Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
File: a4T-xJBquJAgoRa2hEbM6vbMUA8.mft (raw, json)
Hash identifier: 96UnI+HWSTV7qANcEQ2EcQPBjk4RngU3qvSdFvdDf/g=
Subject key identifier: 28:A7:A3:4A:E8:72:97:61:72:21:D8:14:6C:6C:79:27:D4:53:00:8F
Authority key identifier: 6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
Certificate issuer: /CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Certificate serial: 019D992BA49BD9479199F393FE50623B5D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
Manifest number: 0E49
Signing time: Fri 17 Apr 2026 02:01:07 +0000
Manifest this update: Fri 17 Apr 2026 02:01:07 +0000
Manifest next update: Sat 18 Apr 2026 02:01:07 +0000
Files and hashes: 1: a4T-xJBquJAgoRa2hEbM6vbMUA8.crl (hash: LUMMoVNeYOeKBcI2TshcfL0hLkuXvMd4cuAo+A+jLuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a4:9b:d9:47:91:99:f3:93:fe:50:62:3b:5d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Validity
Not Before: Apr 17 02:01:07 2026 GMT
Not After : Apr 18 02:01:07 2026 GMT
Subject: CN=28a7a34ae87297617221d8146c6c7927d453008f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:d2:5b:70:71:42:67:71:27:52:af:db:e7:
48:44:84:3c:ca:20:18:bf:9f:73:57:e5:e1:55:14:
7f:49:c5:24:45:1e:57:0f:63:aa:88:26:0f:2b:8c:
dc:bb:ad:03:c6:14:bc:69:44:5f:1f:7f:50:d6:70:
33:8d:3a:75:95:2d:65:dc:d7:c3:13:e8:e0:e8:15:
77:ef:c4:32:d8:db:8a:41:bb:7d:79:b2:70:31:6f:
35:80:f9:12:ee:12:89:43:fb:20:86:d2:af:32:fa:
a9:cc:16:76:03:b7:d3:b2:85:1a:0e:47:a4:e8:cc:
b4:16:39:00:db:68:b6:7e:81:b2:57:42:67:51:59:
bf:c4:46:2b:a9:4c:05:d0:45:e8:6e:6b:61:ba:95:
19:2f:c0:cd:34:50:b4:08:8f:75:db:6a:5e:3e:10:
45:e6:9b:59:df:05:a6:f0:1e:31:6d:e1:0a:b7:0a:
a7:31:e6:50:1a:e7:98:e2:b8:bf:8b:d0:5a:b0:a7:
bb:12:31:54:e0:11:45:86:e6:93:2b:52:e5:2d:62:
ac:da:9b:e1:a3:95:e7:39:d9:1a:4f:b4:d1:34:ed:
7f:50:64:ce:8a:c8:f8:3b:c8:bb:6e:63:e2:2d:1d:
cf:4f:65:90:10:2a:3f:9e:dd:92:c0:4c:91:35:b7:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A7:A3:4A:E8:72:97:61:72:21:D8:14:6C:6C:79:27:D4:53:00:8F
X509v3 Authority Key Identifier:
keyid:6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:76:33:a2:36:c7:fc:99:55:90:d1:20:01:33:b6:41:fc:98:
cb:78:04:d1:8b:41:3e:ee:4c:3a:b2:f3:f1:3e:7c:a0:f5:ed:
52:c8:3f:65:11:e3:5f:1b:78:0c:dc:0d:d0:f3:71:16:b8:3f:
55:4a:21:96:d8:ec:8b:54:be:89:e8:fd:27:47:22:19:10:ac:
54:36:12:38:1a:74:35:89:e6:87:54:e0:98:dd:e7:05:c7:13:
71:b2:ee:ce:d9:89:32:f1:16:16:ef:f8:d2:7e:b4:d6:45:51:
8f:c6:ce:24:8a:85:e0:eb:af:03:0c:d6:5a:a6:d3:69:83:7f:
83:a7:cd:83:57:40:1b:44:24:b5:d1:f7:24:d8:7b:60:92:ab:
05:0e:6f:cc:b5:50:d7:22:a6:96:f0:9c:1e:d2:a5:d9:4e:c8:
4f:71:da:66:ad:aa:a9:74:71:0c:17:59:42:b7:ef:e5:f2:a1:
00:c6:a5:a9:7e:17:a3:d9:4f:74:68:1a:1c:81:4a:03:9a:35:
49:1a:1b:7b:21:f0:0f:11:26:2f:50:f2:c0:2f:63:d0:d8:c5:
65:3f:11:53:04:bf:e9:1c:d7:9c:f9:7c:9e:8a:72:fe:a7:0f:
0f:15:19:18:82:75:93:88:42:89:81:4e:0e:50:75:0c:d2:32:
93:c6:9c:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK6Sb2UeRmfOT/lBiO10yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiODRmZWM0OTA2YWI4OTAyMGExMTZiNjg0NDZjY2VhZjZj
YzUwMGYwHhcNMjYwNDE3MDIwMTA3WhcNMjYwNDE4MDIwMTA3WjAzMTEwLwYDVQQD
EygyOGE3YTM0YWU4NzI5NzYxNzIyMWQ4MTQ2YzZjNzkyN2Q0NTMwMDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshHSW3BxQmdxJ1Kv2+dIRIQ8yiAY
v59zV+XhVRR/ScUkRR5XD2OqiCYPK4zcu60DxhS8aURfH39Q1nAzjTp1lS1l3NfD
E+jg6BV378Qy2NuKQbt9ebJwMW81gPkS7hKJQ/sghtKvMvqpzBZ2A7fTsoUaDkek
6My0FjkA22i2foGyV0JnUVm/xEYrqUwF0EXobmthupUZL8DNNFC0CI9122pePhBF
5ptZ3wWm8B4xbeEKtwqnMeZQGueY4ri/i9BasKe7EjFU4BFFhuaTK1LlLWKs2pvh
o5XnOdkaT7TRNO1/UGTOisj4O8i7bmPiLR3PT2WQECo/nt2SwEyRNbcoIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCino0rocpdhciHYFGxseSfUUwCPMB8GA1UdIwQY
MBaAFGuE/sSQariQIKEWtoRGzOr2zFAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTRULXhKQnF1SkFnb1JhMmhFYk02dmJNVUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wMjYzZmEtM2FmZi00N2RjLTgyYjgt
ZDFkOTQ3ZTczMzA5LzEvYTRULXhKQnF1SkFnb1JhMmhFYk02dmJNVUE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8wMjYzZmEtM2FmZi00N2RjLTgyYjgtZDFkOTQ3ZTczMzA5
LzEvYTRULXhKQnF1SkFnb1JhMmhFYk02dmJNVUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXYzojbH
/JlVkNEgATO2QfyYy3gE0YtBPu5MOrLz8T58oPXtUsg/ZRHjXxt4DNwN0PNxFrg/
VUohltjsi1S+iej9J0ciGRCsVDYSOBp0NYnmh1TgmN3nBccTcbLuztmJMvEWFu/4
0n601kVRj8bOJIqF4OuvAwzWWqbTaYN/g6fNg1dAG0QktdH3JNh7YJKrBQ5vzLVQ
1yKmlvCcHtKl2U7IT3HaZq2qqXRxDBdZQrfv5fKhAMalqX4Xo9lPdGgaHIFKA5o1
SRobeyHwDxEmL1DywC9j0NjFZT8RUwS/6RzXnPl8nopy/qcPDxUZGIJ1k4hCiYFO
DlB1DNIyk8acQQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:37 2026 by rpki-client