Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
File: a4PZKBp6UIq_xJUwSumcmMBCxhE.mft (raw, json)
Hash identifier: yhVatxy4Hg8qWvjLkpmJKDUPLZAkG/YaIQRQ6uWPpS8=
Subject key identifier: 02:13:A6:27:C2:7A:8E:99:7E:80:3C:D1:50:1D:6C:F5:D8:77:2E:7D
Authority key identifier: 6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
Certificate issuer: /CN=6b83d9281a7a508abfc495304ae99c98c042c611
Certificate serial: 019D9999523B4E80710D2E2AE291B290D63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
Manifest number: 1851
Signing time: Fri 17 Apr 2026 04:00:55 +0000
Manifest this update: Fri 17 Apr 2026 04:00:55 +0000
Manifest next update: Sat 18 Apr 2026 04:00:55 +0000
Files and hashes: 1: a4PZKBp6UIq_xJUwSumcmMBCxhE.crl (hash: tERRpTrpk7LcJmIy6CYszz1BCXK/l4GEa6Q+StiCKko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:52:3b:4e:80:71:0d:2e:2a:e2:91:b2:90:d6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b83d9281a7a508abfc495304ae99c98c042c611
Validity
Not Before: Apr 17 04:00:55 2026 GMT
Not After : Apr 18 04:00:55 2026 GMT
Subject: CN=0213a627c27a8e997e803cd1501d6cf5d8772e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:7b:a4:09:17:cb:a8:89:2d:1c:43:90:32:
76:85:96:a5:e7:fe:8e:fb:45:13:0a:d5:33:62:ce:
47:a6:4e:04:d9:39:64:94:fa:0e:74:0f:25:5f:ad:
f3:8c:dc:e1:43:54:2a:46:99:b1:1a:d0:40:de:3a:
57:3c:75:82:7c:45:d1:de:62:5c:97:a5:02:41:91:
88:64:23:8a:f3:d1:fa:32:54:03:0f:79:31:c0:62:
d2:a2:63:29:5f:38:ae:8e:2c:35:ce:26:01:81:a3:
10:56:f7:16:ab:ae:1e:25:cc:1a:51:b3:18:66:74:
ab:1b:ae:fb:88:89:3f:00:79:89:a9:52:0b:58:82:
d6:38:76:a8:78:4b:c5:38:50:55:03:63:3d:34:10:
c1:5f:e8:c7:aa:cb:20:ce:97:37:9c:ab:eb:a8:40:
9e:f3:e1:c0:bb:10:e4:34:b6:3b:f2:cb:cf:71:34:
05:ea:4e:03:76:f2:f1:71:c2:ff:fa:2b:7f:4c:9f:
d4:b3:29:cc:52:41:16:1c:a2:76:23:28:89:c3:29:
6e:56:cd:d1:45:a0:fb:eb:58:6b:f7:8d:47:33:0d:
32:06:53:2d:a1:c8:ed:90:86:77:a3:df:51:28:32:
48:9d:c1:1c:b5:a8:d7:b1:f0:f4:f7:2f:aa:a6:90:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:13:A6:27:C2:7A:8E:99:7E:80:3C:D1:50:1D:6C:F5:D8:77:2E:7D
X509v3 Authority Key Identifier:
keyid:6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:49:d2:2c:46:ca:0c:6a:0b:bf:ed:33:20:f7:28:7c:49:7f:
37:ad:1c:7a:92:7c:86:73:97:85:01:09:93:d0:7b:83:03:42:
e8:61:a0:f9:bf:ba:8a:24:3b:ba:0d:07:3c:98:2f:2c:29:0a:
