Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
File: iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json)
Hash identifier: Zxgomc7RMPfACkwCizPBw4DeQgLMfizfIcqYvo7i+4Q=
Subject key identifier: 6D:54:89:70:1D:93:61:51:21:BE:65:C3:A7:D2:13:A1:66:42:2A:9F
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 019D9998E66ABD70B0BAB410AA0B372FC8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
Manifest number: 0A04
Signing time: Fri 17 Apr 2026 04:00:27 +0000
Manifest this update: Fri 17 Apr 2026 04:00:27 +0000
Manifest next update: Sat 18 Apr 2026 04:00:27 +0000
Files and hashes: 1: 1-kKT9I5hXcGMY4BXtI91L6PWY5Q.roa (hash: hWaDKKuFN6+6e36Ikm8e0jjTVm6uyDQ92iqKklLnoi4=)
2: NEQkMGAJAfKugYCF_SBXZZt_zOA.roa (hash: 1zriG+EOUPPANFuX8FQR4exMMCMJ2lG+QMPasFhRCHE=)
3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: HXFj4VQJhqyLjXc677MqEMLlqDJHBkMxj7TgRMIk/QM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:e6:6a:bd:70:b0:ba:b4:10:aa:0b:37:2f:c8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: Apr 17 04:00:27 2026 GMT
Not After : Apr 18 04:00:27 2026 GMT
Subject: CN=6d5489701d93615121be65c3a7d213a166422a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:da:a9:b5:e5:e9:20:bc:06:8b:13:69:dd:
a2:41:fc:06:cc:59:af:8c:3c:f4:1b:e9:06:0d:68:
76:c1:be:ec:0c:d3:ca:b4:8c:f5:52:18:52:af:67:
6f:09:2e:82:01:c2:8a:0a:de:84:c3:36:f4:8b:37:
50:ba:90:d5:67:1c:5b:20:00:e7:2e:29:d0:52:c5:
b1:d4:b4:7b:df:a8:b8:56:62:10:d1:47:bb:33:fb:
32:73:7a:91:ea:8f:d1:e8:01:08:8d:4c:c2:fd:9b:
a0:ac:ea:39:08:cb:75:5a:c9:46:dc:f5:c2:25:da:
80:6c:6e:5f:30:9d:f8:60:6b:c0:fb:6d:21:9c:25:
f6:3b:38:12:65:77:4f:57:3c:65:37:d6:7b:c8:34:
15:6e:7e:77:f8:6f:be:14:2e:57:9e:a1:38:80:0c:
4f:29:cf:bb:11:75:35:dc:f6:b1:b4:3a:a5:9b:c3:
9a:06:a4:03:e9:24:3f:9d:71:4b:6f:bf:0f:26:de:
bf:b1:d5:e9:f0:40:13:79:cc:f0:92:62:76:53:7e:
23:0c:3c:1c:d7:1b:71:23:0e:3f:d9:52:91:3d:46:
9d:af:79:bb:85:30:ee:cf:d0:95:b0:0a:34:c3:89:
cd:94:b5:1b:fd:6b:67:cf:21:f0:e7:0a:68:2f:ab:
49:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:54:89:70:1D:93:61:51:21:BE:65:C3:A7:D2:13:A1:66:42:2A:9F
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:53:62:3a:3c:a6:4f:55:ab:f0:f5:cf:b3:18:99:dd:7c:24:
17:99:4f:12:f7:d7:fc:60:4e:ba:33:51:5e:8f:31:d1:7c:c2:
0a:17:cf:8a:df:10:3c:80:e0:9d:90:7f:a4:a9:eb:9e:5c:32:
01:e0:63:3e:5e:e6:c9:71:2b:7b:e2:59:99:1b:36:3d:64:e8:
a2:42:35:f5:53:86:74:b5:09:36:81:93:7f:b8:ba:af:c7:d2:
e6:84:37:89:9b:ac:4c:01:de:e5:74:65:00:94:92:4a:6b:d8:
54:d8:cb:c3:a3:0d:db:0c:e1:82:70:8e:0a:24:96:a8:2c:37:
69:53:50:26:30:65:79:0f:3c:1d:0c:31:88:64:b9:d5:78:17:
2d:01:7d:2d:e9:f0:c9:c5:f5:de:6c:50:d0:e5:f5:21:07:13:
d2:84:a5:25:0d:da:84:56:cf:23:8e:80:84:dd:44:e2:50:d5:
d8:d0:e6:54:cb:7e:cf:4e:2b:75:c2:b6:0e:73:20:15:29:4c:
5b:e9:b0:11:84:d0:de:1a:35:c9:bd:2d:cd:28:51:1c:2d:f3:
59:56:a5:a2:72:02:49:24:92:44:45:08:17:94:f0:e9:90:5a:
6a:71:71:bd:c5:cc:67:2f:74:b9:08:02:92:fc:67:44:db:b1:
64:19:20:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmOZqvXCwurQQqgs3L8ivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmUxOTA1Y2Q3YWYzNmU2M2FkYTYzNjZjMTQ3YjYxZDg1
YzlmMmIwHhcNMjYwNDE3MDQwMDI3WhcNMjYwNDE4MDQwMDI3WjAzMTEwLwYDVQQD
Eyg2ZDU0ODk3MDFkOTM2MTUxMjFiZTY1YzNhN2QyMTNhMTY2NDIyYTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvnaqbXl6SC8BosTad2iQfwGzFmv
jDz0G+kGDWh2wb7sDNPKtIz1UhhSr2dvCS6CAcKKCt6Ewzb0izdQupDVZxxbIADn
LinQUsWx1LR736i4VmIQ0Ue7M/syc3qR6o/R6AEIjUzC/ZugrOo5CMt1WslG3PXC
JdqAbG5fMJ34YGvA+20hnCX2OzgSZXdPVzxlN9Z7yDQVbn53+G++FC5XnqE4gAxP
Kc+7EXU13PaxtDqlm8OaBqQD6SQ/nXFLb78PJt6/sdXp8EATeczwkmJ2U34jDDwc
1xtxIw4/2VKRPUadr3m7hTDuz9CVsAo0w4nNlLUb/WtnzyHw5wpoL6tJUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1UiXAdk2FRIb5lw6fSE6FmQiqfMB8GA1UdIwQY
MBaAFIj+GQXNevNuY62mNmwUe2HYXJ8rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUt
ZDYzM2FhNzBkZDY2LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUtZDYzM2FhNzBkZDY2
LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1NiOjym
T1Wr8PXPsxiZ3XwkF5lPEvfX/GBOujNRXo8x0XzCChfPit8QPIDgnZB/pKnrnlwy
AeBjPl7myXEre+JZmRs2PWTookI19VOGdLUJNoGTf7i6r8fS5oQ3iZusTAHe5XRl
AJSSSmvYVNjLw6MN2wzhgnCOCiSWqCw3aVNQJjBleQ88HQwxiGS51XgXLQF9Lenw
ycX13mxQ0OX1IQcT0oSlJQ3ahFbPI46AhN1E4lDV2NDmVMt+z04rdcK2DnMgFSlM
W+mwEYTQ3ho1yb0tzShRHC3zWValonICSSSSREUIF5Tw6ZBaanFxvcXMZy90uQgC
kvxnRNuxZBkgKA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:02 2026 by rpki-client