Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
File: 4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json)
Hash identifier: yoRjMt1KhkLp8Lds2Axxxqyz+aDreD8Dvf7UaFZRVK4=
Subject key identifier: 3B:F6:28:73:83:94:CD:1A:CB:36:E0:15:3F:97:D7:7C:A4:78:84:04
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial: 019D98F493C6B4EF2A7B4A845C52EB9FE196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
Manifest number: 0525
Signing time: Fri 17 Apr 2026 01:00:58 +0000
Manifest this update: Fri 17 Apr 2026 01:00:58 +0000
Manifest next update: Sat 18 Apr 2026 01:00:58 +0000
Files and hashes: 1: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: LFFI3ybXaWC0cO8jtHvoBkp5kINR6pExm7CLJwPX3Kc=)
2: lmDwmz-GtyiaNLLugK40qWh_h8s.roa (hash: v9wEGxooeJNf+ZcLBoaKH/aJqtCxaC4olgQz9drbKc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:93:c6:b4:ef:2a:7b:4a:84:5c:52:eb:9f:e1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
Validity
Not Before: Apr 17 01:00:58 2026 GMT
Not After : Apr 18 01:00:58 2026 GMT
Subject: CN=3bf628738394cd1acb36e0153f97d77ca4788404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:74:01:01:01:85:4d:3e:df:3d:f1:eb:15:5d:
ae:2a:8c:59:4c:af:0f:00:29:9a:77:ee:bf:4d:35:
27:26:c4:e3:26:ba:a9:08:c5:71:a0:99:ba:3c:a3:
6c:de:93:74:f3:13:9f:60:96:b5:ad:e9:82:ce:d9:
ed:2b:e5:70:d6:e9:0d:0e:1b:07:5d:ba:35:46:53:
d7:0d:83:05:da:05:d0:71:4a:0a:c4:d5:6f:08:1f:
d9:1d:e6:80:0a:15:89:46:55:ce:b5:e1:cb:25:32:
e7:cc:9e:a1:c2:ad:b8:f3:3c:19:d5:31:c9:18:a2:
22:91:f7:00:43:3b:4d:c8:d8:a3:33:ee:ca:27:cf:
a5:82:87:46:58:c7:95:38:3f:c1:c2:a0:17:40:12:
50:b2:7e:0d:43:fd:39:83:0b:00:37:a5:3a:73:46:
04:70:a8:7a:32:47:27:99:77:51:86:c2:be:5e:24:
5d:d7:36:19:89:bd:60:4d:e0:a9:e5:bd:4a:cc:c6:
42:ba:3b:23:2f:cf:9d:c9:dc:e1:a0:d8:9b:80:2d:
55:c0:e6:b4:00:64:9a:1b:e8:e6:8c:94:3a:97:ee:
22:be:e1:2f:18:33:64:ad:95:87:f4:01:7b:f8:6d:
04:7c:db:ac:e6:58:3e:42:f8:52:f8:be:7d:51:c7:
95:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F6:28:73:83:94:CD:1A:CB:36:E0:15:3F:97:D7:7C:A4:78:84:04
X509v3 Authority Key Identifier:
keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:20:47:a8:a1:84:c3:12:d0:61:14:a9:ff:76:4a:5a:ab:6a:
40:56:79:e3:15:74:d3:2d:58:08:f4:df:d2:42:42:fb:e6:e5:
fa:14:8c:e3:9c:b3:f5:5a:fa:b6:94:95:60:d8:9f:5f:19:c8:
e9:02:42:14:e9:94:ec:6a:33:53:7a:db:9c:b9:e7:01:66:27:
90:a2:5e:f8:6d:d6:3b:76:21:87:f4:5e:0c:0d:37:97:69:16:
cc:69:15:fb:f7:f3:fe:18:12:24:57:95:8c:e6:13:f1:db:c1:
53:70:af:bb:32:67:2d:b1:94:36:5a:2d:73:5f:fa:49:fb:a4:
1f:56:5b:d3:27:b1:50:22:43:a2:a2:a1:1a:6f:81:d2:aa:ab:
03:47:25:d7:2a:54:b5:f9:f0:27:50:2c:65:99:72:b1:8c:4f:
7f:4d:7f:80:93:ba:4d:8a:5e:74:6e:56:ae:c6:b0:55:16:88:
dc:1c:ca:74:67:f6:09:fe:2d:ae:c4:e0:c1:4d:6b:49:06:12:
b7:b5:63:a9:5f:dc:e3:57:3e:f2:5a:df:b2:38:27:40:5d:85:
cb:2a:a8:83:22:24:db:0e:61:2e:8a:ff:71:9f:ad:00:68:53:
20:bd:ff:cb:ab:9e:a4:75:e6:52:69:66:0a:1f:f2:a0:b8:06:
79:8a:19:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9JPGtO8qe0qEXFLrn+GWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYjQ2OTJhOTI5MWYyYzY3YjU2Y2MxNWRhNGQzMTAxMjAy
MzAxNzcwHhcNMjYwNDE3MDEwMDU4WhcNMjYwNDE4MDEwMDU4WjAzMTEwLwYDVQQD
EygzYmY2Mjg3MzgzOTRjZDFhY2IzNmUwMTUzZjk3ZDc3Y2E0Nzg4NDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HQBAQGFTT7fPfHrFV2uKoxZTK8P
ACmad+6/TTUnJsTjJrqpCMVxoJm6PKNs3pN08xOfYJa1remCztntK+Vw1ukNDhsH
Xbo1RlPXDYMF2gXQcUoKxNVvCB/ZHeaAChWJRlXOteHLJTLnzJ6hwq248zwZ1THJ
GKIikfcAQztNyNijM+7KJ8+lgodGWMeVOD/BwqAXQBJQsn4NQ/05gwsAN6U6c0YE
cKh6MkcnmXdRhsK+XiRd1zYZib1gTeCp5b1KzMZCujsjL8+dydzhoNibgC1VwOa0
AGSaG+jmjJQ6l+4ivuEvGDNkrZWH9AF7+G0EfNus5lg+QvhS+L59UceV+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDv2KHODlM0ayzbgFT+X13ykeIQEMB8GA1UdIwQY
MBaAFOK0aSqSkfLGe1bMFdpNMQEgIwF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJScEtwS1I4c1o3VnN3VjJrMHhBU0FqQVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NTlkMjctYmJiNS00OWY0LThmZDEt
YzI2NGI3NWI2Yjc4LzEvNHJScEtwS1I4c1o3VnN3VjJrMHhBU0FqQVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82NTlkMjctYmJiNS00OWY0LThmZDEtYzI2NGI3NWI2Yjc4
LzEvNHJScEtwS1I4c1o3VnN3VjJrMHhBU0FqQVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsSBHqKGE
wxLQYRSp/3ZKWqtqQFZ54xV00y1YCPTf0kJC++bl+hSM45yz9Vr6tpSVYNifXxnI
6QJCFOmU7GozU3rbnLnnAWYnkKJe+G3WO3Yhh/ReDA03l2kWzGkV+/fz/hgSJFeV
jOYT8dvBU3CvuzJnLbGUNlotc1/6SfukH1Zb0yexUCJDoqKhGm+B0qqrA0cl1ypU
tfnwJ1AsZZlysYxPf01/gJO6TYpedG5WrsawVRaI3BzKdGf2Cf4trsTgwU1rSQYS
t7VjqV/c41c+8lrfsjgnQF2FyyqogyIk2w5hLor/cZ+tAGhTIL3/y6uepHXmUmlm
Ch/yoLgGeYoZAA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:04 2026 by rpki-client