Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
File: 4SLitYIzoZPR9yd4Vl1smNdhY6c.mft (raw, json)
Hash identifier: UDX0YT+yHmW67lBgnSl+wKmRM6cElZjfx30pcKvrO7Y=
Subject key identifier: 5C:73:FB:4A:CC:6C:0F:75:7B:2F:A1:AA:3D:4C:04:41:19:45:B9:6E
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial: 019D98BDDEEB2595733B6FEEC5EE168ECA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
Manifest number: 14A0
Signing time: Fri 17 Apr 2026 00:01:13 +0000
Manifest this update: Fri 17 Apr 2026 00:01:13 +0000
Manifest next update: Sat 18 Apr 2026 00:01:13 +0000
Files and hashes: 1: 4SLitYIzoZPR9yd4Vl1smNdhY6c.crl (hash: Feu0EeivkP2uI+MCpcDOh9HC93eQDAlR0r8oia2nIQo=)
2: R3kq7Tu6gRsTs905XA3OIx0hnx8.asa (hash: i0v0le2V8KgOYY+tMlhW7yajuhdDrHP/SvNGEb/LiEQ=)
3: XT_1jof6p0-6Rq9yGMKNddmG5gc.roa (hash: zoD4X0KwRY+rISekdKuEzTq6itAQw0dp7xwB+9IQQEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:de:eb:25:95:73:3b:6f:ee:c5:ee:16:8e:ca:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
Validity
Not Before: Apr 17 00:01:13 2026 GMT
Not After : Apr 18 00:01:13 2026 GMT
Subject: CN=5c73fb4acc6c0f757b2fa1aa3d4c04411945b96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:db:d7:52:49:37:25:ab:ab:0d:2f:f3:d3:
33:43:89:c1:75:21:4e:fd:dc:bb:77:16:14:93:dd:
0f:d7:18:c0:af:17:3c:45:6a:77:fa:8b:ee:ac:13:
db:03:c6:58:36:52:08:6d:d8:4f:41:d8:0f:c7:c9:
22:af:73:31:23:7c:dc:8e:be:6a:43:bf:ea:79:70:
ba:7a:4b:bd:ef:f2:6f:6b:94:7e:f6:49:f6:6d:0c:
73:7c:07:4c:45:b4:04:c1:6b:03:de:57:9c:bc:83:
4c:e2:ac:aa:d6:b8:c2:8c:3e:09:07:f9:3e:ae:1f:
36:8f:7c:a1:3c:86:07:c5:f9:dd:7c:4a:21:31:26:
77:8c:de:49:77:61:8e:66:20:70:30:f4:12:72:50:
05:23:c9:41:a8:90:04:a8:bb:55:c3:d8:28:ec:ce:
5e:e3:fa:ed:2a:1a:33:01:91:8b:cf:4f:10:0e:16:
33:79:8d:4c:fa:03:f5:f3:10:e9:91:cc:d5:e8:ee:
99:c6:ac:2a:95:b1:25:11:e8:1e:48:6b:6c:23:0b:
c3:c1:21:f0:cd:a1:2b:12:d5:37:17:92:c6:85:fb:
d3:f1:7a:0d:18:7b:3a:53:ed:f2:b2:ae:6d:a2:39:
1a:8c:a5:d0:34:d1:f2:ce:fc:a1:51:ba:5b:9f:0b:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:73:FB:4A:CC:6C:0F:75:7B:2F:A1:AA:3D:4C:04:41:19:45:B9:6E
X509v3 Authority Key Identifier:
keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8b:d3:2a:68:73:43:eb:d9:77:72:36:9e:e8:a0:44:52:c8:
e6:e0:47:c2:fc:11:65:10:5b:7c:0a:1c:c0:04:d1:3d:02:69:
59:1f:79:d7:3d:d5:ae:e4:58:a5:e9:5e:5c:5b:d7:a4:6c:15:
