Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
File: 4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json)
Hash identifier: IzigWj2loqcXjsJe1iEXmgHmmJKJG7+tp6qV8Sdrf9k=
Subject key identifier: EC:43:75:85:B8:AA:A4:A9:3A:E8:6A:80:53:72:48:E3:09:B7:7E:92
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Certificate issuer: /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial: 019D9A06BC77BF2A68267570ECCDAD61B63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
Manifest number: 07B5
Signing time: Fri 17 Apr 2026 06:00:25 +0000
Manifest this update: Fri 17 Apr 2026 06:00:25 +0000
Manifest next update: Sat 18 Apr 2026 06:00:25 +0000
Files and hashes: 1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: rLERDDfbFGtRnMEhJwuzSIJEWfEC1hLBhtKo1P97upU=)
2: kJBFWcdH75SmtIn8uA9jCwfUX4o.roa (hash: ysJ0LU5rMa1kB1xrN2ppHOMAzf664V0YwglsAj8KzHs=)
3: wqXxgKLtEKW7BSlepVMRDTpNWM0.asa (hash: hQjKffOZktpgqNZU9Z705S9+cY/2MAGq57iVWSoX52s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:bc:77:bf:2a:68:26:75:70:ec:cd:ad:61:b6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Validity
Not Before: Apr 17 06:00:25 2026 GMT
Not After : Apr 18 06:00:25 2026 GMT
Subject: CN=ec437585b8aaa4a93ae86a80537248e309b77e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:eb:d5:24:03:94:fa:32:c8:f0:56:a3:4a:
67:4a:27:8b:f1:98:2e:04:7a:0b:d3:70:32:12:39:
a5:31:36:f3:ec:59:39:29:9a:fb:06:ce:eb:ef:64:
b3:83:92:36:3a:ac:f0:78:af:09:01:7d:fe:34:23:
6e:20:2c:5d:04:01:c9:95:25:66:a4:1b:d5:80:e4:
b4:a6:d4:9f:16:64:44:73:f2:64:0c:3a:39:7d:f4:
f1:93:06:eb:d8:86:05:d5:46:5d:33:05:ea:1d:a1:
89:30:88:af:95:14:00:88:e5:d1:ae:cf:11:e9:9c:
48:1a:40:1a:0d:1c:bc:0b:56:50:a1:9f:a5:f2:33:
c4:08:4d:11:c7:28:e3:e6:0e:d4:7d:64:bc:97:0f:
31:b2:ae:53:a2:be:99:50:94:b8:18:75:02:66:0f:
5a:bf:ca:91:02:98:6d:f1:a9:04:2f:40:3e:ee:61:
b4:80:ab:40:31:8c:e8:4a:aa:ec:7c:2a:18:26:96:
82:c5:ca:07:74:82:c4:45:d3:2b:d8:b4:dc:1b:a8:
e7:64:5f:fb:e8:4e:3c:ed:88:88:6a:c2:f1:87:38:
82:45:90:fe:b1:41:5b:82:b6:81:8f:43:88:ac:ca:
f1:84:50:a3:3b:36:70:22:f7:ba:0c:87:dd:ee:87:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:43:75:85:B8:AA:A4:A9:3A:E8:6A:80:53:72:48:E3:09:B7:7E:92
X509v3 Authority Key Identifier:
keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:65:79:97:ba:d5:40:76:c4:4d:dc:68:19:4c:1f:ed:73:f6:
6f:2a:08:73:bc:d7:b9:a0:70:97:34:b5:7e:29:22:ab:d8:ba:
4e:9a:5e:a2:f7:db:d9:4e:c1:74:24:a7:cf:1e:39:89:48:c6:
09:0f:80:6f:4c:24:06:5b:c8:f4:a6:e1:a1:7d:0c:1a:d4:96:
f4:1d:97:67:50:0e:77:ba:1f:6d:eb:77:a8:9c:1e:32:b6:fd:
65:43:b1:f5:cd:35:ff:1d:6e:a2:63:33:a0:20:de:9a:15:56:
f9:49:4c:65:9d:4b:2f:37:2a:5f:67:87:5a:4c:4e:40:73:56:
3a:46:bb:6f:cc:02:2f:07:2d:47:48:f8:2a:f7:14:ab:fc:a4:
5d:55:ee:20:ab:24:7c:f3:d9:3f:16:65:ee:0a:43:ae:e6:82:
13:b8:ae:b0:99:5c:c4:13:c6:8c:f0:69:bd:80:23:cf:11:62:
a5:93:03:50:a8:6c:fe:31:15:dd:7c:9f:42:2e:75:5d:6a:3f:
5e:98:33:15:33:6f:30:8f:19:83:b4:0a:2a:ac:a8:2f:4b:3e:
4e:3c:b7:87:26:d0:bc:63:0b:9a:b6:32:9e:a0:b5:8c:e6:a7:
34:8c:86:17:4f:3b:8f:d3:56:ae:ad:c6:cf:07:36:9b:a0:71:
72:c1:d9:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBrx3vypoJnVw7M2tYbY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjM1Mjk2YmQyNjUyZDc1NmI5YzRhMmYwYWNkMmZkZGE3
OTA5N2MwHhcNMjYwNDE3MDYwMDI1WhcNMjYwNDE4MDYwMDI1WjAzMTEwLwYDVQQD
EyhlYzQzNzU4NWI4YWFhNGE5M2FlODZhODA1MzcyNDhlMzA5Yjc3ZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6rr1SQDlPoyyPBWo0pnSieL8Zgu
BHoL03AyEjmlMTbz7Fk5KZr7Bs7r72Szg5I2OqzweK8JAX3+NCNuICxdBAHJlSVm
pBvVgOS0ptSfFmREc/JkDDo5ffTxkwbr2IYF1UZdMwXqHaGJMIivlRQAiOXRrs8R
6ZxIGkAaDRy8C1ZQoZ+l8jPECE0Rxyjj5g7UfWS8lw8xsq5Tor6ZUJS4GHUCZg9a
v8qRApht8akEL0A+7mG0gKtAMYzoSqrsfCoYJpaCxcoHdILERdMr2LTcG6jnZF/7
6E487YiIasLxhziCRZD+sUFbgraBj0OIrMrxhFCjOzZwIve6DIfd7of1twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxDdYW4qqSpOuhqgFNySOMJt36SMB8GA1UdIwQY
MBaAFOPzUpa9JlLXVrnEovCs0v3aeQl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQt
MDU5MDhjNjNiNDVhLzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQtMDU5MDhjNjNiNDVh
LzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2V5l7rV
QHbETdxoGUwf7XP2byoIc7zXuaBwlzS1fikiq9i6Tppeovfb2U7BdCSnzx45iUjG
CQ+Ab0wkBlvI9KbhoX0MGtSW9B2XZ1AOd7ofbet3qJweMrb9ZUOx9c01/x1uomMz
oCDemhVW+UlMZZ1LLzcqX2eHWkxOQHNWOka7b8wCLwctR0j4KvcUq/ykXVXuIKsk
fPPZPxZl7gpDruaCE7iusJlcxBPGjPBpvYAjzxFipZMDUKhs/jEV3XyfQi51XWo/
XpgzFTNvMI8Zg7QKKqyoL0s+Tjy3hybQvGMLmrYynqC1jOanNIyGF087j9NWrq3G
zwc2m6BxcsHZyQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:33:14 2026 by rpki-client