Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
File: xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft (raw, json)
Hash identifier: l+Z8SCQN5B04CIj2Wl2IWvLleGvk/pOZhmoLITuzvS0=
Subject key identifier: FD:D4:6D:67:41:70:F1:0D:A0:87:34:9A:9D:AD:FE:9B:84:3C:DE:79
Authority key identifier: C5:96:78:54:76:EF:BA:E7:7F:96:1D:23:05:70:57:FA:03:6F:B2:7F
Certificate issuer: /CN=c596785476efbae77f961d23057057fa036fb27f
Certificate serial: 019D9BBE9DF3DD6844343ED191926C7C7BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
Manifest number: 176E
Signing time: Fri 17 Apr 2026 14:00:53 +0000
Manifest this update: Fri 17 Apr 2026 14:00:53 +0000
Manifest next update: Sat 18 Apr 2026 14:00:53 +0000
Files and hashes: 1: xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl (hash: Gu6jtUtIMDrpEGkdkkdS0fNBssIc3IRl+c6vD4BxKwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:9d:f3:dd:68:44:34:3e:d1:91:92:6c:7c:7b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c596785476efbae77f961d23057057fa036fb27f
Validity
Not Before: Apr 17 14:00:53 2026 GMT
Not After : Apr 18 14:00:53 2026 GMT
Subject: CN=fdd46d674170f10da087349a9dadfe9b843cde79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b4:d8:47:93:7d:c3:82:ee:7b:ad:8c:2e:f4:
94:a3:83:ce:1f:bf:57:c2:16:c8:11:d8:2e:0f:5b:
ac:92:e5:d2:fe:e9:c7:e8:5e:71:30:6e:b8:00:ef:
63:e9:6d:cd:10:df:2d:a1:23:39:c1:b7:f9:b0:15:
7a:e5:ef:89:3e:4f:5e:09:60:dd:c8:fb:1b:2a:55:
8e:d9:81:0b:6e:74:24:47:3d:9a:bf:08:d2:d9:5c:
42:11:77:b5:3a:2f:83:f8:0f:8c:74:9a:1e:1f:4e:
c6:32:24:93:54:18:eb:c3:d1:bb:c3:dc:f7:e6:4e:
8c:30:35:b1:e2:98:5e:85:15:b9:a0:a2:6b:86:57:
5d:d3:19:d8:8a:e3:d8:98:44:42:4a:59:ce:b7:73:
4f:ca:41:1d:99:96:31:2f:96:c7:a9:c5:73:42:60:
15:94:2d:79:94:c7:45:77:fc:ad:51:d0:69:4b:e6:
17:a1:10:26:1a:df:4d:70:b7:e8:e2:55:16:45:53:
e0:c6:77:70:5f:8d:ee:03:3a:cd:7e:43:78:69:4f:
4d:4b:81:6b:63:1d:fc:35:97:be:a4:48:fe:40:d7:
a5:c4:39:e7:d3:7f:df:d2:aa:f5:78:a4:db:b0:c9:
be:90:1d:8a:77:41:b3:ac:15:22:c5:4a:f7:8a:4e:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D4:6D:67:41:70:F1:0D:A0:87:34:9A:9D:AD:FE:9B:84:3C:DE:79
X509v3 Authority Key Identifier:
keyid:C5:96:78:54:76:EF:BA:E7:7F:96:1D:23:05:70:57:FA:03:6F:B2:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZZ4VHbvuud_lh0jBXBX-gNvsn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4ae99d-f552-476c-8177-ebf5f0433772/1/xZZ4VHbvuud_lh0jBXBX-gNvsn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:79:ba:30:bd:e3:1e:54:bc:78:58:5d:17:ba:be:bf:30:32:
