Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
File: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json)
Hash identifier: 897GzXRL4CvQf21kZYWMcTArgc+TTq7ebaW3+BEg/ns=
Subject key identifier: E9:9C:B8:B9:9F:48:70:04:F3:6D:F1:DF:DA:AE:3E:B7:D4:D3:46:8F
Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
Certificate issuer: /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Certificate serial: 019DA3418C2F9A1DE571A637125E2D3050E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
Manifest number: 17C1
Signing time: Sun 19 Apr 2026 01:01:15 +0000
Manifest this update: Sun 19 Apr 2026 01:01:15 +0000
Manifest next update: Mon 20 Apr 2026 01:01:15 +0000
Files and hashes: 1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: A3GPr1GE7kdGM7uX2yRJEcdOvkJ16+mF1RH9+HUlSvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:8c:2f:9a:1d:e5:71:a6:37:12:5e:2d:30:50:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Validity
Not Before: Apr 19 01:01:15 2026 GMT
Not After : Apr 20 01:01:15 2026 GMT
Subject: CN=e99cb8b99f487004f36df1dfdaae3eb7d4d3468f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:78:30:3e:59:84:a0:de:04:6e:e6:81:9a:
d3:76:3a:0d:ba:b7:7c:75:4e:f5:8f:95:0f:18:9e:
de:97:17:1f:9c:01:fe:a8:2d:c8:22:8a:de:3c:16:
37:bd:9b:04:26:14:96:6f:8d:4d:ed:21:e5:83:de:
e6:51:00:59:fb:61:26:98:f7:73:3e:f7:f3:3d:ae:
c6:64:0d:da:b5:e5:d6:50:d6:a0:a8:72:24:1e:9b:
fc:58:3a:78:72:05:fe:81:1f:ab:04:ed:4b:c6:fb:
49:43:2f:56:b5:c7:85:cd:22:01:1f:9a:e2:e6:45:
b9:97:f4:d7:b7:e0:fe:12:3e:ed:9c:2e:6e:f7:6b:
a7:c6:42:30:d7:75:f3:01:b0:f2:6b:cd:cc:ac:76:
a5:62:2a:ea:54:ef:b6:c7:97:08:52:a9:bf:60:c2:
6a:45:8b:24:b5:e8:a7:4d:82:60:a6:94:46:0d:80:
6a:ce:dd:a4:0d:05:ca:ea:7c:14:9f:82:f3:0c:3e:
44:c9:3a:2c:20:28:69:b1:f2:ce:da:8d:60:80:b3:
dd:c4:bd:dd:d4:d5:18:2b:26:3b:63:95:1c:96:ff:
7c:cc:6f:80:a1:cc:b1:3b:ac:5a:c6:78:21:a1:9c:
7d:53:92:f0:b9:87:89:a6:ef:da:23:b1:68:75:07:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9C:B8:B9:9F:48:70:04:F3:6D:F1:DF:DA:AE:3E:B7:D4:D3:46:8F
X509v3 Authority Key Identifier:
keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ef:6e:9f:cc:c5:78:85:0d:8e:a5:8c:29:62:d1:f7:a3:93:
93:da:89:97:83:72:2a:98:c0:af:ad:a1:a9:f6:f9:6a:74:ac:
26:3d:2a:40:ae:c8:38:58:bc:62:62:24:0e:79:91:25:15:9a:
35:ae:60:01:91:e2:6f:4f:99:4c:21:8b:3a:ad:96:95:00:c3:
61:9c:3b:14:cd:f8:3e:90:d3:7c:61:1d:33:83:22:c2:d9:ea:
a5:43:e2:14:f4:76:ba:25:8c:e6:9e:33:18:4e:88:e7:a4:b5:
f0:22:52:c8:af:85:99:9c:1d:c2:91:9d:94:cd:e5:62:b8:b4:
67:2c:01:91:3d:c8:7f:53:33:f9:b6:ba:0b:62:81:f8:23:2a:
ee:e5:83:e3:1d:2e:94:36:3c:ee:fd:28:2c:d6:98:86:f1:88:
af:6d:15:03:e5:08:49:8d:31:14:6c:f2:7f:c7:9e:a5:6d:af:
39:da:2b:1d:41:e8:93:56:46:05:a2:3f:4d:ae:4a:d6:11:c4:
8b:18:55:fc:e6:dd:eb:58:b1:78:f1:50:88:ba:86:d8:d4:52:
f2:8f:8e:c8:8b:23:4a:dc:fe:76:13:a7:5b:d3:6d:6a:b3:29:
f4:48:b1:30:96:9e:72:76:7d:a6:f5:ee:52:65:8f:61:b3:48:
2f:da:42:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jQYwvmh3lcaY3El4tMFDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTUwM2IxMWI5OGE1ZjU4ZDRmNTVlZmFlYTNhZDJiMjFh
YWVjODMwHhcNMjYwNDE5MDEwMTE1WhcNMjYwNDIwMDEwMTE1WjAzMTEwLwYDVQQD
EyhlOTljYjhiOTlmNDg3MDA0ZjM2ZGYxZGZkYWFlM2ViN2Q0ZDM0NjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXx4MD5ZhKDeBG7mgZrTdjoNurd8
dU71j5UPGJ7elxcfnAH+qC3IIorePBY3vZsEJhSWb41N7SHlg97mUQBZ+2EmmPdz
PvfzPa7GZA3ateXWUNagqHIkHpv8WDp4cgX+gR+rBO1LxvtJQy9WtceFzSIBH5ri
5kW5l/TXt+D+Ej7tnC5u92unxkIw13XzAbDya83MrHalYirqVO+2x5cIUqm/YMJq
RYskteinTYJgppRGDYBqzt2kDQXK6nwUn4LzDD5EyTosIChpsfLO2o1ggLPdxL3d
1NUYKyY7Y5Uclv98zG+AocyxO6xaxnghoZx9U5LwuYeJpu/aI7FodQfgfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmcuLmfSHAE823x39quPrfU00aPMB8GA1UdIwQY
MBaAFOFVA7EbmKX1jU9V766jrSshquyDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hMWI3NjEtNGM3ZC00ZGI5LWFlYzYt
MzVhNWEyNWYxNDAxLzEvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hMWI3NjEtNGM3ZC00ZGI5LWFlYzYtMzVhNWEyNWYxNDAx
LzEvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGe9un8zF
eIUNjqWMKWLR96OTk9qJl4NyKpjAr62hqfb5anSsJj0qQK7IOFi8YmIkDnmRJRWa
Na5gAZHib0+ZTCGLOq2WlQDDYZw7FM34PpDTfGEdM4MiwtnqpUPiFPR2uiWM5p4z
GE6I56S18CJSyK+FmZwdwpGdlM3lYri0ZywBkT3If1Mz+ba6C2KB+CMq7uWD4x0u
lDY87v0oLNaYhvGIr20VA+UISY0xFGzyf8eepW2vOdorHUHok1ZGBaI/Ta5K1hHE
ixhV/Obd61ixePFQiLqG2NRS8o+OyIsjStz+dhOnW9NtarMp9EixMJaecnZ9pvXu
UmWPYbNIL9pCnQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:06 2026 by rpki-client