Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier: tcYmUq/thcrogPKNElV0Q1Vhefp3oVv8N9rYZ28doYo=
Subject key identifier: AB:36:27:3D:B6:7A:E6:4E:D2:10:24:A5:E9:C1:3A:3F:19:85:A1:FC
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial: 019D9A753B439656575786EB4BEEE493633D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number: 13F5
Signing time: Fri 17 Apr 2026 08:01:07 +0000
Manifest this update: Fri 17 Apr 2026 08:01:07 +0000
Manifest next update: Sat 18 Apr 2026 08:01:07 +0000
Files and hashes: 1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: MejhX7+mS3/2INDv/OlqyIyMDI0OCWt/M00SMKK/NbA=)
2: NdV1685pUzzupc5kE5-ldMdSDxg.roa (hash: ueorjyehMNjdQkD1BLlElPr49sGyaBsEZXRjheGpYAA=)
3: ObqCC5ItaIb9zSaMr1gSLuQWW7g.roa (hash: z8qeiKJfszyHlpziW66XElBOILDVztPeTixCMaYCXnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:3b:43:96:56:57:57:86:eb:4b:ee:e4:93:63:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Validity
Not Before: Apr 17 08:01:07 2026 GMT
Not After : Apr 18 08:01:07 2026 GMT
Subject: CN=ab36273db67ae64ed21024a5e9c13a3f1985a1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f4:12:f1:d3:3a:ce:4a:61:b9:e7:19:f7:3f:
4c:3e:26:6d:6e:40:c1:9a:a8:f8:7b:bf:02:79:77:
4f:a7:21:ca:31:4c:a5:61:76:6e:2f:83:c7:95:6b:
26:b5:e8:1a:28:e7:ba:8c:a2:23:87:74:b4:81:99:
93:04:eb:0a:89:45:3e:f0:f7:24:59:16:b3:5e:6b:
b2:39:98:7f:9f:fd:45:1c:83:fd:c8:2b:fd:dd:e6:
11:b4:b6:c7:ee:a4:a7:4e:3d:6a:67:f5:7c:dd:40:
9d:35:60:42:19:33:16:a7:66:36:3b:8f:89:08:54:
d7:06:52:e7:40:83:49:a9:a0:ea:b3:22:14:85:8a:
3f:47:b4:dc:92:f1:2b:d8:0e:69:b3:8c:f8:7c:66:
54:eb:91:98:59:b5:f0:e3:9f:5a:f7:51:05:3d:75:
5a:94:67:3e:61:80:6f:18:c1:27:5a:73:4d:9f:cf:
b2:69:46:72:41:87:81:df:4e:4d:af:b5:e3:9e:0d:
41:73:ad:6a:19:b3:b0:a2:2b:9d:3d:50:4e:b6:b4:
51:70:46:bb:bd:8c:53:08:50:0d:28:f3:e6:7b:66:
73:db:00:bd:43:ec:30:49:d0:c3:d2:c8:13:d1:c9:
19:93:9f:9d:ac:67:18:99:98:11:c1:fa:0a:76:1a:
7a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:36:27:3D:B6:7A:E6:4E:D2:10:24:A5:E9:C1:3A:3F:19:85:A1:FC
X509v3 Authority Key Identifier:
keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d3:de:b6:45:b9:17:aa:a3:6a:4a:c5:de:32:48:e1:ac:8b:
e8:63:3c:f7:89:61:14:52:0a:b3:e2:07:dd:31:3c:cc:6d:75:
ee:5d:4e:ea:29:fc:55:28:5f:7b:ee:76:56:91:b1:e2:ef:b1:
4e:43:42:5c:e6:50:38:c9:40:cd:62:d6:06:fa:fb:32:86:1b:
77:0d:7d:67:14:23:be:fb:eb:74:07:10:ec:da:b0:f6:da:21:
32:ee:89:d2:19:5c:db:b8:f7:3d:c2:86:9e:93:f3:2b:a9:98:
b0:57:8a:d9:f7:a9:9f:f3:88:6a:f5:d9:dd:ff:be:34:76:f5:
93:a8:89:0b:59:69:72:1a:1c:e0:b9:73:51:05:de:09:c1:bc:
9d:b2:19:31:5f:d7:1f:84:29:0e:60:ab:3b:20:b9:75:8a:27:
7c:2f:54:2c:26:99:f7:4c:8a:f3:8a:b1:0d:d2:f5:f7:45:4e:
30:4a:c3:82:cb:3b:d2:44:13:2c:3a:bf:ea:a1:a7:a7:3a:63:
7e:82:04:71:4d:0f:d8:39:bc:85:fb:54:ce:65:fe:85:c9:a4:
26:2c:47:c7:a8:2f:10:bc:f3:89:a8:f7:3c:be:ec:2d:3a:92:
fe:f3:b2:45:53:af:a3:50:18:ac:92:bf:2f:53:40:e6:cb:33:
86:e1:b2:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adTtDllZXV4brS+7kk2M9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWRiMGM1YjJkOTYxMGVmNTg2ZTk3ZmJhMWZjYTg3NTAw
NmYzZGEwHhcNMjYwNDE3MDgwMTA3WhcNMjYwNDE4MDgwMTA3WjAzMTEwLwYDVQQD
EyhhYjM2MjczZGI2N2FlNjRlZDIxMDI0YTVlOWMxM2EzZjE5ODVhMWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PQS8dM6zkphuecZ9z9MPiZtbkDB
mqj4e78CeXdPpyHKMUylYXZuL4PHlWsmtegaKOe6jKIjh3S0gZmTBOsKiUU+8Pck
WRazXmuyOZh/n/1FHIP9yCv93eYRtLbH7qSnTj1qZ/V83UCdNWBCGTMWp2Y2O4+J
CFTXBlLnQINJqaDqsyIUhYo/R7TckvEr2A5ps4z4fGZU65GYWbXw459a91EFPXVa
lGc+YYBvGMEnWnNNn8+yaUZyQYeB305Nr7Xjng1Bc61qGbOwoiudPVBOtrRRcEa7
vYxTCFANKPPme2Zz2wC9Q+wwSdDD0sgT0ckZk5+drGcYmZgRwfoKdhp6vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKs2Jz22euZO0hAkpenBOj8ZhaH8MB8GA1UdIwQY
MBaAFOGdsMWy2WEO9Ybpf7ofyodQBvPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQt
MGNmNzRiZTMwM2ZmLzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQtMGNmNzRiZTMwM2Zm
LzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdPetkW5
F6qjakrF3jJI4ayL6GM894lhFFIKs+IH3TE8zG117l1O6in8VShfe+52VpGx4u+x
TkNCXOZQOMlAzWLWBvr7MoYbdw19ZxQjvvvrdAcQ7Nqw9tohMu6J0hlc27j3PcKG
npPzK6mYsFeK2fepn/OIavXZ3f++NHb1k6iJC1lpchoc4LlzUQXeCcG8nbIZMV/X
H4QpDmCrOyC5dYonfC9ULCaZ90yK84qxDdL190VOMErDgss70kQTLDq/6qGnpzpj
foIEcU0P2Dm8hftUzmX+hcmkJixHx6gvELzziaj3PL7sLTqS/vOyRVOvo1AYrJK/
L1NA5sszhuGy5g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:06:30 2026 by rpki-client