aa:cc:5b:66:da:fa:89:74:74:5d:6c:fd:d0:8b:e5:06:e8:fa:
7f:15:3a:91:aa:fa:23:65:aa:ff:0f:5c:02:67:42:42:aa:d2:
b2:d8:06:55:2f:26:55:f0:f9:75:43:23:22:3c:81:c7:f9:cd:
cf:fa:37:18:08:13:32:3e:bc:31:b7:05:1c:dc:c1:56:2d:b4:
3a:f2:42:25:11:5b:52:94:df:6e:b2:f3:89:ac:9e:66:2b:eb:
65:27:29:7e:02:0c:48:f5:44:2d:67:21:2b:e4:c9:c9:f8:5e:
ff:69:3e:b3:cc:0e:81:93:94:f3:89:59:f2:bd:da:3e:94:c8:
78:93:0c:d7:e6:99:49:41:e7:6a:d2:c8:c5:fd:f3:0d:7f:54:
0c:e6:44:96:35:13:72:0d:1f:ad:83:8d:c7:7d:f4:fd:0d:8b:
38:aa:91:31:67:e8:b8:43:d7:82:8e:0e:0d:f7:8f:4e:8f:72:
73:e6:b7:7e:aa:0b:a8:a1:52:32:5d:16:15:f1:24:03:8c:65:
4b:d3:46:51:bd:a6:e4:e8:90:36:97:65:5c:10:37:42:94:2c:
30:f5:98:b0:6a:a2:aa:66:3e:1c:cb:a8:e4:35:49:10:03:09:
9b:41:88:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvp3z3WhEND7RkZJsfHuxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OTY3ODU0NzZlZmJhZTc3Zjk2MWQyMzA1NzA1N2ZhMDM2
ZmIyN2YwHhcNMjYwNDE3MTQwMDUzWhcNMjYwNDE4MTQwMDUzWjAzMTEwLwYDVQQD
EyhmZGQ0NmQ2NzQxNzBmMTBkYTA4NzM0OWE5ZGFkZmU5Yjg0M2NkZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbTYR5N9w4Lue62MLvSUo4POH79X
whbIEdguD1uskuXS/unH6F5xMG64AO9j6W3NEN8toSM5wbf5sBV65e+JPk9eCWDd
yPsbKlWO2YELbnQkRz2avwjS2VxCEXe1Oi+D+A+MdJoeH07GMiSTVBjrw9G7w9z3
5k6MMDWx4phehRW5oKJrhldd0xnYiuPYmERCSlnOt3NPykEdmZYxL5bHqcVzQmAV
lC15lMdFd/ytUdBpS+YXoRAmGt9NcLfo4lUWRVPgxndwX43uAzrNfkN4aU9NS4Fr
Yx38NZe+pEj+QNelxDnn03/f0qr1eKTbsMm+kB2Kd0GzrBUixUr3ik5UoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3UbWdBcPENoIc0mp2t/puEPN55MB8GA1UdIwQY
MBaAFMWWeFR277rnf5YdIwVwV/oDb7J/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFpaNFZIYnZ1dWRfbGgwakJYQlgtZ052c244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80YWU5OWQtZjU1Mi00NzZjLTgxNzct
ZWJmNWYwNDMzNzcyLzEveFpaNFZIYnZ1dWRfbGgwakJYQlgtZ052c244Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80YWU5OWQtZjU1Mi00NzZjLTgxNzctZWJmNWYwNDMzNzcy
LzEveFpaNFZIYnZ1dWRfbGgwakJYQlgtZ052c244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3m6ML3j
HlS8eFhdF7q+vzAyqsxbZtr6iXR0XWz90IvlBuj6fxU6kar6I2Wq/w9cAmdCQqrS
stgGVS8mVfD5dUMjIjyBx/nNz/o3GAgTMj68MbcFHNzBVi20OvJCJRFbUpTfbrLz
iayeZivrZScpfgIMSPVELWchK+TJyfhe/2k+s8wOgZOU84lZ8r3aPpTIeJMM1+aZ
SUHnatLIxf3zDX9UDOZEljUTcg0frYONx330/Q2LOKqRMWfouEPXgo4ODfePTo9y
c+a3fqoLqKFSMl0WFfEkA4xlS9NGUb2m5OiQNpdlXBA3QpQsMPWYsGqiqmY+HMuo
5DVJEAMJm0GIPQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:50 2026 by rpki-client