
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File: u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier: WZworEtaYqD/jEG2kEM5fJc+tQBJxcWCPKS0GctjXkA=
Subject key identifier: 7E:F2:4A:A8:77:A4:EA:1F:42:C0:4A:62:BD:3C:8B:E9:D9:7F:A3:0B
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer: /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial: 019D992B77798242D523F65CD6E06A0E7AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number: 12BB
Signing time: Fri 17 Apr 2026 02:00:55 +0000
Manifest this update: Fri 17 Apr 2026 02:00:55 +0000
Manifest next update: Sat 18 Apr 2026 02:00:55 +0000
Files and hashes: 1: e7qW7ktzFbhQzttwga3E9zXgNCo.roa (hash: ROhx5VIRKogH2P7o1oUw2zoKl8d9a5YmW7HEMyeGDjI=)
2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: E9lqAUmkjw9DCCeHCaSYOgfqXF+CEETcx3mm0iYKD9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:77:79:82:42:d5:23:f6:5c:d6:e0:6a:0e:7a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Validity
Not Before: Apr 17 02:00:55 2026 GMT
Not After : Apr 18 02:00:55 2026 GMT
Subject: CN=7ef24aa877a4ea1f42c04a62bd3c8be9d97fa30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:9c:bc:6a:ad:34:fc:48:9a:14:54:c9:74:
d4:99:fe:63:27:44:7f:9d:3b:42:8f:64:04:a0:2a:
f5:32:52:07:85:d7:d7:0e:81:67:0d:c7:f7:a2:5d:
7e:ab:62:da:74:44:bf:9f:a8:30:04:3c:8e:93:10:
04:aa:2a:7e:c2:d5:b9:21:31:0a:2e:36:2b:7b:2d:
7c:76:fd:25:f6:d4:79:ea:29:96:f6:bc:22:10:ec:
ca:8c:6d:6f:9e:68:da:5c:9f:ea:12:00:7f:90:e0:
83:ca:fd:ff:65:6d:1c:58:2e:af:2b:b2:cd:8a:80:
0a:60:3d:34:64:26:f1:a9:1b:74:9e:49:44:6f:0a:
43:f8:50:b1:a1:1f:ed:78:fd:0f:aa:01:5f:bc:55:
97:00:0c:9a:c1:dd:73:b8:f9:3b:cc:06:4d:3c:38:
2a:85:e6:66:7f:41:f6:da:55:83:b3:03:f3:0e:c8:
ad:cb:1d:38:9e:dc:db:f9:71:10:f6:63:71:a7:f5:
04:95:6f:86:85:d0:2c:b7:eb:18:84:84:e0:cc:12:
1a:63:69:07:c7:a8:51:ee:3e:80:e9:c7:54:2e:41:
b4:43:16:ac:28:e4:11:65:b8:18:da:c2:4f:b2:62:
b3:40:dd:ad:74:c2:69:02:d5:d4:fb:ef:65:c8:8b:
8a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F2:4A:A8:77:A4:EA:1F:42:C0:4A:62:BD:3C:8B:E9:D9:7F:A3:0B
X509v3 Authority Key Identifier:
keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:6e:02:76:5f:33:99:80:94:dc:4d:48:3d:d8:9f:0f:f8:45:
15:c3:9a:f1:4b:4d:aa:47:9c:c9:c4:ad:40:87:53:69:64:ff:
0b:65:a8:48:08:42:a2:80:43:42:35:26:7c:c1:e2:ac:14:a4:
18:c0:b9:8c:85:8b:b6:88:62:8f:fe:54:9b:b5:b6:9c:f8:1a:
bc:2e:c6:bb:ca:fc:81:20:3d:ec:42:13:44:4f:bf:59:3a:81:
2a:06:ff:04:7e:15:22:56:8a:fb:a2:61:cb:30:95:b0:3e:38:
13:61:e3:9c:35:5f:dd:d9:c7:8c:d3:fc:5e:7e:bd:79:d9:44:
c7:55:04:4d:30:e8:b8:52:60:9e:d3:ec:38:e9:61:fc:ac:33:
4d:1c:06:44:d3:b5:ae:0e:95:b4:cf:1d:f9:b5:45:3a:73:a5:
26:75:58:3b:ed:7d:77:66:02:15:78:74:71:d1:20:81:01:a5:
b2:97:42:13:16:f4:0a:fb:6e:7b:94:09:b1:4c:fc:08:a0:bf:
5a:de:eb:66:b1:a9:9e:62:51:a6:d8:b5:04:f6:d9:01:aa:2e:
d3:a7:b1:71:c0:6b:0a:7d:e7:ab:0e:91:16:f2:c6:12:87:09:
5e:00:4d:31:69:cb:73:4e:d1:e9:7a:03:62:a7:ec:49:af:ec:
36:e3:a1:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK3d5gkLVI/Zc1uBqDnr2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODJiOGQzYzFiMGY3OGMzYTE5ZjYxNjRlYjI4MjFlMjMw
Y2ZlNGUwHhcNMjYwNDE3MDIwMDU1WhcNMjYwNDE4MDIwMDU1WjAzMTEwLwYDVQQD
Eyg3ZWYyNGFhODc3YTRlYTFmNDJjMDRhNjJiZDNjOGJlOWQ5N2ZhMzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR6cvGqtNPxImhRUyXTUmf5jJ0R/
nTtCj2QEoCr1MlIHhdfXDoFnDcf3ol1+q2LadES/n6gwBDyOkxAEqip+wtW5ITEK
LjYrey18dv0l9tR56imW9rwiEOzKjG1vnmjaXJ/qEgB/kOCDyv3/ZW0cWC6vK7LN
ioAKYD00ZCbxqRt0nklEbwpD+FCxoR/teP0PqgFfvFWXAAyawd1zuPk7zAZNPDgq
heZmf0H22lWDswPzDsityx04ntzb+XEQ9mNxp/UElW+GhdAst+sYhITgzBIaY2kH
x6hR7j6A6cdULkG0QxasKOQRZbgY2sJPsmKzQN2tdMJpAtXU++9lyIuK/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7ySqh3pOofQsBKYr08i+nZf6MLMB8GA1UdIwQY
MBaAFLuCuNPBsPeMOhn2Fk6ygh4jDP5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQt
YTEzZjQ0ODFiYzZjLzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yODBjYTktZjdkOC00ZmZhLWJhMzQtYTEzZjQ0ODFiYzZj
LzEvdTRLNDA4R3c5NHc2R2ZZV1RyS0NIaU1NX2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvG4Cdl8z
mYCU3E1IPdifD/hFFcOa8UtNqkecycStQIdTaWT/C2WoSAhCooBDQjUmfMHirBSk
GMC5jIWLtohij/5Um7W2nPgavC7Gu8r8gSA97EITRE+/WTqBKgb/BH4VIlaK+6Jh
yzCVsD44E2HjnDVf3dnHjNP8Xn69edlEx1UETTDouFJgntPsOOlh/KwzTRwGRNO1
rg6VtM8d+bVFOnOlJnVYO+19d2YCFXh0cdEggQGlspdCExb0Cvtue5QJsUz8CKC/
Wt7rZrGpnmJRpti1BPbZAaou06exccBrCn3nqw6RFvLGEocJXgBNMWnLc07R6XoD
YqfsSa/sNuOhpw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:07:20 2026 by rpki-client