Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
File: pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft (raw, json)
Hash identifier: IUcaeR2eGglh70ZAq30qLjwCkAMywdXcwVEF1g7fnto=
Subject key identifier: 4D:99:0B:67:9F:54:CF:AA:F7:1F:69:94:53:FB:D0:3B:E6:EC:D1:07
Authority key identifier: A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
Certificate issuer: /CN=a5541609cd947bedfc99125840030108a3f141c1
Certificate serial: 019D9CD1DA852078F85DCEEBCEE7BF36FC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
Manifest number: 023A
Signing time: Fri 17 Apr 2026 19:01:31 +0000
Manifest this update: Fri 17 Apr 2026 19:01:31 +0000
Manifest next update: Sat 18 Apr 2026 19:01:31 +0000
Files and hashes: 1: 2751EE97ZUX46PuQKd5VXZi8NQ4.roa (hash: ttrLfXYMhhaOogoOW1E72PyGhahP9uiFnKhfYUnBtRs=)
2: 92O93VxDU4pUVWr7dnT1Y4KqdI0.roa (hash: 27cPDTqD5XdPrxS6jGsrQqv1l0PeJCPzXimQBRdpqQ4=)
3: pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl (hash: eBOM6oqcrhBdTIld7SIqd0KxPgjoWVrye5eHuOWv6+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:da:85:20:78:f8:5d:ce:eb:ce:e7:bf:36:fc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5541609cd947bedfc99125840030108a3f141c1
Validity
Not Before: Apr 17 19:01:31 2026 GMT
Not After : Apr 18 19:01:31 2026 GMT
Subject: CN=4d990b679f54cfaaf71f699453fbd03be6ecd107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:53:e1:6e:ce:df:f5:75:93:77:bc:19:45:
fb:f5:ee:b8:38:36:34:35:2b:07:94:a3:e5:7a:51:
04:c7:a2:85:88:f3:2e:51:4e:84:26:f4:8a:b4:74:
cd:04:c0:68:8b:53:8b:1a:98:be:5a:f1:17:b5:a2:
5e:48:62:54:ee:c7:74:6f:ab:17:22:98:17:47:5f:
28:ed:03:89:b0:fe:42:d5:65:f3:a5:30:09:9b:dc:
6a:7d:fc:99:f3:af:8c:0d:a0:6e:52:53:a1:30:b0:
67:3b:67:f4:f5:32:33:18:8c:16:46:07:2e:6e:7f:
3f:67:d5:69:1c:ad:8e:e4:67:7f:c7:d6:f8:c1:7c:
c3:d8:25:57:5f:21:22:b4:3c:ba:f6:7e:45:ae:c8:
82:1d:f0:44:58:76:5d:a9:07:93:c6:45:f9:39:d3:
ba:57:37:17:cc:eb:69:6b:f8:03:1b:82:1c:b4:4a:
60:c0:b1:0c:cd:bf:f1:98:cd:d6:2c:4e:ce:84:28:
df:cd:0a:b9:66:63:e3:14:d7:92:ce:5b:43:1a:cc:
e7:cd:7f:a4:c3:d8:ea:41:5b:d1:ed:18:22:95:ef:
7a:ce:ab:93:b0:96:64:bc:f3:f9:be:6a:3d:7a:c0:
1b:56:e7:36:b6:3c:99:20:35:71:5f:17:3d:a0:16:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:99:0B:67:9F:54:CF:AA:F7:1F:69:94:53:FB:D0:3B:E6:EC:D1:07
X509v3 Authority Key Identifier:
keyid:A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0b:da:a6:fc:c7:da:14:1f:ce:1d:8c:7d:61:eb:e5:8e:f2:
