Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: HyzeUKv/7tcnJa5QGRVb0zMjgrltla8RJKD3Sb3AoZI=
Subject key identifier: 03:34:49:4F:93:71:FF:BC:B0:47:8E:5B:0C:7A:38:00:92:67:5E:4B
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 019DA641CB9ED0298B4441817D868A2B476A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 15:00:22 +0000
Manifest this update: Sun 19 Apr 2026 15:00:22 +0000
Manifest next update: Mon 20 Apr 2026 15:00:22 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: 3wlRCeKsJ7lIGpiMGAv0xqydIVBpxAe56Zp0LLuUfdU=)
2: aD4aJMmaQg_1w8VUSr55ba35-_4.roa (hash: 3Ez4Ad6m2JnI3XnTs61pJ+5b17Kb2kmyt6ZM1f7rwSI=)
3: g2k94sbrfkriJ_TYzjO-TqZlMBM.roa (hash: 1ZkSwSDFlimbj/n4XoixvGsfM3nfxp389BDAwVqw2BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:41:cb:9e:d0:29:8b:44:41:81:7d:86:8a:2b:47:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Apr 19 15:00:22 2026 GMT
Not After : Apr 20 15:00:22 2026 GMT
Subject: CN=0334494f9371ffbcb0478e5b0c7a380092675e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:75:4f:7f:5c:97:b4:19:f4:6d:b2:a8:db:
c9:d0:85:8e:7e:86:e9:50:de:f7:6a:77:18:6c:0a:
dc:2a:aa:4d:e7:10:65:fa:14:dc:ed:66:d1:b2:34:
01:83:42:7d:e3:16:38:b0:0e:e6:51:27:4a:36:84:
9f:56:b6:13:fc:a2:ab:a6:9b:8d:1a:92:0a:55:26:
10:ef:d8:7b:f6:d8:70:cd:22:7b:21:c8:43:c0:9c:
7e:95:d7:e9:6f:9f:79:75:3a:ad:44:bc:9d:a7:29:
6a:68:f8:7e:72:9e:a2:0f:a5:54:99:eb:7e:ff:f6:
c3:2b:ff:1e:fa:ad:a0:ab:34:fc:37:70:45:c0:45:
c0:97:5c:f1:a1:49:db:ce:74:85:6f:1c:09:7b:1d:
81:b7:eb:0b:d6:e8:4b:31:10:68:16:08:00:7a:1c:
c3:ea:13:4f:dd:89:6e:e4:64:58:b5:60:2d:96:b6:
b6:b0:ee:f0:19:a8:85:93:ad:6f:24:28:bc:51:4a:
f9:05:86:4d:76:a2:14:2a:24:c5:87:f7:e3:f3:d0:
bc:d2:a8:e7:b2:e8:a9:0c:c4:d6:47:9d:d0:34:95:
37:b2:8b:19:9d:5b:df:6c:8d:f3:11:3d:a5:2f:f8:
83:14:b9:5d:67:9b:59:3b:4c:a4:e9:6f:ec:4c:94:
60:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:34:49:4F:93:71:FF:BC:B0:47:8E:5B:0C:7A:38:00:92:67:5E:4B
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:21:5f:ea:23:29:d6:aa:54:47:12:95:24:c5:12:da:d4:57:
e2:de:4d:d0:43:c8:69:5b:84:d5:4c:ae:9a:3d:13:2b:3f:9c:
0a:f5:29:46:33:8f:48:a3:5c:9d:de:8a:da:a4:f8:af:91:98:
e5:9c:9b:83:9a:6b:cf:2e:51:c3:5b:19:e4:90:d1:2b:54:e8:
af:f8:99:a4:bb:ee:25:24:75:ae:a9:7e:ab:90:44:a8:fd:de:
22:a9:56:bd:07:2f:b0:69:c3:35:f1:54:87:df:99:7b:28:c8:
0f:00:67:9e:49:c8:8f:19:45:a4:ec:d7:df:3f:bf:34:82:73:
c1:a1:c8:74:86:67:d2:3c:c2:a4:9d:22:82:ea:65:02:03:12:
7e:39:9c:7c:e9:bf:e8:f7:04:c1:24:0b:91:cd:91:aa:8d:b9:
77:dd:b9:2d:b2:89:87:29:16:ee:e2:e0:cb:60:22:d3:cb:e5:
49:f5:e8:ab:62:d0:94:34:77:0a:14:a8:94:98:e3:87:a2:b6:
c2:a7:2c:22:51:37:d6:fe:5c:84:97:cf:aa:d2:f4:b7:a0:a2:
39:9e:60:22:27:70:a7:28:86:5d:65:7a:4f:40:67:a3:84:64:
64:b5:70:73:cd:2e:ae:21:51:09:fa:86:27:a1:43:0f:13:a0:
a6:d7:7b:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2mQcue0CmLREGBfYaKK0dqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDU0YzQ1NmNlNjhiYThmZWNhZDU0MmFhYjk2MTBiMWVj
YzEyZTIwHhcNMjYwNDE5MTUwMDIyWhcNMjYwNDIwMTUwMDIyWjAzMTEwLwYDVQQD
EygwMzM0NDk0ZjkzNzFmZmJjYjA0NzhlNWIwYzdhMzgwMDkyNjc1ZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8x1T39cl7QZ9G2yqNvJ0IWOfobp
UN73ancYbArcKqpN5xBl+hTc7WbRsjQBg0J94xY4sA7mUSdKNoSfVrYT/KKrppuN
GpIKVSYQ79h79thwzSJ7IchDwJx+ldfpb595dTqtRLydpylqaPh+cp6iD6VUmet+
//bDK/8e+q2gqzT8N3BFwEXAl1zxoUnbznSFbxwJex2Bt+sL1uhLMRBoFggAehzD
6hNP3Ylu5GRYtWAtlra2sO7wGaiFk61vJCi8UUr5BYZNdqIUKiTFh/fj89C80qjn
suipDMTWR53QNJU3sosZnVvfbI3zET2lL/iDFLldZ5tZO0yk6W/sTJRg+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAM0SU+Tcf+8sEeOWwx6OACSZ15LMB8GA1UdIwQY
MBaAFOJFTEVs5ouo/srVQqq5YQsezBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82NGVkNjItYThlZi00ODAyLWExYjQt
OWY5N2IwZmM0ODMyLzEvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS82NGVkNjItYThlZi00ODAyLWExYjQtOWY5N2IwZmM0ODMy
LzEvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSFf6iMp
1qpURxKVJMUS2tRX4t5N0EPIaVuE1Uyumj0TKz+cCvUpRjOPSKNcnd6K2qT4r5GY
5Zybg5przy5Rw1sZ5JDRK1Tor/iZpLvuJSR1rql+q5BEqP3eIqlWvQcvsGnDNfFU
h9+ZeyjIDwBnnknIjxlFpOzX3z+/NIJzwaHIdIZn0jzCpJ0iguplAgMSfjmcfOm/
6PcEwSQLkc2Rqo25d925LbKJhykW7uLgy2Ai08vlSfXoq2LQlDR3ChSolJjjh6K2
wqcsIlE31v5chJfPqtL0t6CiOZ5gIidwpyiGXWV6T0Bno4RkZLVwc80uriFRCfqG
J6FDDxOgptd7ig==
-----END CERTIFICATE-----
Generated at Sun Apr 19 17:41:58 2026 by rpki-client