Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier: FWI1GKEAle2KTHuonKL+PQzqIHVgvOb/2v+PZ7tSnaQ=
Subject key identifier: 42:ED:42:19:59:E0:67:B1:01:39:29:56:07:39:A8:1D:B0:12:51:6E
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial: 019D999955DCDC0A49E4CC0C53C6ADC60E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number: 0FD4
Signing time: Fri 17 Apr 2026 04:00:56 +0000
Manifest this update: Fri 17 Apr 2026 04:00:56 +0000
Manifest next update: Sat 18 Apr 2026 04:00:56 +0000
Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: gQ/Cou30sWs4zJ/TvT6Ow/MgBTAZb7eGWwI636JAEgo=)
2: a9UUQvVUQnxe273U6aniMeuVSV8.roa (hash: 7vEXbXNqwlMSgJyfX4S5RjxAdbJ6vW8VHoOqOei233g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:55:dc:dc:0a:49:e4:cc:0c:53:c6:ad:c6:0e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Validity
Not Before: Apr 17 04:00:56 2026 GMT
Not After : Apr 18 04:00:56 2026 GMT
Subject: CN=42ed421959e067b1013929560739a81db012516e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:c1:f2:a8:62:f7:80:af:cf:c4:94:36:a0:
11:bf:5c:ad:5c:b9:08:dc:30:50:78:90:64:ac:3c:
40:af:ca:66:b1:4c:a8:16:68:7c:78:a9:b7:50:b8:
6f:d3:29:60:72:78:cf:55:b5:87:39:34:98:85:17:
33:94:d0:47:ec:ba:3d:d6:25:04:73:f2:8c:1e:73:
98:fb:30:fb:aa:44:d1:2b:82:4d:ce:02:5a:59:44:
60:14:0d:6a:af:15:1e:f5:3d:1d:3c:e6:fb:43:85:
4f:97:0a:c5:e0:66:28:7d:76:14:1e:c0:72:02:e5:
0f:e6:50:ed:11:5d:a0:77:5e:27:a4:4c:af:04:fd:
4a:f8:19:a5:0b:e5:d4:bf:12:5e:28:4f:31:e1:51:
ee:02:57:58:c5:39:b7:cd:cf:3f:03:e8:23:d7:31:
ec:00:5f:08:b1:60:1c:88:6a:93:c6:8b:ce:c3:3a:
09:93:ec:96:35:c0:7d:1e:8f:14:22:11:2c:fc:25:
1d:e0:2f:dd:aa:70:96:9f:aa:ca:04:f6:e0:03:dc:
91:68:5a:61:0c:83:87:90:8e:1b:01:91:c4:03:67:
a4:72:3b:73:42:fc:64:89:da:03:f0:02:59:54:c8:
a0:5b:19:b6:86:ce:56:81:bb:79:da:6d:27:22:4e:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:ED:42:19:59:E0:67:B1:01:39:29:56:07:39:A8:1D:B0:12:51:6E
X509v3 Authority Key Identifier:
keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a2:8e:cf:26:04:5e:f5:6b:c3:c8:61:7b:02:13:23:41:9a:
f8:37:0c:ac:4c:88:11:6c:c4:05:56:c5:04:8e:3c:50:a2:6b:
c1:10:75:a4:fd:36:4e:6b:ca:dc:85:59:a0:ed:93:1b:da:04:
7b:d1:dd:d8:89:c9:4a:33:12:96:13:f6:5b:84:bc:b0:85:d0:
d3:9d:9e:a7:e0:3b:72:5b:f3:8d:b4:ca:53:94:15:09:10:41:
18:66:24:46:25:d4:7d:a7:5a:46:c7:25:f0:1b:70:ca:aa:05:
b3:37:c6:77:27:6e:8c:49:14:98:46:3c:1b:f1:8b:0d:43:72:
b3:0a:af:dd:b0:c0:d5:11:90:2d:cc:55:76:a7:22:95:fd:04:
49:c8:f6:d8:0c:cf:68:1a:85:b4:24:bd:af:2b:52:40:a9:74:
56:f2:3e:b0:fe:07:bc:c2:ef:11:55:8b:b4:0d:65:93:6d:fa:
21:76:fa:9f:52:09:db:5a:1b:a0:19:01:dc:9a:f4:07:2d:89:
84:ba:22:2d:c6:28:4d:90:18:8b:01:a0:1c:bc:15:69:1e:e9:
29:99:32:d2:87:08:a6:ee:64:bb:56:ab:6a:4b:84:a8:fd:ab:
02:d5:c1:3c:71:7c:e2:4b:e5:96:c9:c6:59:d4:6b:a6:53:d2:
86:51:13:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmVXc3ApJ5MwMU8atxg6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMGUzODA1YTFiNGY1YjYxY2ZlNzMwMTBlODM4YzJmMGQy
NWI0NGIwHhcNMjYwNDE3MDQwMDU2WhcNMjYwNDE4MDQwMDU2WjAzMTEwLwYDVQQD
Eyg0MmVkNDIxOTU5ZTA2N2IxMDEzOTI5NTYwNzM5YTgxZGIwMTI1MTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gnB8qhi94Cvz8SUNqARv1ytXLkI
3DBQeJBkrDxAr8pmsUyoFmh8eKm3ULhv0ylgcnjPVbWHOTSYhRczlNBH7Lo91iUE
c/KMHnOY+zD7qkTRK4JNzgJaWURgFA1qrxUe9T0dPOb7Q4VPlwrF4GYofXYUHsBy
AuUP5lDtEV2gd14npEyvBP1K+BmlC+XUvxJeKE8x4VHuAldYxTm3zc8/A+gj1zHs
AF8IsWAciGqTxovOwzoJk+yWNcB9Ho8UIhEs/CUd4C/dqnCWn6rKBPbgA9yRaFph
DIOHkI4bAZHEA2ekcjtzQvxkidoD8AJZVMigWxm2hs5Wgbt52m0nIk4xFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELtQhlZ4GexATkpVgc5qB2wElFuMB8GA1UdIwQY
MBaAFOIOOAWhtPW2HP5zAQ6DjC8NJbRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kMTZlM2UtZWIwOS00ZmI5LTkwODEt
YmQzZTdhZGRlOGRlLzEvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9kMTZlM2UtZWIwOS00ZmI5LTkwODEtYmQzZTdhZGRlOGRl
LzEvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqKOzyYE
XvVrw8hhewITI0Ga+DcMrEyIEWzEBVbFBI48UKJrwRB1pP02TmvK3IVZoO2TG9oE
e9Hd2InJSjMSlhP2W4S8sIXQ052ep+A7clvzjbTKU5QVCRBBGGYkRiXUfadaRscl
8BtwyqoFszfGdydujEkUmEY8G/GLDUNyswqv3bDA1RGQLcxVdqcilf0EScj22AzP
aBqFtCS9rytSQKl0VvI+sP4HvMLvEVWLtA1lk236IXb6n1IJ21oboBkB3Jr0By2J
hLoiLcYoTZAYiwGgHLwVaR7pKZky0ocIpu5ku1arakuEqP2rAtXBPHF84kvllsnG
WdRrplPShlETbQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:42 2026 by rpki-client