Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
File: 4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json)
Hash identifier: UIHFk223SaFI3V7TgwOe4mYc7DCXh2kZAJJiKcJ+XPA=
Subject key identifier: 33:FD:C2:9A:15:B6:44:53:98:C0:48:7B:E7:90:4F:B6:12:ED:CA:34
Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
Certificate issuer: /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Certificate serial: 019D9BBEF4177F7C7E875F157061143B1239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
Manifest number: 03A8
Signing time: Fri 17 Apr 2026 14:01:15 +0000
Manifest this update: Fri 17 Apr 2026 14:01:15 +0000
Manifest next update: Sat 18 Apr 2026 14:01:15 +0000
Files and hashes: 1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: kj1hcy1jltHM+ytKi4/LD85a2BZGV1IiccjFyzcK0HI=)
2: valzYXczYY3RJ6xb_g__yzBDYXU.roa (hash: bbU6NTwqQ5O7qErPjl86r7BZfQa4g2RHPM0gnU6rCb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:f4:17:7f:7c:7e:87:5f:15:70:61:14:3b:12:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Validity
Not Before: Apr 17 14:01:15 2026 GMT
Not After : Apr 18 14:01:15 2026 GMT
Subject: CN=33fdc29a15b6445398c0487be7904fb612edca34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:1d:5a:6b:a0:dd:71:3b:e3:61:40:83:df:
09:7e:98:e2:95:3e:b1:cf:de:2e:1d:9d:3e:a4:86:
3d:6c:1a:20:58:ba:d8:9a:bc:9e:01:89:7f:77:cf:
a3:d0:fb:47:00:6d:36:c8:50:56:61:c5:88:63:76:
75:51:a3:a1:8c:22:e3:07:1f:c1:19:d4:67:65:26:
4e:f4:03:44:00:9b:52:4b:fd:70:0c:57:55:68:9d:
94:9a:6c:e2:10:5b:d5:fa:99:7c:c0:7c:5e:74:af:
ab:50:4d:d8:ad:93:89:ed:9b:d8:3f:2e:3b:f6:91:
9d:81:36:61:2c:93:9a:30:ff:30:31:81:5e:52:5f:
ce:17:45:e4:c4:21:b9:43:24:0b:c0:e0:3e:26:d2:
67:51:cd:6c:b4:72:77:ff:48:ea:63:37:96:b0:e9:
7f:55:c9:13:53:92:0b:83:59:38:cd:78:42:76:65:
c7:0c:53:10:72:92:0b:af:97:23:16:17:e4:89:fa:
75:13:10:df:5c:a5:eb:fb:37:63:10:a0:83:41:22:
49:32:b6:2d:59:7f:ea:2c:be:fb:e8:11:f7:dc:ca:
6c:ce:7b:45:39:c6:04:a8:a3:55:c2:8a:4c:3a:09:
ff:d0:f3:6a:1b:17:fe:77:5b:33:eb:b7:df:c8:a6:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FD:C2:9A:15:B6:44:53:98:C0:48:7B:E7:90:4F:B6:12:ED:CA:34
X509v3 Authority Key Identifier:
keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:dc:6f:cf:e1:e0:c4:35:a0:3a:4a:7b:7c:18:5e:f1:a7:eb:
bf:b0:9d:d1:90:15:ec:fb:ae:de:5a:a7:fb:b5:0e:d4:47:88:
b0:e8:e8:5b:52:22:40:5f:7f:54:6f:b4:e6:d6:bc:02:75:0c:
c6:ff:37:a1:33:c3:26:64:a5:18:28:41:5c:40:88:78:4c:39:
49:5a:50:83:fb:89:0c:d6:3b:2f:8a:04:79:c6:cd:76:92:d7:
0c:f1:f1:da:8a:39:a8:77:af:ae:d0:8a:ba:85:43:7c:e1:29:
a6:cb:0f:35:1e:ea:2d:65:aa:f2:07:53:e8:23:0b:a3:dd:c8:
d2:e0:d5:a1:08:35:f6:fa:fa:27:6d:d2:11:c5:6d:32:ad:19:
0c:6c:13:f7:aa:52:e0:64:3e:12:a5:48:bd:21:6e:7f:19:22:
71:c1:61:7a:87:5e:47:ec:9b:fd:d2:d6:c9:f0:97:0a:05:c8:
30:fe:6c:35:a6:1f:68:82:f7:bf:9d:59:eb:5f:86:a1:2a:8e:
a6:93:fc:7b:04:b6:08:d3:5b:e6:42:81:ae:3b:00:65:cd:26:
e8:cb:2d:27:06:dc:d8:9a:f0:4f:6b:12:2b:93:12:3e:22:4c:
94:02:11:d5:fd:15:d1:0f:02:15:22:f3:0f:e1:74:69:10:46:
f0:e4:68:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvvQXf3x+h18VcGEUOxI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDE5NTYxNGVlZTRhMmRiYjUxZjViMjFlNjlkMTZjNGUx
NDQxYWYwHhcNMjYwNDE3MTQwMTE1WhcNMjYwNDE4MTQwMTE1WjAzMTEwLwYDVQQD
EygzM2ZkYzI5YTE1YjY0NDUzOThjMDQ4N2JlNzkwNGZiNjEyZWRjYTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo00dWmug3XE742FAg98JfpjilT6x
z94uHZ0+pIY9bBogWLrYmryeAYl/d8+j0PtHAG02yFBWYcWIY3Z1UaOhjCLjBx/B
GdRnZSZO9ANEAJtSS/1wDFdVaJ2UmmziEFvV+pl8wHxedK+rUE3YrZOJ7ZvYPy47
9pGdgTZhLJOaMP8wMYFeUl/OF0XkxCG5QyQLwOA+JtJnUc1stHJ3/0jqYzeWsOl/
VckTU5ILg1k4zXhCdmXHDFMQcpILr5cjFhfkifp1ExDfXKXr+zdjEKCDQSJJMrYt
WX/qLL776BH33MpszntFOcYEqKNVwopMOgn/0PNqGxf+d1sz67ffyKYKPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDP9wpoVtkRTmMBIe+eQT7YS7co0MB8GA1UdIwQY
MBaAFOLRlWFO7kotu1H1sh5p0WxOFEGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEt
NWRhYzYzNzg0MDU4LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEtNWRhYzYzNzg0MDU4
LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNxvz+Hg
xDWgOkp7fBhe8afrv7Cd0ZAV7Puu3lqn+7UO1EeIsOjoW1IiQF9/VG+05ta8AnUM
xv83oTPDJmSlGChBXECIeEw5SVpQg/uJDNY7L4oEecbNdpLXDPHx2oo5qHevrtCK
uoVDfOEppssPNR7qLWWq8gdT6CMLo93I0uDVoQg19vr6J23SEcVtMq0ZDGwT96pS
4GQ+EqVIvSFufxkiccFheodeR+yb/dLWyfCXCgXIMP5sNaYfaIL3v51Z61+GoSqO
ppP8ewS2CNNb5kKBrjsAZc0m6MstJwbc2JrwT2sSK5MSPiJMlAIR1f0V0Q8CFSLz
D+F0aRBG8ORoQg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:47:30 2026 by rpki-client