Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
File: M4QkGt5fJhrI7OhD5efbfuEI4zw.mft (raw, json)
Hash identifier: EciUah7TpfhACahPlz63V94hO55raQVqEI7iZE247Bw=
Subject key identifier: 87:B0:60:D7:2C:D1:02:AD:09:AD:78:C1:40:78:DB:EE:C9:55:5E:A2
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial: 019D9AE2EB78F572DA7FB8112D7DE24F8830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
Manifest number: 1160
Signing time: Fri 17 Apr 2026 10:00:55 +0000
Manifest this update: Fri 17 Apr 2026 10:00:55 +0000
Manifest next update: Sat 18 Apr 2026 10:00:55 +0000
Files and hashes: 1: 7syofHXFJmPSL6BJ-29lF-gFfeM.roa (hash: NO9XiETKh7e/kgh6aR14rNQhQwpTu97o6Yw7GN8zhwk=)
2: M4QkGt5fJhrI7OhD5efbfuEI4zw.crl (hash: 68o3E9jOiIu6T9nWSR6qCrGC8nGp7l4vzMv0mhrh0ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:eb:78:f5:72:da:7f:b8:11:2d:7d:e2:4f:88:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Validity
Not Before: Apr 17 10:00:55 2026 GMT
Not After : Apr 18 10:00:55 2026 GMT
Subject: CN=87b060d72cd102ad09ad78c14078dbeec9555ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e9:cd:50:1a:5f:fe:43:47:48:55:c9:87:24:
5b:7a:c8:4e:da:80:fb:12:47:30:0b:29:e7:e8:e1:
03:a5:34:44:44:a2:dc:34:75:99:01:24:3d:f6:93:
a9:15:fc:bc:27:09:e8:9e:f3:99:68:ae:fb:67:3c:
75:8b:30:26:11:01:58:75:d9:68:e0:bb:de:97:b1:
31:b0:ae:36:bf:1a:bd:ec:0a:d8:f9:ab:f9:f5:1b:
44:a8:d3:25:90:bd:2e:f3:21:5d:67:38:56:7a:7d:
21:60:60:64:9d:4b:bb:c0:9c:3e:fe:b3:28:92:7a:
78:86:0d:62:2a:af:6a:df:8b:e9:54:f4:6d:13:46:
c4:fb:98:9e:5c:85:51:3c:cd:5b:d3:ae:41:18:bc:
d5:26:aa:4c:6a:eb:45:47:23:a4:25:a0:15:a0:63:
93:f2:fb:6b:7d:d0:15:b7:f9:0c:a1:32:53:40:64:
9a:d5:e2:09:ac:10:af:fe:a0:d0:4f:6c:bd:73:3a:
d4:14:e5:6a:3b:1c:f2:2d:cf:04:d3:59:fd:92:dc:
fc:71:fb:ab:0a:82:49:5a:cd:cd:92:9e:97:02:87:
38:fe:f4:71:d1:55:a3:e5:2c:fb:23:91:89:e0:93:
8d:1c:95:9e:19:34:31:9e:9a:99:37:b4:20:b5:19:
b0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B0:60:D7:2C:D1:02:AD:09:AD:78:C1:40:78:DB:EE:C9:55:5E:A2
X509v3 Authority Key Identifier:
keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c8:be:fa:29:01:7c:c9:87:fe:3e:95:84:a1:31:01:54:20:
8d:98:ca:95:e4:05:1d:00:80:6e:31:77:cf:a2:ff:a2:4f:8c:
b0:c9:7c:90:9a:50:38:0b:19:88:ed:f9:cb:29:51:bd:37:1a:
9f:3f:96:32:54:25:ba:fe:6b:8c:fc:3b:3e:cf:45:e6:81:73:
8d:46:32:77:57:da:c9:1b:c3:c1:9a:08:2e:e3:0d:81:4c:cf:
17:62:69:ca:54:72:91:cd:02:34:99:f0:11:db:eb:9f:d0:89:
e7:a9:21:05:18:32:20:2c:a4:df:df:ae:93:5a:14:16:7c:2a:
fb:52:1f:15:57:a7:62:73:ad:0c:be:c8:bf:51:0b:58:47:0e:
73:53:cb:ff:1e:1c:c9:e7:c6:df:8e:8e:65:a1:8e:c4:d1:51:
d1:6f:82:d7:dd:90:d8:e3:c3:89:78:1a:0d:9d:fc:e5:5d:ed:
1d:69:6a:06:36:7f:61:96:f1:a7:d5:48:e7:64:9c:91:8a:20:
b2:55:0f:52:c7:d7:44:6a:e2:2d:e0:6a:c4:d2:ce:21:de:87:
52:bf:51:87:dd:9f:3e:f5:f5:32:cd:87:2b:c4:ec:9c:5c:ce:
23:85:3d:3a:7f:dd:52:41:dc:62:06:67:b2:84:bb:41:d2:7e:
61:6e:43:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4ut49XLaf7gRLX3iT4gwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzODQyNDFhZGU1ZjI2MWFjOGVjZTg0M2U1ZTdkYjdlZTEw
OGUzM2MwHhcNMjYwNDE3MTAwMDU1WhcNMjYwNDE4MTAwMDU1WjAzMTEwLwYDVQQD
Eyg4N2IwNjBkNzJjZDEwMmFkMDlhZDc4YzE0MDc4ZGJlZWM5NTU1ZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+nNUBpf/kNHSFXJhyRbeshO2oD7
EkcwCynn6OEDpTRERKLcNHWZASQ99pOpFfy8JwnonvOZaK77Zzx1izAmEQFYddlo
4Lvel7ExsK42vxq97ArY+av59RtEqNMlkL0u8yFdZzhWen0hYGBknUu7wJw+/rMo
knp4hg1iKq9q34vpVPRtE0bE+5ieXIVRPM1b065BGLzVJqpMautFRyOkJaAVoGOT
8vtrfdAVt/kMoTJTQGSa1eIJrBCv/qDQT2y9czrUFOVqOxzyLc8E01n9ktz8cfur
CoJJWs3Nkp6XAoc4/vRx0VWj5Sz7I5GJ4JONHJWeGTQxnpqZN7QgtRmw5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIewYNcs0QKtCa14wUB42+7JVV6iMB8GA1UdIwQY
MBaAFDOEJBreXyYayOzoQ+Xn237hCOM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zYzU2ZTItZTRiOC00NWZjLTk1OWYt
YzdhYTE5ZWFiYmE3LzEvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8zYzU2ZTItZTRiOC00NWZjLTk1OWYtYzdhYTE5ZWFiYmE3
LzEvTTRRa0d0NWZKaHJJN09oRDVlZmJmdUVJNHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEci++ikB
fMmH/j6VhKExAVQgjZjKleQFHQCAbjF3z6L/ok+MsMl8kJpQOAsZiO35yylRvTca
nz+WMlQluv5rjPw7Ps9F5oFzjUYyd1fayRvDwZoILuMNgUzPF2JpylRykc0CNJnw
Edvrn9CJ56khBRgyICyk39+uk1oUFnwq+1IfFVenYnOtDL7Iv1ELWEcOc1PL/x4c
yefG346OZaGOxNFR0W+C192Q2OPDiXgaDZ385V3tHWlqBjZ/YZbxp9VI52SckYog
slUPUsfXRGriLeBqxNLOId6HUr9Rh92fPvX1Ms2HK8TsnFzOI4U9On/dUkHcYgZn
soS7QdJ+YW5DaQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:11 2026 by rpki-client