a1:31:0f:c9:74:48:ff:a4:f0:8c:67:a2:08:25:ec:7c:38:ff:
df:86:4d:82:83:58:c9:cc:ab:e3:33:2a:61:4f:82:91:4d:f9:
e3:52:87:55:c4:15:7f:ae:df:c8:02:c8:d0:e6:7a:26:ae:b3:
5e:92:15:7e:31:17:d3:91:39:da:ba:85:b0:58:52:5c:9a:84:
0d:66:5c:c7:c9:45:e7:90:1c:ae:a6:19:eb:87:9d:20:4a:ce:
43:05:e2:50:b1:a1:15:c3:a4:3e:ca:d7:cc:a8:87:49:3e:1a:
b4:a8:18:ec:95:07:66:af:68:e8:57:df:39:53:f6:d7:83:f8:
68:19:45:0c:4d:1e:42:27:fc:ee:19:0c:dd:65:77:3b:34:53:
3d:95:7d:b7:fe:62:24:ed:16:c7:f1:43:28:2b:b4:e1:30:55:
84:fe:c6:0b:1f:13:4e:2b:27:22:2e:9a:c7:5f:b6:c1:dd:1f:
e2:5d:65:22:87:86:86:2c:21:e1:fd:d5:6e:ad:87:24:cd:35:
e7:6e:24:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yvd7rJZVzO2/uxe4WjspmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMjJlMmI1ODIzM2ExOTNkMWY3Mjc3ODU2NWQ2Yzk4ZDc2
MTYzYTcwHhcNMjYwNDE3MDAwMTEzWhcNMjYwNDE4MDAwMTEzWjAzMTEwLwYDVQQD
Eyg1YzczZmI0YWNjNmMwZjc1N2IyZmExYWEzZDRjMDQ0MTE5NDViOTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq/b11JJNyWrqw0v89MzQ4nBdSFO
/dy7dxYUk90P1xjArxc8RWp3+ovurBPbA8ZYNlIIbdhPQdgPx8kir3MxI3zcjr5q
Q7/qeXC6eku97/Jva5R+9kn2bQxzfAdMRbQEwWsD3lecvINM4qyq1rjCjD4JB/k+
rh82j3yhPIYHxfndfEohMSZ3jN5Jd2GOZiBwMPQSclAFI8lBqJAEqLtVw9go7M5e
4/rtKhozAZGLz08QDhYzeY1M+gP18xDpkczV6O6ZxqwqlbElEegeSGtsIwvDwSHw
zaErEtU3F5LGhfvT8XoNGHs6U+3ysq5tojkajKXQNNHyzvyhUbpbnwsxvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxz+0rMbA91ey+hqj1MBEEZRbluMB8GA1UdIwQY
MBaAFOEi4rWCM6GT0fcneFZdbJjXYWOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFNMaXRZSXpvWlBSOXlkNFZsMXNtTmRoWTZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kODE1ZmQtY2ZhYi00YTRhLTk1OTUt
NDE2NmI3NWIwOGFmLzEvNFNMaXRZSXpvWlBSOXlkNFZsMXNtTmRoWTZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kODE1ZmQtY2ZhYi00YTRhLTk1OTUtNDE2NmI3NWIwOGFm
LzEvNFNMaXRZSXpvWlBSOXlkNFZsMXNtTmRoWTZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIvTKmhz
Q+vZd3I2nuigRFLI5uBHwvwRZRBbfAocwATRPQJpWR951z3VruRYpeleXFvXpGwV
oTEPyXRI/6TwjGeiCCXsfDj/34ZNgoNYycyr4zMqYU+CkU3541KHVcQVf67fyALI
0OZ6Jq6zXpIVfjEX05E52rqFsFhSXJqEDWZcx8lF55AcrqYZ64edIErOQwXiULGh
FcOkPsrXzKiHST4atKgY7JUHZq9o6FffOVP214P4aBlFDE0eQif87hkM3WV3OzRT
PZV9t/5iJO0Wx/FDKCu04TBVhP7GCx8TTisnIi6ax1+2wd0f4l1lIoeGhiwh4f3V
bq2HJM01524kGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:10 2026 by rpki-client