89:d9:df:b5:e4:f1:68:cd:76:69:bb:93:78:00:41:52:cc:bc:
06:81:87:d8:c5:3a:ed:ed:f7:14:2b:94:da:51:da:86:bc:4e:
07:15:d6:55:cd:0a:d9:78:98:db:0b:b2:40:be:90:d9:6a:50:
0f:ad:ff:d2:22:d6:28:e0:99:25:39:74:77:14:38:ff:df:e9:
f2:60:92:e4:90:6c:e7:b8:76:05:a1:16:b0:d3:46:8c:1f:4b:
3c:ef:f7:5e:93:eb:30:c6:9e:ec:d9:18:7e:fa:cb:51:66:a6:
5c:70:82:b4:23:00:0c:a5:7e:34:99:9d:c9:94:86:9c:43:74:
b4:f4:d4:75:ef:ae:52:73:20:b4:13:00:6e:4d:78:43:9b:93:
e3:51:26:1f:1b:0d:27:22:1c:71:fc:53:fd:92:17:6f:eb:3d:
12:fe:7d:5c:a3:f0:f0:4c:80:67:49:7a:bc:2f:0a:17:af:1b:
b9:d2:03:0b:32:ba:11:b7:ab:cc:8a:79:13:e3:2b:92:09:3b:
7b:fd:7e:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmVI7ToBxDS4q4pGykNY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiODNkOTI4MWE3YTUwOGFiZmM0OTUzMDRhZTk5Yzk4YzA0
MmM2MTEwHhcNMjYwNDE3MDQwMDU1WhcNMjYwNDE4MDQwMDU1WjAzMTEwLwYDVQQD
EygwMjEzYTYyN2MyN2E4ZTk5N2U4MDNjZDE1MDFkNmNmNWQ4NzcyZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYx7pAkXy6iJLRxDkDJ2hZal5/6O
+0UTCtUzYs5Hpk4E2TlklPoOdA8lX63zjNzhQ1QqRpmxGtBA3jpXPHWCfEXR3mJc
l6UCQZGIZCOK89H6MlQDD3kxwGLSomMpXziujiw1ziYBgaMQVvcWq64eJcwaUbMY
ZnSrG677iIk/AHmJqVILWILWOHaoeEvFOFBVA2M9NBDBX+jHqssgzpc3nKvrqECe
8+HAuxDkNLY78svPcTQF6k4DdvLxccL/+it/TJ/UsynMUkEWHKJ2IyiJwyluVs3R
RaD761hr941HMw0yBlMtocjtkIZ3o99RKDJIncEctajXsfD09y+qppBpPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAITpifCeo6ZfoA80VAdbPXYdy59MB8GA1UdIwQY
MBaAFGuD2SgaelCKv8SVMErpnJjAQsYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTRQWktCcDZVSXFfeEpVd1N1bWNtTUJDeGhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84MGM5ZTMtM2I4OS00ZTNjLWFhMzct
MDNmZWYzMmFmNzA2LzEvYTRQWktCcDZVSXFfeEpVd1N1bWNtTUJDeGhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC84MGM5ZTMtM2I4OS00ZTNjLWFhMzctMDNmZWYzMmFmNzA2
LzEvYTRQWktCcDZVSXFfeEpVd1N1bWNtTUJDeGhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUnSLEbK
DGoLv+0zIPcofEl/N60cepJ8hnOXhQEJk9B7gwNC6GGg+b+6iiQ7ug0HPJgvLCkK
idnfteTxaM12abuTeABBUsy8BoGH2MU67e33FCuU2lHahrxOBxXWVc0K2XiY2wuy
QL6Q2WpQD63/0iLWKOCZJTl0dxQ4/9/p8mCS5JBs57h2BaEWsNNGjB9LPO/3XpPr
MMae7NkYfvrLUWamXHCCtCMADKV+NJmdyZSGnEN0tPTUde+uUnMgtBMAbk14Q5uT
41EmHxsNJyIccfxT/ZIXb+s9Ev59XKPw8EyAZ0l6vC8KF68budIDCzK6EberzIp5
E+Mrkgk7e/1+Uw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:28:25 2026 by rpki-client