Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: JCadI3wIsMSMTiSno+pCRnVMaRTBkDNmG+e8zpRjLtc=
Subject key identifier: CC:84:1D:EB:18:97:CA:9E:A9:98:F3:D4:73:FA:DB:E5:61:B6:E4:73
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 019D9B19B1A00788BCD13FB5C4526E58F0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 0A6F
Signing time: Fri 17 Apr 2026 11:00:45 +0000
Manifest this update: Fri 17 Apr 2026 11:00:45 +0000
Manifest next update: Sat 18 Apr 2026 11:00:45 +0000
Files and hashes: 1: OBJUqWKdq6kiQbp0gg2le_lxwc8.roa (hash: Q6TNVRFJT35RFtqmG8IVN0WlQLvaNhPi6XH41fNOOas=)
2: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: wDKJoCyweF5pkKfL0R9d2CFtTKyoMSAcQT0w+WLDfXM=)
3: pDXgmFSEjeXu5kTO9JnxKOTny04.roa (hash: zBFnWy98uBKGBRB8AClKYux+jyTzJfSF7W9SKPlT+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:b1:a0:07:88:bc:d1:3f:b5:c4:52:6e:58:f0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Apr 17 11:00:45 2026 GMT
Not After : Apr 18 11:00:45 2026 GMT
Subject: CN=cc841deb1897ca9ea998f3d473fadbe561b6e473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4d:b2:b7:58:94:45:ee:5e:b0:17:29:e6:16:
db:66:8c:df:69:72:f4:40:8f:db:f8:39:69:82:3f:
95:ae:84:ce:a0:52:02:de:f8:98:dc:67:7d:a1:8d:
2b:21:a8:9b:55:df:64:65:78:68:6f:32:09:d4:15:
25:44:94:57:f3:f0:ae:ad:31:f0:5d:b6:17:de:1c:
c2:77:20:fd:5e:6a:88:87:6e:f5:e7:f7:56:94:20:
be:36:97:d3:cf:8e:c5:fb:70:79:41:49:4b:71:60:
bd:15:1f:00:2b:74:94:19:ad:1b:09:95:57:74:21:
3e:a4:71:ba:03:27:1f:2d:8b:78:5f:59:df:77:84:
ad:c9:bb:73:e0:3a:ab:53:f6:5e:8e:9e:cf:e9:5d:
e1:dc:72:b7:45:1d:92:0f:b9:80:a1:39:b1:1f:56:
e1:21:0f:70:89:a4:58:56:23:70:e8:62:c3:11:c7:
6c:7f:f3:73:63:a2:bd:2f:c9:46:de:60:cf:63:96:
60:fe:44:2a:7d:54:73:88:f3:fa:ed:05:da:61:b1:
da:35:bd:d3:c6:cf:54:17:a0:e6:ce:f4:8f:d6:44:
0a:cd:d0:77:8c:d5:63:a7:07:38:80:6d:12:68:35:
73:61:cc:1b:f2:2c:3f:f8:73:be:89:fa:e4:3a:1c:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:84:1D:EB:18:97:CA:9E:A9:98:F3:D4:73:FA:DB:E5:61:B6:E4:73
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:95:c3:b7:22:e0:46:da:02:0f:e6:40:79:0a:31:00:01:bd:
58:9a:cc:66:2d:33:84:df:a3:c7:dd:e4:fe:99:6c:11:61:7a:
fd:06:af:31:94:fe:65:0b:63:bb:3a:69:90:92:81:59:80:67:
96:fe:8f:7b:56:3a:fd:2c:58:d9:f7:92:55:01:f2:1d:08:59:
fb:47:79:36:15:26:d4:83:92:ec:77:ab:45:5a:7d:e1:f1:4f:
76:2d:8b:9a:cd:b3:9f:d3:99:e9:42:fe:cd:8a:c6:95:d9:43:
9d:2b:fd:40:f9:af:51:e0:0e:5d:75:4b:ee:18:c0:30:c3:de:
03:6b:23:e2:19:d1:29:a2:1d:f4:eb:ff:f0:e3:e8:99:19:13:
ba:99:89:12:4e:88:e4:ce:45:6d:66:e2:fc:76:ef:8c:0a:3c:
a8:a3:10:10:b2:f8:c2:db:42:e4:b8:3a:77:f8:9e:f9:a0:7c:
95:fd:b7:d3:94:a1:ba:93:dc:de:5e:31:8f:fa:c3:ef:e6:de:
04:78:ee:3c:26:8d:2a:27:6c:d3:3a:51:07:fe:81:2d:4e:e7:
e9:5f:03:82:4d:da:c7:55:23:df:7e:ed:00:6a:eb:04:e9:03:
3e:f3:ce:1d:9a:53:eb:60:70:67:6f:98:98:fe:24:91:2d:ef:
80:01:9f:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGbGgB4i80T+1xFJuWPCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3OGM3ZmM2YjIxMWUyNzFmNzQ4M2Y3MjFkNDVmMjM4ZGQ3
ZGU1YzQwHhcNMjYwNDE3MTEwMDQ1WhcNMjYwNDE4MTEwMDQ1WjAzMTEwLwYDVQQD
EyhjYzg0MWRlYjE4OTdjYTllYTk5OGYzZDQ3M2ZhZGJlNTYxYjZlNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA602yt1iURe5esBcp5hbbZozfaXL0
QI/b+Dlpgj+VroTOoFIC3viY3Gd9oY0rIaibVd9kZXhobzIJ1BUlRJRX8/CurTHw
XbYX3hzCdyD9XmqIh2715/dWlCC+NpfTz47F+3B5QUlLcWC9FR8AK3SUGa0bCZVX
dCE+pHG6AycfLYt4X1nfd4Stybtz4DqrU/Zejp7P6V3h3HK3RR2SD7mAoTmxH1bh
IQ9wiaRYViNw6GLDEcdsf/NzY6K9L8lG3mDPY5Zg/kQqfVRziPP67QXaYbHaNb3T
xs9UF6DmzvSP1kQKzdB3jNVjpwc4gG0SaDVzYcwb8iw/+HO+ifrkOhyUVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyEHesYl8qeqZjz1HP62+VhtuRzMB8GA1UdIwQY
MBaAFEeMf8ayEeJx90g/ch1F8jjdfeXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMt
NjJiMWRhMjYxMzI5LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMtNjJiMWRhMjYxMzI5
LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5XDtyLg
RtoCD+ZAeQoxAAG9WJrMZi0zhN+jx93k/plsEWF6/QavMZT+ZQtjuzppkJKBWYBn
lv6Pe1Y6/SxY2feSVQHyHQhZ+0d5NhUm1IOS7HerRVp94fFPdi2Lms2zn9OZ6UL+
zYrGldlDnSv9QPmvUeAOXXVL7hjAMMPeA2sj4hnRKaId9Ov/8OPomRkTupmJEk6I
5M5FbWbi/HbvjAo8qKMQELL4wttC5Lg6d/ie+aB8lf2305ShupPc3l4xj/rD7+be
BHjuPCaNKids0zpRB/6BLU7n6V8Dgk3ax1Uj337tAGrrBOkDPvPOHZpT62BwZ2+Y
mP4kkS3vgAGfwQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:42 2026 by rpki-client