23:0f:c0:2b:0f:72:b5:ef:26:53:f3:75:61:f7:98:5a:7c:f8:
46:0b:81:d9:35:e6:96:b2:1e:f1:96:f6:e2:55:86:4e:2a:0f:
8f:ee:aa:46:4a:2f:6c:90:41:64:78:95:9a:67:22:b3:55:e4:
62:cc:53:03:29:29:66:ce:b6:17:c8:55:50:fa:c2:13:a9:84:
e5:51:a2:68:1e:4e:60:d0:0e:64:c7:ba:29:48:ef:73:b9:ae:
4b:8f:73:8d:2f:3e:71:a6:16:b9:2c:54:30:89:95:25:f3:d5:
8c:3a:a5:a5:e6:71:26:ee:52:38:15:67:ae:95:68:af:ca:35:
d3:74:b2:1d:43:6e:89:e4:be:3e:62:96:9c:82:e2:0d:90:1d:
30:1c:8f:39:88:ae:44:c2:ed:52:93:4b:9a:3c:89:ea:84:da:
66:68:74:4c:81:2d:07:57:b9:57:94:d4:89:3e:e6:c5:aa:a3:
8a:aa:6d:34:b4:8c:cb:d1:e1:08:de:9c:53:8e:66:07:ea:63:
f1:10:a0:f9:fa:0f:73:a3:96:a3:04:38:0d:18:2f:a8:cb:f8:
db:6c:5d:24:c1:6c:83:20:0c:f5:10:69:86:60:3a:95:7d:8d:
bd:16:e5:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0dqFIHj4Xc7rzue/NvyGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NTQxNjA5Y2Q5NDdiZWRmYzk5MTI1ODQwMDMwMTA4YTNm
MTQxYzEwHhcNMjYwNDE3MTkwMTMxWhcNMjYwNDE4MTkwMTMxWjAzMTEwLwYDVQQD
Eyg0ZDk5MGI2NzlmNTRjZmFhZjcxZjY5OTQ1M2ZiZDAzYmU2ZWNkMTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQZT4W7O3/V1k3e8GUX79e64ODY0
NSsHlKPlelEEx6KFiPMuUU6EJvSKtHTNBMBoi1OLGpi+WvEXtaJeSGJU7sd0b6sX
IpgXR18o7QOJsP5C1WXzpTAJm9xqffyZ86+MDaBuUlOhMLBnO2f09TIzGIwWRgcu
bn8/Z9VpHK2O5Gd/x9b4wXzD2CVXXyEitDy69n5FrsiCHfBEWHZdqQeTxkX5OdO6
VzcXzOtpa/gDG4IctEpgwLEMzb/xmM3WLE7OhCjfzQq5ZmPjFNeSzltDGsznzX+k
w9jqQVvR7Rgile96zquTsJZkvPP5vmo9esAbVuc2tjyZIDVxXxc9oBb4dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2ZC2efVM+q9x9plFP70Dvm7NEHMB8GA1UdIwQY
MBaAFKVUFgnNlHvt/JkSWEADAQij8UHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFZRV0NjMlVlLTM4bVJKWVFBTUJDS1B4UWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8wNGEzYzQtMGQ4OC00OGU3LTg0ZGUt
NTRjMmMwY2FiN2MzLzEvcFZRV0NjMlVlLTM4bVJKWVFBTUJDS1B4UWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8wNGEzYzQtMGQ4OC00OGU3LTg0ZGUtNTRjMmMwY2FiN2Mz
LzEvcFZRV0NjMlVlLTM4bVJKWVFBTUJDS1B4UWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQvapvzH
2hQfzh2MfWHr5Y7yIw/AKw9yte8mU/N1YfeYWnz4RguB2TXmlrIe8Zb24lWGTioP
j+6qRkovbJBBZHiVmmcis1XkYsxTAykpZs62F8hVUPrCE6mE5VGiaB5OYNAOZMe6
KUjvc7muS49zjS8+caYWuSxUMImVJfPVjDqlpeZxJu5SOBVnrpVor8o103SyHUNu
ieS+PmKWnILiDZAdMByPOYiuRMLtUpNLmjyJ6oTaZmh0TIEtB1e5V5TUiT7mxaqj
iqptNLSMy9HhCN6cU45mB+pj8RCg+foPc6OWowQ4DRgvqMv422xdJMFsgyAM9RBp
hmA6lX2NvRblBQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:24:09 2026 by rpki-client