Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier: BSe9cTKpNxT9rFaiY6dMKRZdXAJAY/bTURePH70RSKg=
Subject key identifier: 0A:89:A2:30:2A:F6:76:81:50:0B:2A:81:48:56:AD:C5:42:9A:8B:B8
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial: 019DA378F9DCE5DA7F7F8D411C4EE58C5BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number: 04F5
Signing time: Sun 19 Apr 2026 02:01:47 +0000
Manifest this update: Sun 19 Apr 2026 02:01:47 +0000
Manifest next update: Mon 20 Apr 2026 02:01:47 +0000
Files and hashes: 1: Tcg_tO4TH6VzGp-S2NuzlB5WECE.roa (hash: vf8tQnW7oqoTXI/ZHAP1eVwRqXSdr72IdtoqliIf4Ys=)
2: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: oZ8Dw3tewBNwZJEqzmQYar91xLPej+XUh2G6IqM0Y0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:f9:dc:e5:da:7f:7f:8d:41:1c:4e:e5:8c:5b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Validity
Not Before: Apr 19 02:01:47 2026 GMT
Not After : Apr 20 02:01:47 2026 GMT
Subject: CN=0a89a2302af67681500b2a814856adc5429a8bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:32:93:f2:1a:1d:5c:c0:74:b0:43:62:99:
3a:c1:f3:12:17:c8:e4:26:9c:c9:18:a5:9e:89:ce:
59:11:b5:98:f0:53:4d:f5:7f:9b:af:0c:95:57:e3:
12:8c:48:87:ca:4d:46:ac:4e:86:fb:c3:da:df:dd:
d7:38:94:23:05:94:4a:da:d7:f6:75:7d:10:ec:e5:
c5:c1:8a:58:fe:b9:79:43:2c:27:63:59:5c:dc:11:
b8:88:29:3f:1e:47:15:e4:e8:12:a7:1d:25:71:97:
91:20:8c:28:b7:ca:ff:06:cc:c1:c6:5f:18:74:05:
fa:9b:34:22:b8:80:ea:f4:b7:73:20:40:31:d2:8b:
70:88:41:82:17:18:78:3c:33:05:db:a5:48:1e:73:
d3:c7:ab:98:0b:22:29:31:25:4c:ce:08:98:86:82:
a6:71:8e:19:14:cf:c2:0b:51:18:0b:8d:ac:ae:cb:
e0:10:5c:56:17:3f:22:a9:ca:5f:52:d0:46:30:ca:
2b:2b:55:02:51:fb:80:43:87:e5:da:f7:75:85:e9:
63:31:a6:cf:25:75:91:66:ca:51:fa:89:fc:f6:91:
e9:55:03:f5:07:b1:aa:e9:ea:fe:e8:ad:40:db:f4:
5d:f3:f4:3d:3f:b3:c7:00:29:c5:5a:b5:2e:d3:42:
9a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:89:A2:30:2A:F6:76:81:50:0B:2A:81:48:56:AD:C5:42:9A:8B:B8
X509v3 Authority Key Identifier:
keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:30:72:dd:c0:f2:7f:ca:ef:27:f8:9d:fc:6e:b4:a9:c0:8b:
49:6a:46:27:b7:f5:f4:93:ab:6f:97:81:b0:f8:c5:9b:77:35:
9f:a1:fa:e7:97:c6:93:f1:e7:d3:c0:4e:56:e5:72:6d:64:f2:
a5:86:e0:83:a2:b2:92:ac:7e:9a:50:57:fe:f4:a0:22:e5:a5:
84:ee:08:63:ca:df:1f:2d:44:6a:93:fe:3a:f6:4d:37:ee:71:
2e:d9:ed:0d:a2:d5:a7:18:90:9f:12:d5:39:37:85:8d:ec:11:
aa:2f:17:dc:00:bd:65:e9:71:4e:f1:03:1a:e6:58:6c:3a:fa:
fb:1c:4e:cc:9b:55:7f:5e:9d:23:57:d0:c0:38:dc:df:58:9a:
a5:d1:d6:ff:aa:ba:f8:92:fb:c9:db:de:91:66:08:a8:74:9a:
63:58:c5:d6:26:b1:28:e0:59:dc:77:98:44:38:a0:0f:2e:87:
cf:ce:cf:55:5c:a2:ae:57:3b:87:f5:d1:36:0f:be:c4:45:2c:
04:3d:a7:74:cd:7b:8f:a6:3e:01:bc:ba:70:d7:51:b0:f7:d8:
81:ce:bd:17:f3:71:d8:41:19:76:4d:0e:02:70:4a:05:fb:94:
c2:49:fe:7d:ef:a7:91:db:0e:24:41:60:31:9a:d4:c5:d0:83:
0e:f9:f9:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jePnc5dp/f41BHE7ljFv6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmODVlOTkwMzU0Mzk3ZTM2YzBjYTkwM2EwYzYyMGM3NzA5
ZWZkY2QwHhcNMjYwNDE5MDIwMTQ3WhcNMjYwNDIwMDIwMTQ3WjAzMTEwLwYDVQQD
EygwYTg5YTIzMDJhZjY3NjgxNTAwYjJhODE0ODU2YWRjNTQyOWE4YmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4Eyk/IaHVzAdLBDYpk6wfMSF8jk
JpzJGKWeic5ZEbWY8FNN9X+brwyVV+MSjEiHyk1GrE6G+8Pa393XOJQjBZRK2tf2
dX0Q7OXFwYpY/rl5QywnY1lc3BG4iCk/HkcV5OgSpx0lcZeRIIwot8r/BszBxl8Y
dAX6mzQiuIDq9LdzIEAx0otwiEGCFxh4PDMF26VIHnPTx6uYCyIpMSVMzgiYhoKm
cY4ZFM/CC1EYC42srsvgEFxWFz8iqcpfUtBGMMorK1UCUfuAQ4fl2vd1heljMabP
JXWRZspR+on89pHpVQP1B7Gq6er+6K1A2/Rd8/Q9P7PHACnFWrUu00KaoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqJojAq9naBUAsqgUhWrcVCmou4MB8GA1UdIwQY
MBaAFH+F6ZA1Q5fjbAypA6DGIMdwnv3NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEt
OGM5ZDU4MjNiYWQ5LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEtOGM5ZDU4MjNiYWQ5
LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTBy3cDy
f8rvJ/id/G60qcCLSWpGJ7f19JOrb5eBsPjFm3c1n6H655fGk/Hn08BOVuVybWTy
pYbgg6Kykqx+mlBX/vSgIuWlhO4IY8rfHy1EapP+OvZNN+5xLtntDaLVpxiQnxLV
OTeFjewRqi8X3AC9ZelxTvEDGuZYbDr6+xxOzJtVf16dI1fQwDjc31iapdHW/6q6
+JL7ydvekWYIqHSaY1jF1iaxKOBZ3HeYRDigDy6Hz87PVVyirlc7h/XRNg++xEUs
BD2ndM17j6Y+Aby6cNdRsPfYgc69F/Nx2EEZdk0OAnBKBfuUwkn+fe+nkdsOJEFg
MZrUxdCDDvn5Ow==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:43 2026 by rpki-client