Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: zWXdzGD0uKwRgEvcc/cTCO7WK+nIfpysWw1Dxm9Xv9g=
Subject key identifier: 7A:EF:F1:E3:B5:F3:2F:BB:B6:A8:35:7C:F3:39:C4:E3:64:C8:72:22
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 019DA4538105A381F1DC7897921E7FF80892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 06:00:29 +0000
Manifest this update: Sun 19 Apr 2026 06:00:29 +0000
Manifest next update: Mon 20 Apr 2026 06:00:29 +0000
Files and hashes: 1: 33GSrldWWk3Y0zJgykFgXMqOFKQ.roa (hash: Vx7Lsmyrdo4DClh/Ecx+QsM7m1e5mNGcZKBAQoQZRYU=)
2: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: lJqBpT85WusFsTCN9ygEgV7sly4jCinOopbF6b88zZ8=)
3: drikzNt5D9jwedYli_IhOY-bx94.roa (hash: yqU3IH8u+p0CuFDMh436wHQcQ7bwqSkz3SbUHUvU7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:81:05:a3:81:f1:dc:78:97:92:1e:7f:f8:08:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Apr 19 06:00:29 2026 GMT
Not After : Apr 20 06:00:29 2026 GMT
Subject: CN=7aeff1e3b5f32fbbb6a8357cf339c4e364c87222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:6c:d2:f9:d1:51:6b:9f:6f:9d:31:60:6c:
54:e4:da:8e:c9:70:19:8e:06:c4:99:d5:29:57:e2:
f4:8e:d1:fa:7a:92:7d:6a:5c:01:4e:9c:eb:37:e4:
b6:bf:67:09:d6:ea:9e:ea:88:5d:6e:c1:03:ce:2d:
40:39:71:a6:dc:dc:b0:9a:25:2c:5f:39:3f:05:38:
3b:35:df:c1:c3:8f:11:7a:cc:49:c7:11:b2:1d:d2:
74:14:e6:db:85:da:db:27:d8:fd:ff:e8:9f:c4:4c:
48:a7:4c:ff:60:71:85:01:41:c7:5f:55:bf:d8:57:
10:1d:ce:10:cd:0e:22:9f:d0:96:02:01:46:59:ad:
6d:2d:7e:cb:2a:ac:2f:1c:06:cb:83:ec:23:e1:23:
4b:e5:fa:d8:44:4e:de:f9:e0:52:25:80:29:bb:c5:
aa:41:d3:85:f2:6a:32:b2:26:7c:3c:64:42:73:12:
cf:84:13:d1:39:0a:77:f0:c4:80:1b:84:34:b3:bc:
b3:5f:d8:c8:c1:de:ee:35:88:61:0e:c3:b2:e2:f1:
70:d3:83:12:82:98:ae:12:89:e0:68:0e:aa:0f:7b:
d6:2e:90:c3:8d:74:d8:65:c4:a9:2f:27:2c:c6:f0:
bc:fb:90:52:37:06:56:94:45:6f:11:8c:98:fe:b4:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EF:F1:E3:B5:F3:2F:BB:B6:A8:35:7C:F3:39:C4:E3:64:C8:72:22
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:49:cb:01:86:ab:ce:14:12:b4:52:ca:d2:dd:23:7e:6b:2e:
1c:d1:12:0c:4f:af:81:0f:b0:5c:7f:30:1b:d2:67:59:a0:f3:
a9:c7:b6:61:64:d6:23:b0:fe:c3:95:b0:01:83:4b:df:12:08:
ec:69:ba:1e:8b:97:9a:87:9a:a7:ca:bf:61:6e:37:59:b5:e1:
a0:b9:dc:46:b3:7e:ed:e1:ba:80:90:4f:04:f9:48:62:02:e3:
f1:06:38:41:5c:cc:ee:f1:86:af:9b:22:1f:bc:2f:0e:c2:e5:
c5:72:53:22:37:d2:2a:f6:84:cd:8d:a0:59:6b:ef:49:1b:2d:
64:e2:3b:1f:f7:e7:b9:39:40:c9:b8:ad:4b:97:53:35:09:73:
d7:cf:69:6d:f3:05:0f:65:77:94:fb:d3:2c:5b:60:05:f0:c8:
af:4b:8c:e9:03:38:2a:8c:bf:3d:60:06:32:25:a8:cd:32:9c:
6a:be:2e:4a:1e:9a:69:bb:47:04:76:28:72:9f:60:d8:47:21:
22:c4:4a:be:d7:ba:0d:8d:e1:1d:47:7e:5c:59:a2:ca:cb:c6:
ec:85:8d:7b:57:78:06:6a:b3:b6:53:88:bb:fe:05:a5:1b:24:
4d:72:36:2c:12:67:2b:da:77:bf:de:a2:0b:7f:0c:da:4a:f6:
bf:1c:18:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU4EFo4Hx3HiXkh5/+AiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMjRlNDUwZWFmZWQ0YzI1OWI2ZGMwYTM0ZTMwNmYxYWQy
ODRiYzQwHhcNMjYwNDE5MDYwMDI5WhcNMjYwNDIwMDYwMDI5WjAzMTEwLwYDVQQD
Eyg3YWVmZjFlM2I1ZjMyZmJiYjZhODM1N2NmMzM5YzRlMzY0Yzg3MjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyls0vnRUWufb50xYGxU5NqOyXAZ
jgbEmdUpV+L0jtH6epJ9alwBTpzrN+S2v2cJ1uqe6ohdbsEDzi1AOXGm3NywmiUs
Xzk/BTg7Nd/Bw48ResxJxxGyHdJ0FObbhdrbJ9j9/+ifxExIp0z/YHGFAUHHX1W/
2FcQHc4QzQ4in9CWAgFGWa1tLX7LKqwvHAbLg+wj4SNL5frYRE7e+eBSJYApu8Wq
QdOF8moysiZ8PGRCcxLPhBPROQp38MSAG4Q0s7yzX9jIwd7uNYhhDsOy4vFw04MS
gpiuEongaA6qD3vWLpDDjXTYZcSpLycsxvC8+5BSNwZWlEVvEYyY/rQchwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrv8eO18y+7tqg1fPM5xONkyHIiMB8GA1UdIwQY
MBaAFOIk5FDq/tTCWbbcCjTjBvGtKEvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUt
NmFjZDIxZDRiYWY4LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUtNmFjZDIxZDRiYWY4
LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx0nLAYar
zhQStFLK0t0jfmsuHNESDE+vgQ+wXH8wG9JnWaDzqce2YWTWI7D+w5WwAYNL3xII
7Gm6HouXmoeap8q/YW43WbXhoLncRrN+7eG6gJBPBPlIYgLj8QY4QVzM7vGGr5si
H7wvDsLlxXJTIjfSKvaEzY2gWWvvSRstZOI7H/fnuTlAybitS5dTNQlz189pbfMF
D2V3lPvTLFtgBfDIr0uM6QM4Koy/PWAGMiWozTKcar4uSh6aabtHBHYocp9g2Ech
IsRKvte6DY3hHUd+XFmiysvG7IWNe1d4BmqztlOIu/4FpRskTXI2LBJnK9p3v96i
C38M2kr2vxwY4Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:51:42 2026 by rpki-client