Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
File: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft (raw, json)
Hash identifier: csxWSNpVdeX9NyTi3m1TSMKx7oJ3yhJgNMqLh4Gu+AQ=
Subject key identifier: DA:89:1B:5A:A8:55:91:E6:60:62:B2:45:0E:38:71:AF:08:41:F5:63
Authority key identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
Certificate issuer: /CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Certificate serial: 019D9D764058D8EBB6C1525C654FEED01374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 22:01:05 +0000
Manifest this update: Fri 17 Apr 2026 22:01:05 +0000
Manifest next update: Sat 18 Apr 2026 22:01:05 +0000
Files and hashes: 1: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl (hash: iJmgYnEG52+LC2BrcekcOrandr+ewfXiO6b4ytUyq1E=)
2: vhW7lS-JBYebJEO-U1J2yweu6Yo.roa (hash: hv3bo8RYqKbVjpyma1UuE8rn8DDYyjzn6U1qa0IMKCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:76:40:58:d8:eb:b6:c1:52:5c:65:4f:ee:d0:13:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Validity
Not Before: Apr 17 22:01:05 2026 GMT
Not After : Apr 18 22:01:05 2026 GMT
Subject: CN=da891b5aa85591e66062b2450e3871af0841f563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:1a:03:6f:17:a2:d3:d2:4d:1b:75:db:e9:
15:04:f1:95:ed:4d:d0:9b:e7:3f:d5:2a:38:fa:c5:
ff:86:76:a9:26:1e:4d:82:6c:12:fd:e0:a1:0e:16:
2d:d9:bd:4d:a0:d8:f8:94:f0:94:7b:c6:60:2f:52:
80:7e:78:d8:a7:cb:c6:21:92:39:9d:d6:2c:12:e0:
a9:28:60:f3:c8:51:ef:aa:74:c0:f6:07:43:12:0a:
93:d6:89:94:85:4b:bb:e3:76:40:5a:fc:c6:87:4b:
da:fe:4c:52:fb:90:fc:cc:b7:3c:29:0f:fc:8e:dd:
2d:5b:3d:37:55:d2:53:7f:fb:b3:9e:2d:93:7d:65:
39:e2:18:1f:00:fb:a1:3b:85:02:1f:86:83:ea:4d:
6d:21:b9:67:68:8a:34:d1:24:e3:ae:a3:6c:29:ea:
1d:9a:26:37:6e:57:20:d2:eb:66:f3:ef:f8:31:92:
25:91:60:e5:9d:c2:fd:29:f3:f5:a0:c0:81:42:e3:
92:7b:0f:6d:99:7f:6c:1a:55:d9:27:d7:a1:1b:70:
9b:0f:7b:75:91:8d:4c:88:c6:1e:bc:57:25:c1:a4:
03:75:dc:d8:d5:e9:88:78:fe:cf:c2:b0:f1:5f:d2:
e2:da:8d:b5:20:9c:6d:af:43:f9:ee:dd:a6:54:95:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:89:1B:5A:A8:55:91:E6:60:62:B2:45:0E:38:71:AF:08:41:F5:63
X509v3 Authority Key Identifier:
keyid:E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:82:4d:0a:19:a4:67:03:48:49:79:f4:77:bb:82:46:37:51:
00:86:0b:9d:a5:c2:0c:bd:86:c3:9f:f2:59:60:4f:12:26:51:
3d:bc:ca:65:f0:ca:e1:9c:cc:d2:fd:61:dc:c9:88:d4:e1:50:
6b:1d:10:67:6f:48:bf:68:01:7d:fd:b6:f5:bd:a3:77:4c:a4:
09:94:83:56:b3:23:33:3a:36:71:fe:d2:ef:e0:95:87:0d:18:
d7:b3:66:68:00:ad:7a:97:8e:e4:c9:14:44:35:05:85:e7:76:
17:fc:bb:14:3f:d8:38:62:17:39:0f:f4:02:09:eb:f8:4a:24:
60:3a:9f:f4:30:bb:f2:9e:f5:c6:74:b3:12:bf:1d:10:dc:74:
f2:62:68:3e:0b:58:b1:98:00:18:b9:51:27:cf:17:f1:04:2a:
52:6b:b1:19:1e:ba:ac:d1:81:32:50:97:d2:f5:ac:07:6b:ea:
f2:50:42:db:1b:c7:91:ae:fd:d5:df:af:78:a7:ea:f6:06:65:
55:c0:e2:c3:ba:8a:ae:49:ca:cf:a0:c8:73:e1:89:6e:50:e9:
23:b8:2c:c8:29:c2:19:f5:f2:22:b2:68:38:3b:16:d9:bc:47:
90:92:35:34:68:cc:b6:16:77:11:3a:50:bd:2b:37:71:e6:43:
c7:44:bf:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ddkBY2Ou2wVJcZU/u0BN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWVkOWE5ZDFiNmI1MzgzZWJmOTQ2ZDVmYzU0OTgwNjEy
NTYzZWEwHhcNMjYwNDE3MjIwMTA1WhcNMjYwNDE4MjIwMTA1WjAzMTEwLwYDVQQD
EyhkYTg5MWI1YWE4NTU5MWU2NjA2MmIyNDUwZTM4NzFhZjA4NDFmNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+EaA28XotPSTRt12+kVBPGV7U3Q
m+c/1So4+sX/hnapJh5NgmwS/eChDhYt2b1NoNj4lPCUe8ZgL1KAfnjYp8vGIZI5
ndYsEuCpKGDzyFHvqnTA9gdDEgqT1omUhUu743ZAWvzGh0va/kxS+5D8zLc8KQ/8
jt0tWz03VdJTf/uzni2TfWU54hgfAPuhO4UCH4aD6k1tIblnaIo00STjrqNsKeod
miY3blcg0utm8+/4MZIlkWDlncL9KfP1oMCBQuOSew9tmX9sGlXZJ9ehG3CbD3t1
kY1MiMYevFclwaQDddzY1emIeP7PwrDxX9Li2o21IJxtr0P57t2mVJUgIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqJG1qoVZHmYGKyRQ44ca8IQfVjMB8GA1UdIwQY
MBaAFOKe2anRtrU4Pr+UbV/FSYBhJWPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zOGVjNWItMzM2ZC00YTFjLWE4NGEt
ZjZjNjg1OWIzMGYwLzEvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zOGVjNWItMzM2ZC00YTFjLWE4NGEtZjZjNjg1OWIzMGYw
LzEvNHA3WnFkRzJ0VGctdjVSdFg4VkpnR0VsWS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYJNChmk
ZwNISXn0d7uCRjdRAIYLnaXCDL2Gw5/yWWBPEiZRPbzKZfDK4ZzM0v1h3MmI1OFQ
ax0QZ29Iv2gBff229b2jd0ykCZSDVrMjMzo2cf7S7+CVhw0Y17NmaACtepeO5MkU
RDUFhed2F/y7FD/YOGIXOQ/0Agnr+EokYDqf9DC78p71xnSzEr8dENx08mJoPgtY
sZgAGLlRJ88X8QQqUmuxGR66rNGBMlCX0vWsB2vq8lBC2xvHka791d+veKfq9gZl
VcDiw7qKrknKz6DIc+GJblDpI7gsyCnCGfXyIrJoODsW2bxHkJI1NGjMthZ3ETpQ
vSs3ceZDx0S/Bg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:28:07 2026 by rpki-client