
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
File: s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json)
Hash identifier: qpb3XkA+3TCaQLPAYco4CFho4rJX2c6Dhj2yDAETf2k=
Subject key identifier: 46:8F:8C:90:C6:1B:23:2C:1C:16:40:2A:84:47:A3:3C:39:0B:95:57
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial: 019D9AABCFD853E7CAD0AC87951D248FC0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
Manifest number: 18CD
Signing time: Fri 17 Apr 2026 09:00:44 +0000
Manifest this update: Fri 17 Apr 2026 09:00:44 +0000
Manifest next update: Sat 18 Apr 2026 09:00:44 +0000
Files and hashes: 1: KvgeqJVMtBERBgaWeQ7l2q_TyyI.roa (hash: NJUE6bdAubYbnAUIE6s0c5Wi5PY+ros78NmtfNQmGAk=)
2: Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa (hash: V1xfi16Y3WhXqWRGet3YcxqXtnKz/3AWs7HoDzA48YM=)
3: _VVNfxdA5_FHj05YYq547OSKmlQ.roa (hash: 13IEzG/o1pmkzrgbkejU8IZuzD7A6Ft+aR2tUe+BCq8=)
4: bnU5Q0FeKCXPHTgsxSNx9kV93d4.roa (hash: jfuS4WANPOwG9IyimGe8aZrpP9Pv78GN//1LDqZ2n2k=)
5: ck22982XPjtgcPjy954uVGCKcK0.roa (hash: xSnMILKaL4KrwNXzralU8vyZN836vuMs+IKmeHjf9vw=)
6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: m/81oOlGbnwVCRNLFImIWJMNhgaOoLOMkrfqxDrO/QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:cf:d8:53:e7:ca:d0:ac:87:95:1d:24:8f:c0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Validity
Not Before: Apr 17 09:00:44 2026 GMT
Not After : Apr 18 09:00:44 2026 GMT
Subject: CN=468f8c90c61b232c1c16402a8447a33c390b9557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:8c:a3:11:b6:dc:5b:a3:8f:e0:4f:f0:a5:
c3:5e:66:db:52:93:e6:07:c5:cc:0b:50:ec:b7:0f:
a9:5c:f6:90:12:1f:51:e0:ea:72:52:10:5c:5c:03:
4f:ec:cf:4f:83:0f:08:f3:2e:fa:c8:74:63:77:95:
7a:54:16:b0:78:7c:b1:a8:3d:bd:84:17:b2:af:78:
a9:cd:1e:4f:68:2e:f0:35:71:75:81:66:aa:a8:46:
8e:32:43:5b:2b:59:33:00:f3:8b:d7:6e:5e:37:d8:
b7:fa:f0:0a:4e:56:11:80:2e:24:5e:74:62:ae:b8:
c8:83:90:ec:2b:f3:c1:14:a5:76:0b:33:13:6a:a3:
dc:98:00:1c:89:da:fd:43:bb:49:9e:be:b7:3c:72:
b6:0d:2e:a6:3d:87:7a:cc:0e:73:bd:45:7c:e1:13:
ae:27:79:69:44:cd:47:74:43:d3:a0:53:2d:8f:7e:
b3:df:e9:57:72:e6:3e:24:e5:36:ff:da:48:c4:0a:
5e:a2:59:48:ce:9b:de:a0:22:9c:b9:cc:1f:01:c1:
c7:70:1b:23:04:49:fb:0c:f1:4c:af:4a:7c:f8:26:
1f:61:36:c2:41:ad:f7:86:4d:b9:cc:45:49:0e:cd:
82:bf:1c:ff:60:06:68:eb:d2:dd:ac:ac:fa:cd:d3:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8F:8C:90:C6:1B:23:2C:1C:16:40:2A:84:47:A3:3C:39:0B:95:57
