Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
File: RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft (raw, json)
Hash identifier: +oNj/qtt6UJA3wlQGo7+dRBarg6xiDTlaZWgywQGeSg=
Subject key identifier: 4F:90:5B:D1:C3:C0:05:1F:B2:D5:FB:1B:18:43:7E:6F:C2:8D:D4:17
Authority key identifier: 47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
Certificate issuer: /CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Certificate serial: 019D99992E353BCC96ADD32B568ED3A220E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
Manifest number: 0FD4
Signing time: Fri 17 Apr 2026 04:00:46 +0000
Manifest this update: Fri 17 Apr 2026 04:00:46 +0000
Manifest next update: Sat 18 Apr 2026 04:00:46 +0000
Files and hashes: 1: RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl (hash: 5dajIyo+fxEw/0rl9tmY9jTu3divVrtLjvrbc7D1kpc=)
2: VOdAaoK5rrL2aiIOKWb-yCi1KB0.roa (hash: 3z55MUcCGHXgB/Y4YMi8pDAR10sJJt845t8wllcRG2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:2e:35:3b:cc:96:ad:d3:2b:56:8e:d3:a2:20:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4716a44374fea5ec99f10fb8d6c7d8efe2a3348b
Validity
Not Before: Apr 17 04:00:46 2026 GMT
Not After : Apr 18 04:00:46 2026 GMT
Subject: CN=4f905bd1c3c0051fb2d5fb1b18437e6fc28dd417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:d3:60:e1:05:ab:df:50:ea:84:68:0e:46:
3f:82:bd:c6:9c:58:c1:ce:5d:f7:59:86:ad:83:ef:
73:73:84:b1:8d:a9:1e:5e:72:d8:72:25:6c:59:ec:
41:0c:90:7f:f0:15:99:dc:4d:1e:2b:32:b4:74:e6:
d4:a4:d2:10:4c:a3:11:84:46:98:c0:bc:4d:23:bc:
59:c4:fd:7e:90:e0:4a:f2:47:93:f2:cc:3e:a9:0b:
e2:7f:93:0a:b7:66:58:a3:52:bd:de:fb:bd:95:b3:
0d:47:a4:42:6c:c4:1e:d1:af:67:36:96:42:a8:9a:
72:00:3b:33:8c:e9:29:5e:71:f8:06:06:92:36:ae:
0c:f0:5a:14:7b:c3:15:b2:de:a9:74:43:72:7d:43:
7e:5a:a3:38:fa:fe:ba:f1:e7:82:09:63:3b:d4:18:
72:e3:6b:5b:bb:4a:58:ef:f4:e0:af:c4:9e:d8:76:
5d:17:fa:36:d2:66:c7:2a:67:4e:fc:74:5f:75:b1:
8d:e1:bd:db:d6:5e:54:fd:a2:81:b2:3f:60:0d:9e:
e0:6d:15:b6:5a:3b:1f:40:21:1a:58:3c:73:8a:ff:
bd:da:54:e6:5e:cc:da:77:9d:46:58:c4:57:50:4c:
4b:52:8a:1d:0f:4d:39:bd:0e:36:42:fa:fb:5e:bb:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:90:5B:D1:C3:C0:05:1F:B2:D5:FB:1B:18:43:7E:6F:C2:8D:D4:17
X509v3 Authority Key Identifier:
keyid:47:16:A4:43:74:FE:A5:EC:99:F1:0F:B8:D6:C7:D8:EF:E2:A3:34:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxakQ3T-peyZ8Q-41sfY7-KjNIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a1fff-050e-4de9-8e64-5d4010900e86/1/RxakQ3T-peyZ8Q-41sfY7-KjNIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:36:16:d5:fa:68:83:5c:44:85:70:ec:19:24:3b:d4:db:84:
