Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier: t21PWMazN/y2idVnm5+GuYVy4aQPTL+eLUUGuYBBlQw=
Subject key identifier: F0:33:40:1B:18:A2:47:3E:B9:CA:72:4D:BA:9B:3D:DC:0A:59:53:24
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer: /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial: 019D98F495CFB929EC9C3284423FB46E4874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:00:59 +0000
Manifest this update: Fri 17 Apr 2026 01:00:59 +0000
Manifest next update: Sat 18 Apr 2026 01:00:59 +0000
Files and hashes: 1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: Kq5Jc7zH69QKNT3bPYfHXTVNMvpPuOvDun8cjAZg5Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:95:cf:b9:29:ec:9c:32:84:42:3f:b4:6e:48:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Validity
Not Before: Apr 17 01:00:59 2026 GMT
Not After : Apr 18 01:00:59 2026 GMT
Subject: CN=f033401b18a2473eb9ca724dba9b3ddc0a595324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:d2:61:06:32:15:77:2d:f1:85:e9:3c:73:
7f:16:b2:c9:10:6b:9d:4b:b6:a6:5d:7f:10:43:93:
78:b6:0d:89:f1:e9:7f:89:95:1b:d0:72:d2:14:dd:
86:14:db:21:69:77:63:7a:c4:96:2e:70:78:2a:23:
92:7d:84:b2:84:5d:9f:b6:d9:e7:e7:f0:85:1a:b8:
10:dc:dd:5c:94:5c:ba:34:8d:02:c1:41:22:4b:3f:
10:4c:d0:56:90:b6:f0:f3:8b:d8:dc:b8:93:0d:46:
cd:93:a3:67:25:0d:ed:b2:2c:94:fd:2c:e2:a1:01:
ec:14:fb:09:87:b6:ba:04:00:50:92:e6:43:64:c1:
7e:f1:21:72:7b:95:df:35:2e:1f:a9:a2:3d:a1:9c:
26:7e:68:d2:92:44:02:1f:43:cd:5b:5b:05:e3:95:
c0:32:7d:2e:ba:4b:31:90:da:3a:51:a9:d6:fd:89:
01:55:54:c7:78:03:18:c0:84:77:22:7d:81:26:3b:
66:f0:1c:49:3e:87:ce:59:a7:89:bd:6c:36:a8:c1:
d0:00:5c:56:ca:46:84:86:25:68:25:62:d5:55:bf:
0c:fb:b4:6c:71:f6:29:54:7a:56:82:2b:19:9e:3d:
e4:9e:09:00:9f:ab:22:20:d4:81:b1:bd:d9:a1:9f:
79:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:33:40:1B:18:A2:47:3E:B9:CA:72:4D:BA:9B:3D:DC:0A:59:53:24
X509v3 Authority Key Identifier:
keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:92:ad:74:c0:64:97:c0:f8:ec:cc:ff:98:d8:74:74:f2:16:
dc:d2:e7:c9:79:a9:fc:3b:6b:ff:67:f4:0e:d5:11:fb:08:4b:
a6:2b:bc:ab:94:1b:3a:94:57:d1:48:ea:2b:49:12:22:c5:6d:
ea:f2:6c:70:4a:55:75:99:3a:af:3c:1f:52:6b:7b:b4:cb:97:
36:be:34:cf:b5:99:8c:35:88:f9:ac:3f:96:56:01:40:dd:3c:
73:07:98:f5:9c:81:84:4c:cd:77:2a:93:91:79:2d:4a:e8:90:
94:c8:51:1c:b1:b8:97:c4:de:8f:69:43:30:f4:7e:dd:40:77:
c1:ad:b5:6b:e5:b4:fd:c5:50:73:ef:a2:d5:96:c6:0c:92:34:
70:dc:99:1d:bb:e5:19:e4:38:42:d2:5b:a3:d9:ec:69:1e:b5:
7e:37:4a:19:26:b8:88:b5:44:b0:a3:05:2d:b9:63:16:fa:33:
0b:db:41:9d:cd:0b:43:8c:e6:db:dc:7b:4c:42:ad:02:1a:e4:
96:20:27:6a:c8:96:26:63:8a:ce:c9:e9:bd:19:16:e7:26:d1:
db:ba:0f:2d:c1:90:ae:81:fb:77:1c:a3:47:b3:21:ac:af:be:
55:65:b0:d8:e5:8b:53:01:85:5a:61:5f:d9:55:0c:cf:bc:35:
2d:73:d8:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9JXPuSnsnDKEQj+0bkh0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjE1YmM1YjkwMjE5OWViODZkNjA3OGM0ODJlZGVkZDNk
ZGRlYjQwHhcNMjYwNDE3MDEwMDU5WhcNMjYwNDE4MDEwMDU5WjAzMTEwLwYDVQQD
EyhmMDMzNDAxYjE4YTI0NzNlYjljYTcyNGRiYTliM2RkYzBhNTk1MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyHSYQYyFXct8YXpPHN/FrLJEGud
S7amXX8QQ5N4tg2J8el/iZUb0HLSFN2GFNshaXdjesSWLnB4KiOSfYSyhF2fttnn
5/CFGrgQ3N1clFy6NI0CwUEiSz8QTNBWkLbw84vY3LiTDUbNk6NnJQ3tsiyU/Szi
oQHsFPsJh7a6BABQkuZDZMF+8SFye5XfNS4fqaI9oZwmfmjSkkQCH0PNW1sF45XA
Mn0uuksxkNo6UanW/YkBVVTHeAMYwIR3In2BJjtm8BxJPofOWaeJvWw2qMHQAFxW
ykaEhiVoJWLVVb8M+7RscfYpVHpWgisZnj3kngkAn6siINSBsb3ZoZ95uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAzQBsYokc+ucpyTbqbPdwKWVMkMB8GA1UdIwQY
MBaAFOGxW8W5AhmeuG1geMSC7e3T3d60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJGYnhia0NHWjY0YldCNHhJTHQ3ZFBkM3JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mNmQ2NTUtNzNlYS00MjJhLWE5NjMt
NDFhOTgwMDFjZjJiLzEvNGJGYnhia0NHWjY0YldCNHhJTHQ3ZFBkM3JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mNmQ2NTUtNzNlYS00MjJhLWE5NjMtNDFhOTgwMDFjZjJi
LzEvNGJGYnhia0NHWjY0YldCNHhJTHQ3ZFBkM3JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZKtdMBk
l8D47Mz/mNh0dPIW3NLnyXmp/Dtr/2f0DtUR+whLpiu8q5QbOpRX0UjqK0kSIsVt
6vJscEpVdZk6rzwfUmt7tMuXNr40z7WZjDWI+aw/llYBQN08cweY9ZyBhEzNdyqT
kXktSuiQlMhRHLG4l8Tej2lDMPR+3UB3wa21a+W0/cVQc++i1ZbGDJI0cNyZHbvl
GeQ4QtJbo9nsaR61fjdKGSa4iLVEsKMFLbljFvozC9tBnc0LQ4zm29x7TEKtAhrk
liAnasiWJmOKzsnpvRkW5ybR27oPLcGQroH7dxyjR7MhrK++VWWw2OWLUwGFWmFf
2VUMz7w1LXPYKA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:37 2026 by rpki-client