ef:c4:98:e6:cc:d3:ed:49:55:dc:
e8:37:65:88:48:9a:a1:4d:aa:10:77:dd:70:73:3f:
58:ff:c7:50:c4:2f:ff:64:f6:e5:c7:ba:44:fb:74:
e0:d8:c2:dc:18:63:fb:72:54:c2:59:55:45:44:f4:
ff:50:13:3e:5d:97:91:da:05:bd:ce:56:1c:0e:71:
42:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FA:E7:65:E6:CE:D8:25:81:8A:67:05:F2:B1:29:B8:83:53:42:C6
X509v3 Authority Key Identifier:
keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cf:3e:2f:de:3c:4d:84:f1:dc:ff:e0:2b:e8:45:f2:85:d5:
28:e1:8e:10:a4:73:e0:b0:44:dd:32:11:9f:38:42:c4:69:f9:
3c:04:b9:64:f6:bc:f6:80:84:9c:09:b6:98:2d:0c:1b:06:52:
dd:90:8c:58:50:bc:5c:0c:21:f6:1b:ba:0b:19:3a:a5:90:2d:
4a:61:c9:28:68:b6:a2:17:b7:22:10:87:06:8b:ec:eb:a6:66:
3a:7b:cd:6f:b9:bb:e2:eb:44:3a:07:0f:a3:09:54:79:b0:34:
4d:df:ec:0e:8e:04:07:c7:29:29:f0:e8:b7:62:6a:d2:62:0c:
37:f5:11:f0:74:d8:55:33:30:ae:d4:b5:b4:6a:1e:c9:4e:4c:
6f:8a:b7:1f:e7:47:00:99:72:1e:d0:d4:16:92:a4:05:ac:6b:
ba:78:1e:f4:56:47:da:d8:d7:0d:ea:c3:16:67:d8:af:6c:77:
84:b0:bd:47:f6:7c:ac:60:8a:33:0d:b7:05:46:a0:51:a7:b1:
f6:f1:5e:fa:c4:b9:50:65:8b:e2:b4:e8:72:e3:f9:5c:0b:38:
3c:8c:e4:a5:41:a2:33:ee:9a:21:1d:40:5e:dc:c7:97:80:70:
ec:f6:80:b8:94:c0:12:26:6e:e7:0f:ac:c0:80:89:9c:95:91:
ca:8a:c4:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPgiIWci8eStcTVC7gSwlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDM2MmU0OGFjYmUwMDQ4ZTlkMTI1YTYyYjhkOWIxNDBj
YmZkZDQwHhcNMjYwNDE3MDcwMDQ5WhcNMjYwNDE4MDcwMDQ5WjAzMTEwLwYDVQQD
Eyg5ZGZhZTc2NWU2Y2VkODI1ODE4YTY3MDVmMmIxMjliODgzNTM0MmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfjC5rJXIOsVhTTXXthagQPn9KMd
wJzZGYqy8f9S8Fk6BQwtTQkW4sh45YrmSXOT9MMllPGCi808fSmLXoyM2zyDhEed
EeVOAs1BXPEMua77L8jF9JPhlG/5zWKHGN5z1t0Y+L9o/ad3c+NBKQblWCFdIl58
1iP07TQCdj6DDTq4ig28N6GaLidjI3lhH0/BuNqEU3e8I1RRQcsbGWqGysMPGZ2g
HkioX7V5wxz0F57F3wJawBvHZu/EmObM0+1JVdzoN2WISJqhTaoQd91wcz9Y/8dQ
xC//ZPblx7pE+3Tg2MLcGGP7clTCWVVFRPT/UBM+XZeR2gW9zlYcDnFCowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3652XmztglgYpnBfKxKbiDU0LGMB8GA1UdIwQY
MBaAFOHTYuSKy+AEjp0SWmK42bFAy/3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgt
M2FkYTM1MjY1MmI0LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgtM2FkYTM1MjY1MmI0
LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA88+L948
TYTx3P/gK+hF8oXVKOGOEKRz4LBE3TIRnzhCxGn5PAS5ZPa89oCEnAm2mC0MGwZS
3ZCMWFC8XAwh9hu6Cxk6pZAtSmHJKGi2ohe3IhCHBovs66ZmOnvNb7m74utEOgcP
owlUebA0Td/sDo4EB8cpKfDot2Jq0mIMN/UR8HTYVTMwrtS1tGoeyU5Mb4q3H+dH
AJlyHtDUFpKkBaxrunge9FZH2tjXDerDFmfYr2x3hLC9R/Z8rGCKMw23BUagUaex
9vFe+sS5UGWL4rTocuP5XAs4PIzkpUGiM+6aIR1AXtzHl4Bw7PaAuJTAEiZu5w+s
wICJnJWRyorEbg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:39 2026 by rpki-client