85:96:89:fb:a0:f2:40:10:58:33:54:ce:12:89:85:f5:81:c7:
76:1f:5b:1b:86:72:4e:d3:3e:b9:44:b7:58:d8:65:9b:bc:39:
c7:d9:32:31:3e:ab:74:54:35:2c:a1:87:e1:29:56:89:ba:a3:
25:22:e4:0a:bc:71:b6:80:31:a5:16:bd:d7:24:5b:c3:29:68:
fd:2c:e5:9c:9e:1e:25:eb:36:4d:83:99:4d:ba:f9:63:a4:17:
e2:b7:57:fb:9a:5e:2c:af:08:db:1f:bd:fd:e4:e7:96:d2:73:
2a:5e:d7:6a:f7:c4:24:c6:a6:67:d0:89:04:95:63:6d:84:6e:
34:fb:82:5f:a0:54:a4:b0:e2:0c:fc:87:e2:5f:8d:9d:c4:f7:
6c:27:4b:a1:2c:aa:a1:24:e0:98:7b:86:c2:df:4e:a8:9a:ea:
a7:ee:9e:b4:92:4f:44:d2:43:1d:d6:01:f4:8a:89:00:0b:c8:
8a:6f:7b:31:6d:cb:24:55:31:51:7d:ef:74:cb:df:d2:d8:6d:
2f:62:bc:40:3d:f6:46:54:be:39:70:3c:4d:74:83:97:57:24:
48:35:0e:9a:23:f5:4e:29:b8:be:52:5d:75:8d:5e:a8:fa:4d:
ca:04:0d:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmS41O8yWrdMrVo7ToiDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MTZhNDQzNzRmZWE1ZWM5OWYxMGZiOGQ2YzdkOGVmZTJh
MzM0OGIwHhcNMjYwNDE3MDQwMDQ2WhcNMjYwNDE4MDQwMDQ2WjAzMTEwLwYDVQQD
Eyg0ZjkwNWJkMWMzYzAwNTFmYjJkNWZiMWIxODQzN2U2ZmMyOGRkNDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NrTYOEFq99Q6oRoDkY/gr3GnFjB
zl33WYatg+9zc4SxjakeXnLYciVsWexBDJB/8BWZ3E0eKzK0dObUpNIQTKMRhEaY
wLxNI7xZxP1+kOBK8keT8sw+qQvif5MKt2ZYo1K93vu9lbMNR6RCbMQe0a9nNpZC
qJpyADszjOkpXnH4BgaSNq4M8FoUe8MVst6pdENyfUN+WqM4+v668eeCCWM71Bhy
42tbu0pY7/Tgr8Se2HZdF/o20mbHKmdO/HRfdbGN4b3b1l5U/aKBsj9gDZ7gbRW2
WjsfQCEaWDxziv+92lTmXszad51GWMRXUExLUoodD005vQ42Qvr7Xrs53QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+QW9HDwAUfstX7GxhDfm/CjdQXMB8GA1UdIwQY
MBaAFEcWpEN0/qXsmfEPuNbH2O/iozSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi85YTFmZmYtMDUwZS00ZGU5LThlNjQt
NWQ0MDEwOTAwZTg2LzEvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi85YTFmZmYtMDUwZS00ZGU5LThlNjQtNWQ0MDEwOTAwZTg2
LzEvUnhha1EzVC1wZXlaOFEtNDFzZlk3LUtqTklzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATYW1fpo
g1xEhXDsGSQ71NuEhZaJ+6DyQBBYM1TOEomF9YHHdh9bG4ZyTtM+uUS3WNhlm7w5
x9kyMT6rdFQ1LKGH4SlWibqjJSLkCrxxtoAxpRa91yRbwylo/SzlnJ4eJes2TYOZ
Tbr5Y6QX4rdX+5peLK8I2x+9/eTnltJzKl7XavfEJMamZ9CJBJVjbYRuNPuCX6BU
pLDiDPyH4l+NncT3bCdLoSyqoSTgmHuGwt9OqJrqp+6etJJPRNJDHdYB9IqJAAvI
im97MW3LJFUxUX3vdMvf0thtL2K8QD32RlS+OXA8TXSDl1ckSDUOmiP1Tim4vlJd
dY1eqPpNygQNWQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:13 2026 by rpki-client