X509v3 Authority Key Identifier:
keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:20:6d:e0:42:fd:f0:f0:16:74:29:4e:f3:f4:40:b1:8a:14:
8b:8e:31:15:15:99:68:a8:0f:f2:93:71:af:ed:3d:96:29:c7:
57:ea:ba:f6:a8:f1:66:3d:cd:d8:3b:1e:f7:92:00:5a:16:92:
28:ea:c4:16:d6:f1:c7:d4:66:e4:6b:14:c4:83:67:7b:ef:77:
73:67:9c:fe:4a:ed:65:9c:64:12:86:c6:4a:0b:0a:32:bd:d8:
b4:ec:6b:43:04:8f:5f:16:35:e1:c3:a3:80:f7:3e:32:21:49:
a2:f5:98:f3:af:9c:ca:1b:3b:d8:c9:70:c4:98:61:5f:2a:79:
20:d1:54:4b:19:58:e9:17:3d:91:fa:df:93:ea:0d:6d:85:2e:
7c:a4:8f:7b:13:96:14:d2:a0:7d:64:a3:1b:6b:2a:5b:db:fb:
c5:7d:67:31:e8:31:a7:f2:1a:2c:9e:da:af:8f:d2:c8:2b:e4:
61:c2:cf:e0:36:e6:33:e9:e3:97:c2:29:18:00:89:78:60:36:
b0:3d:1b:57:3c:40:c9:d3:a2:24:f3:2d:fb:3d:3f:25:14:d7:
43:95:fa:45:a3:ec:da:ff:58:2f:1d:a0:1b:a5:98:d0:a8:03:
26:da:ad:bf:2c:77:13:68:24:6c:7e:5c:94:c4:b9:7f:a5:15:
9d:cf:a4:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq8/YU+fK0KyHlR0kj8D0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOGJiNjJhNDdiMWEyYWVkYjcwZjMyZjU4Yzk3OWJhMGM3
NzdmMDYwHhcNMjYwNDE3MDkwMDQ0WhcNMjYwNDE4MDkwMDQ0WjAzMTEwLwYDVQQD
Eyg0NjhmOGM5MGM2MWIyMzJjMWMxNjQwMmE4NDQ3YTMzYzM5MGI5NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVCMoxG23Fujj+BP8KXDXmbbUpPm
B8XMC1Dstw+pXPaQEh9R4OpyUhBcXANP7M9Pgw8I8y76yHRjd5V6VBaweHyxqD29
hBeyr3ipzR5PaC7wNXF1gWaqqEaOMkNbK1kzAPOL125eN9i3+vAKTlYRgC4kXnRi
rrjIg5DsK/PBFKV2CzMTaqPcmAAcidr9Q7tJnr63PHK2DS6mPYd6zA5zvUV84ROu
J3lpRM1HdEPToFMtj36z3+lXcuY+JOU2/9pIxApeollIzpveoCKcucwfAcHHcBsj
BEn7DPFMr0p8+CYfYTbCQa33hk25zEVJDs2Cvxz/YAZo69LdrKz6zdPRzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaPjJDGGyMsHBZAKoRHozw5C5VXMB8GA1UdIwQY
MBaAFLOLtipHsaKu23DzL1jJeboMd38GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgt
MDYwNWMwODlmYzM4LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgtMDYwNWMwODlmYzM4
LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSBt4EL9
8PAWdClO8/RAsYoUi44xFRWZaKgP8pNxr+09linHV+q69qjxZj3N2Dse95IAWhaS
KOrEFtbxx9Rm5GsUxINne+93c2ec/krtZZxkEobGSgsKMr3YtOxrQwSPXxY14cOj
gPc+MiFJovWY86+cyhs72MlwxJhhXyp5INFUSxlY6Rc9kfrfk+oNbYUufKSPexOW
FNKgfWSjG2sqW9v7xX1nMegxp/IaLJ7ar4/SyCvkYcLP4DbmM+njl8IpGACJeGA2
sD0bVzxAydOiJPMt+z0/JRTXQ5X6RaPs2v9YLx2gG6WY0KgDJtqtvyx3E2gkbH5c
lMS5f6UVnc+k+w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:00 2026 by rpki-client