Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
File: ThPQwKcD4JzaZMErCN2it0mgQpw.mft (raw, json)
Hash identifier: m2NCDhfcVaDPQQjndUTkpJH0NXqGvbNC04cmU3yRTeQ=
Subject key identifier: C8:A5:24:EC:16:08:03:DF:54:03:5B:C0:E2:42:CD:96:2F:83:1D:55
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019D9C6D0441F704468B41A40B33EE30B276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
Manifest number: 39FB
Signing time: Fri 17 Apr 2026 17:11:20 +0000
Manifest this update: Fri 17 Apr 2026 17:11:20 +0000
Manifest next update: Sat 18 Apr 2026 17:11:20 +0000
Files and hashes: 1: ThPQwKcD4JzaZMErCN2it0mgQpw.crl (hash: txP3WwXizRIcMQpww3RG4yZ4O36xKSMXwiDe2+c6lwY=)
2: UO5cUaBgRJFPNKQQPoMyyiOwAFU.asa (hash: K78niKoNCiBobNRExDI4OTBpGaXtxO1L+l5mRzPxuMU=)
3: w15_5Pw6YNCa9BuZawakXYCf3M8.roa (hash: KKbNWbjHOrntBAMd1tqvEzHYIX6t8YcsC3l308ukvLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:6d:04:41:f7:04:46:8b:41:a4:0b:33:ee:30:b2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Apr 17 17:11:20 2026 GMT
Not After : Apr 18 17:11:20 2026 GMT
Subject: CN=c8a524ec160803df54035bc0e242cd962f831d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:f8:e7:6e:f8:6f:9d:90:ab:e1:f1:99:f1:
90:dc:bf:be:13:da:3c:fe:45:73:c1:d7:75:a0:0b:
1a:f8:a2:9b:93:19:1c:55:6e:a6:d6:e7:b7:f0:2e:
a0:4f:64:77:76:76:fa:3f:8f:fb:24:2c:6a:72:ee:
85:bc:5a:e1:f6:85:7a:c7:b5:b6:05:2b:66:dc:66:
4d:f5:ed:99:de:f4:ea:61:3d:36:2e:18:68:34:1e:
b2:ef:2f:b4:22:50:34:16:0a:9c:e2:32:f3:52:17:
a8:e5:1f:b1:71:55:3b:01:53:17:f2:da:8e:8a:9a:
a8:7b:81:06:e3:c1:0e:4a:33:2b:ac:40:39:96:da:
27:09:46:84:c9:65:88:41:4e:23:31:b5:9b:54:90:
9d:e5:6c:0b:e1:be:16:d8:85:9d:5b:99:5b:4b:aa:
c3:12:e4:3d:ab:0b:5b:34:7a:d5:d5:0e:11:4a:f3:
09:92:4d:78:ec:40:14:c9:7c:4d:41:f3:80:62:4d:
ae:07:06:bb:ec:de:55:99:94:82:be:a0:66:02:32:
b9:33:18:47:7a:20:90:ff:67:00:30:db:fa:fb:65:
91:27:42:82:8d:2e:36:0d:62:25:44:ce:8c:8a:7d:
e7:f3:80:f6:1a:02:58:a4:25:9a:fa:02:c2:e9:7e:
60:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A5:24:EC:16:08:03:DF:54:03:5B:C0:E2:42:CD:96:2F:83:1D:55
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d3:83:4f:02:ed:64:ba:3e:05:a8:49:a3:f7:3c:e1:e8:85:
77:21:e6:cc:29:20:a5:d2:14:b0:e5:a1:2c:20:25:21:ff:ed:
31:a9:30:00:a0:3f:0a:2b:88:52:2f:c5:1a:06:99:d0:51:1e:
1c:29:0d:7f:e0:64:8d:a5:23:21:63:e5:17:d3:a2:bc:68:84:
d2:78:66:1b:98:37:35:ed:23:e4:2b:dc:6e:76:b9:a2:6b:4a:
77:6e:b9:e8:e5:1d:8e:5e:65:4c:d8:3a:0a:4d:56:8f:54:20:
4f:b5:65:a1:a1:4b:fc:7a:a5:ea:c8:93:4c:c2:be:93:da:80:
ad:38:c9:d9:10:a9:89:54:69:d9:86:f5:b3:05:c1:82:c9:b4:
b8:6b:3d:a9:b3:c9:c7:f0:b5:28:70:4e:9f:75:20:d6:34:44:
81:99:84:e8:7a:6a:e8:2a:e3:e7:da:fd:ac:03:7f:a2:63:50:
57:9a:a6:fa:d9:9f:a9:fd:87:e0:93:6e:5e:a6:f6:a2:ba:da:
ba:65:27:a8:ec:55:3c:bd:c4:6d:ef:2e:12:11:63:ac:0a:f9:
bf:ec:95:f3:99:38:8c:4d:fd:02:e7:c5:78:b7:22:0f:a0:88:
a0:b2:1d:c8:cf:e2:06:0e:9d:2f:7a:b1:15:0e:5b:81:e1:53:
da:22:39:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cbQRB9wRGi0GkCzPuMLJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh
MDQyOWMwHhcNMjYwNDE3MTcxMTIwWhcNMjYwNDE4MTcxMTIwWjAzMTEwLwYDVQQD
EyhjOGE1MjRlYzE2MDgwM2RmNTQwMzViYzBlMjQyY2Q5NjJmODMxZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoev45274b52Qq+HxmfGQ3L++E9o8
/kVzwdd1oAsa+KKbkxkcVW6m1ue38C6gT2R3dnb6P4/7JCxqcu6FvFrh9oV6x7W2
BStm3GZN9e2Z3vTqYT02LhhoNB6y7y+0IlA0Fgqc4jLzUheo5R+xcVU7AVMX8tqO
ipqoe4EG48EOSjMrrEA5ltonCUaEyWWIQU4jMbWbVJCd5WwL4b4W2IWdW5lbS6rD
EuQ9qwtbNHrV1Q4RSvMJkk147EAUyXxNQfOAYk2uBwa77N5VmZSCvqBmAjK5MxhH
eiCQ/2cAMNv6+2WRJ0KCjS42DWIlRM6Min3n84D2GgJYpCWa+gLC6X5gDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMilJOwWCAPfVANbwOJCzZYvgx1VMB8GA1UdIwQY
MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt
NmFhNDQzNTI4Y2U1LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1
LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtODTwLt
ZLo+BahJo/c84eiFdyHmzCkgpdIUsOWhLCAlIf/tMakwAKA/CiuIUi/FGgaZ0FEe
HCkNf+BkjaUjIWPlF9OivGiE0nhmG5g3Ne0j5Cvcbna5omtKd2656OUdjl5lTNg6
Ck1Wj1QgT7VloaFL/Hql6siTTMK+k9qArTjJ2RCpiVRp2Yb1swXBgsm0uGs9qbPJ
x/C1KHBOn3Ug1jREgZmE6Hpq6Crj59r9rAN/omNQV5qm+tmfqf2H4JNuXqb2orra
umUnqOxVPL3Ebe8uEhFjrAr5v+yV85k4jE39AufFeLciD6CIoLIdyM/iBg6dL3qx
FQ5bgeFT2iI50g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:59:40 2026 by rpki-client