
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File: 4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier: ici1Ydf+hSBkraAxQRtzmG7oxMNJEqsqlCMEu4BiOjg=
Subject key identifier: BA:0A:75:99:14:CE:67:36:51:A0:4B:0D:52:A4:2D:93:E8:5F:C2:13
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 019D977478BB076D0E4375D3E3AB41CCF994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number: 1814
Signing time: Thu 16 Apr 2026 18:01:25 +0000
Manifest this update: Thu 16 Apr 2026 18:01:25 +0000
Manifest next update: Fri 17 Apr 2026 18:01:25 +0000
Files and hashes: 1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: VaQQyW1979Rmzq68+K3bmrr7tolNlL+VRlhE/Q6Kcj4=)
2: APkEJsxH2t-1o8uReEsySa-BG0k.roa (hash: QGebNblh9sIV47+DzT8QKo/lQO0JIeSNiq/YB/thR5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:78:bb:07:6d:0e:43:75:d3:e3:ab:41:cc:f9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: Apr 16 18:01:25 2026 GMT
Not After : Apr 17 18:01:25 2026 GMT
Subject: CN=ba0a759914ce673651a04b0d52a42d93e85fc213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:6a:94:b0:5f:cc:d3:39:07:28:11:8d:30:
f1:03:68:c6:46:9b:7e:b9:87:a1:13:2e:a5:5a:d9:
e7:43:6c:1d:65:90:75:10:22:d6:b3:af:16:71:9c:
2a:bb:ce:c7:14:d5:9a:84:dd:00:34:cf:40:45:1a:
ab:d6:b8:bc:a5:b5:01:f2:0b:cc:30:47:8b:7d:88:
6b:51:07:d1:8a:3e:4e:62:8a:37:83:c9:e7:de:e5:
38:4c:bc:a1:74:e0:43:e8:9e:0c:6c:a0:96:7e:02:
79:0e:be:c2:e5:0f:4f:1f:c3:7c:52:b9:7d:3f:c7:
1b:42:e2:b8:9a:5c:76:83:1a:a2:bb:f8:c9:64:44:
74:15:d7:8b:65:97:b9:51:e1:90:cf:50:07:3a:b5:
df:63:3e:2f:a4:84:68:8e:87:e1:f3:f2:52:4b:49:
57:b5:b3:3b:67:be:59:11:d7:ab:e0:42:6f:c0:d5:
0a:41:5d:5f:e7:22:bc:3b:dd:fc:4c:4a:c3:03:6a:
85:80:3f:5d:aa:8c:3f:cf:54:3b:5b:39:9b:68:66:
22:c6:2a:f3:a7:d3:00:5c:9f:a7:5c:84:37:9f:57:
4b:c3:e4:ea:6b:23:c7:d5:bf:74:a3:0f:d9:f6:9b:
05:5c:3c:c0:28:cd:fb:26:f6:f5:88:cc:e5:b1:1b:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0A:75:99:14:CE:67:36:51:A0:4B:0D:52:A4:2D:93:E8:5F:C2:13
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a5:b5:f5:04:13:c1:b9:6a:10:01:b3:a8:95:e4:40:e7:6e:
03:cf:61:e8:ac:e4:79:7e:81:f3:18:9a:60:e6:e1:5b:8c:30:
3b:95:e5:a5:5f:f7:d2:97:52:7c:09:87:ab:d6:df:0f:b6:50:
fb:5e:20:f0:05:a7:06:97:32:87:3a:62:f9:69:3b:32:fc:74:
82:00:d8:0c:d1:46:45:4e:f4:f4:04:88:f1:05:b9:05:ee:e9:
e6:86:be:88:85:0e:83:17:9e:e4:e7:e6:aa:48:0c:ad:e4:0b:
00:10:d7:ea:d6:d3:f5:ef:62:11:58:c1:32:29:f4:be:90:f5:
0f:5a:13:da:78:6f:6c:39:72:c4:c5:7b:14:92:24:b6:06:14:
d1:2e:ab:1e:a3:a5:57:dc:d2:c8:38:62:32:b0:f5:cc:7d:ec:
4d:a0:e9:b2:4d:66:9c:67:30:29:52:b0:cd:e1:48:70:3a:e3:
92:b7:f1:f6:c8:89:5e:9e:86:d4:89:30:f0:73:00:b8:26:be:
99:f6:0a:47:fd:99:a3:a0:8c:2c:bb:25:84:80:26:80:22:9e:
df:7d:87:9d:98:23:01:47:ce:5c:ab:4e:21:c5:dd:ca:e4:54:
73:a7:03:8d:e5:94:9a:f6:d1:11:fe:b0:a5:3f:70:3b:89:b9:
55:38:23:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XdHi7B20OQ3XT46tBzPmUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxM2QzZmI2YTg2M2FjMGZhNGQxZmVlZmUzYWVjMzllZDhk
Mzg5NWMwHhcNMjYwNDE2MTgwMTI1WhcNMjYwNDE3MTgwMTI1WjAzMTEwLwYDVQQD
EyhiYTBhNzU5OTE0Y2U2NzM2NTFhMDRiMGQ1MmE0MmQ5M2U4NWZjMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFNqlLBfzNM5BygRjTDxA2jGRpt+
uYehEy6lWtnnQ2wdZZB1ECLWs68WcZwqu87HFNWahN0ANM9ARRqr1ri8pbUB8gvM
MEeLfYhrUQfRij5OYoo3g8nn3uU4TLyhdOBD6J4MbKCWfgJ5Dr7C5Q9PH8N8Url9
P8cbQuK4mlx2gxqiu/jJZER0FdeLZZe5UeGQz1AHOrXfYz4vpIRojofh8/JSS0lX
tbM7Z75ZEder4EJvwNUKQV1f5yK8O938TErDA2qFgD9dqow/z1Q7WzmbaGYixirz
p9MAXJ+nXIQ3n1dLw+TqayPH1b90ow/Z9psFXDzAKM37Jvb1iMzlsRtivwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoKdZkUzmc2UaBLDVKkLZPoX8ITMB8GA1UdIwQY
MBaAFOE9P7aoY6wPpNH+7+Ouw57Y04lcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFQwX3RxaGpyQS1rMGY3djQ2N0RudGpUaVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hNWY0OTgtNmM3Ni00MjMwLTkzZDEt
YTM5ZTAwOTYyN2VmLzEvNFQwX3RxaGpyQS1rMGY3djQ2N0RudGpUaVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hNWY0OTgtNmM3Ni00MjMwLTkzZDEtYTM5ZTAwOTYyN2Vm
LzEvNFQwX3RxaGpyQS1rMGY3djQ2N0RudGpUaVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKW19QQT
wblqEAGzqJXkQOduA89h6KzkeX6B8xiaYObhW4wwO5XlpV/30pdSfAmHq9bfD7ZQ
+14g8AWnBpcyhzpi+Wk7Mvx0ggDYDNFGRU709ASI8QW5Be7p5oa+iIUOgxee5Ofm
qkgMreQLABDX6tbT9e9iEVjBMin0vpD1D1oT2nhvbDlyxMV7FJIktgYU0S6rHqOl
V9zSyDhiMrD1zH3sTaDpsk1mnGcwKVKwzeFIcDrjkrfx9siJXp6G1Ikw8HMAuCa+
mfYKR/2Zo6CMLLslhIAmgCKe332HnZgjAUfOXKtOIcXdyuRUc6cDjeWUmvbREf6w
pT9wO4m5VTgjEw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:01:26 2026 by rpki-client