Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: DXDyhxQoEB9D8r5rCapxxCdIIsaeMRv1SLq+mVfTd04=
Subject key identifier: A0:D0:FF:A6:39:13:5A:67:05:09:DA:18:D0:FA:CE:31:F3:CA:8F:04
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 019D9818FB307831357D21B2AA192139F269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 0FCF
Signing time: Thu 16 Apr 2026 21:01:07 +0000
Manifest this update: Thu 16 Apr 2026 21:01:07 +0000
Manifest next update: Fri 17 Apr 2026 21:01:07 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: Hfh3sHbmVPpADq9LLzWUIWa0QNDdtXCilZS7w3MtlW4=)
2: C2p4m5oAHBR4b9U98n94_vKEpDw.roa (hash: k7x5kSsiwndiFj3n5RLjj9QM21o5JvrjtmVJtRBC0sk=)
3: _Swl5gHDR66TZCO_pkS1vQ9SqpA.roa (hash: 3hG7Kqg7tej55cxB4vcGvkTLY6M+LbT5b2wG9YFhS4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:fb:30:78:31:35:7d:21:b2:aa:19:21:39:f2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Apr 16 21:01:07 2026 GMT
Not After : Apr 17 21:01:07 2026 GMT
Subject: CN=a0d0ffa639135a670509da18d0face31f3ca8f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:a0:90:3e:eb:76:39:51:2a:c5:4c:64:d0:
cd:ce:48:d7:b3:41:13:0e:63:00:53:60:bd:79:11:
a5:e5:df:3d:50:44:5f:c1:80:83:3d:46:dd:92:a8:
78:48:bd:15:f8:35:1c:4a:c3:fb:2c:d5:ae:c6:83:
55:37:97:f6:4b:62:bf:35:45:47:ba:99:53:9d:32:
31:74:5b:c0:c4:ae:d0:2a:ea:d5:04:bd:b2:17:b6:
35:b3:9d:a5:9b:52:e6:fa:0e:8b:6c:25:e7:1b:f4:
24:55:a8:de:95:93:44:8c:d5:64:70:e7:30:e3:64:
92:0b:a3:e7:65:35:4d:b5:c1:0a:8b:25:82:07:e5:
04:ea:69:3e:18:6d:45:63:80:75:59:39:5f:8d:65:
79:d2:a2:30:28:b4:7e:82:0b:49:f1:a5:4d:c9:34:
c7:4a:5a:8c:7b:2b:15:48:72:fc:64:a0:03:60:1f:
5b:84:90:02:2f:ce:4d:48:b5:f3:81:43:9a:d6:34:
38:d5:dd:51:33:02:67:c5:ec:a9:44:5c:b7:30:6e:
ba:cc:4e:16:d8:17:40:dc:5d:d8:21:d5:74:08:f4:
01:d2:6e:5c:79:b1:0d:07:64:2f:3a:20:c9:a4:ea:
52:26:ce:b6:eb:9c:9d:b3:6d:6f:d6:e0:a3:23:0c:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D0:FF:A6:39:13:5A:67:05:09:DA:18:D0:FA:CE:31:F3:CA:8F:04
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6a:29:a6:79:d4:f6:22:ed:9b:b6:ad:a9:14:61:9b:ed:09:
a8:48:d6:b9:81:4d:a7:b8:48:ab:cf:b9:c6:e7:3e:e6:ec:70:
c5:55:5f:dd:a0:e9:91:50:32:d2:cc:2f:47:9e:6a:cc:ee:33:
67:33:e0:ff:94:9b:70:12:a3:13:83:c9:a5:b7:79:25:3f:2e:
68:8b:9b:09:90:d1:d0:fb:5a:dc:be:94:e2:d5:01:91:f7:35:
c9:2c:12:96:08:cd:34:a8:c1:e4:e3:b2:34:c3:0a:1e:71:bf:
eb:51:e0:52:9f:34:b3:21:df:c9:73:cb:55:cd:3b:85:0b:49:
60:4b:ca:94:75:23:85:2d:3f:71:03:95:06:3d:af:bc:50:29:
da:69:cb:c3:e8:8c:2c:1d:a7:86:43:35:84:6c:81:41:17:22:
84:71:a3:6a:fa:df:e2:b6:f5:6c:e1:6f:df:b4:9d:24:a7:78:
fc:9e:54:2c:7f:e5:0d:7b:e7:93:a8:b9:83:71:73:63:e8:1f:
3a:01:85:d6:8d:e7:42:07:d0:4a:ea:8f:73:61:a1:40:d1:00:
d6:57:17:1e:f2:03:fe:37:0a:c1:b5:ac:16:a8:dc:cb:5a:bc:
87:5a:00:44:4a:4a:a0:ca:41:64:88:13:43:bc:d7:5b:3e:61:
74:37:4c:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGPsweDE1fSGyqhkhOfJpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjcwNzA2ZjZjMGNmYmQ5YzczYTdmM2Q4MzAyMzI0MGE0
MmY1MGQwHhcNMjYwNDE2MjEwMTA3WhcNMjYwNDE3MjEwMTA3WjAzMTEwLwYDVQQD
EyhhMGQwZmZhNjM5MTM1YTY3MDUwOWRhMThkMGZhY2UzMWYzY2E4ZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHmgkD7rdjlRKsVMZNDNzkjXs0ET
DmMAU2C9eRGl5d89UERfwYCDPUbdkqh4SL0V+DUcSsP7LNWuxoNVN5f2S2K/NUVH
uplTnTIxdFvAxK7QKurVBL2yF7Y1s52lm1Lm+g6LbCXnG/QkVajelZNEjNVkcOcw
42SSC6PnZTVNtcEKiyWCB+UE6mk+GG1FY4B1WTlfjWV50qIwKLR+ggtJ8aVNyTTH
SlqMeysVSHL8ZKADYB9bhJACL85NSLXzgUOa1jQ41d1RMwJnxeypRFy3MG66zE4W
2BdA3F3YIdV0CPQB0m5cebENB2QvOiDJpOpSJs6265yds21v1uCjIwzTmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDQ/6Y5E1pnBQnaGND6zjHzyo8EMB8GA1UdIwQY
MBaAFOP3Bwb2wM+9nHOn89gwIyQKQvUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTIt
MDlmZjc5MzA4YmJlLzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTItMDlmZjc5MzA4YmJl
LzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2oppnnU
9iLtm7atqRRhm+0JqEjWuYFNp7hIq8+5xuc+5uxwxVVf3aDpkVAy0swvR55qzO4z
ZzPg/5SbcBKjE4PJpbd5JT8uaIubCZDR0Pta3L6U4tUBkfc1ySwSlgjNNKjB5OOy
NMMKHnG/61HgUp80syHfyXPLVc07hQtJYEvKlHUjhS0/cQOVBj2vvFAp2mnLw+iM
LB2nhkM1hGyBQRcihHGjavrf4rb1bOFv37SdJKd4/J5ULH/lDXvnk6i5g3FzY+gf
OgGF1o3nQgfQSuqPc2GhQNEA1lcXHvID/jcKwbWsFqjcy1q8h1oAREpKoMpBZIgT
Q7zXWz5hdDdMKg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:24:35 2026 by rpki-client