Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json)
Hash identifier: 04qyxqB+tfK4jkheDPA8tHXZM+mz26qPEoOhYJ0ghLs=
Subject key identifier: A0:65:C4:14:0C:0D:FD:4B:63:32:D3:49:42:28:F6:E6:26:D0:F7:BA
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial: 019D98F4FC6C3DACE970DB28281D282991A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
Manifest number: 11D2
Signing time: Fri 17 Apr 2026 01:01:25 +0000
Manifest this update: Fri 17 Apr 2026 01:01:25 +0000
Manifest next update: Sat 18 Apr 2026 01:01:25 +0000
Files and hashes: 1: 0549ZLBzM4beeKAOhluORbZXoyA.roa (hash: WowH9si60Z2zpExgKOKJlrVy2XcJuZgBQ4vzt0r71L4=)
2: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: eqPml1oZ57d6CesUn7sJt7l15ENwpnkXZt9z4R/w0uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:fc:6c:3d:ac:e9:70:db:28:28:1d:28:29:91:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Validity
Not Before: Apr 17 01:01:25 2026 GMT
Not After : Apr 18 01:01:25 2026 GMT
Subject: CN=a065c4140c0dfd4b6332d3494228f6e626d0f7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:ee:eb:53:d0:e5:ba:d9:f8:19:63:9c:3b:
4c:52:3e:a4:5c:3d:61:da:96:f7:aa:c2:6f:43:e5:
ce:ea:19:c1:5e:17:94:f4:17:4e:67:3a:12:53:27:
5e:1e:22:fd:a5:8c:ef:7d:84:65:d7:a7:9f:04:b8:
68:1b:88:ce:15:95:44:f7:8d:b3:df:3d:ac:fb:f8:
68:67:e7:39:62:a4:db:d3:95:b0:46:fe:bb:c4:b8:
67:be:13:da:41:58:1a:9c:57:23:91:76:46:5d:19:
68:63:b4:ba:e6:3b:8a:25:1b:b8:a5:d1:1c:06:5b:
da:21:92:48:c1:01:65:2c:48:19:41:1e:ea:22:99:
b7:dc:98:1c:ef:c0:d5:51:d3:9c:c5:24:e0:15:5d:
dc:51:48:e5:5d:39:ec:93:24:b3:ba:87:76:06:a1:
ad:fe:67:5d:08:30:25:00:2a:14:f5:1b:10:0a:87:
0b:6e:f4:4a:f7:d6:23:60:e8:ec:64:ad:d6:0f:f4:
f0:9e:ad:19:d7:53:83:01:62:19:a8:c9:1b:12:7c:
b4:61:81:d8:f8:b8:3a:f1:08:1a:b1:a7:0c:72:63:
83:ba:39:f9:89:f8:8b:a4:5e:f7:ed:3f:a2:ac:04:
01:68:c2:25:a9:ab:44:18:98:fc:79:92:57:e5:5d:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:65:C4:14:0C:0D:FD:4B:63:32:D3:49:42:28:F6:E6:26:D0:F7:BA
X509v3 Authority Key Identifier:
keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:df:3c:22:8f:a9:7e:12:a3:41:00:c7:77:a9:06:da:39:bc:
fd:19:47:25:e7:2b:ee:50:c5:3a:7f:41:71:97:9a:ac:f0:0f:
91:b9:82:70:04:cf:bc:f5:23:5a:08:d1:6a:03:84:f8:23:1d:
db:6b:cf:42:cf:97:06:f1:27:8b:85:a6:b4:55:1a:f1:0a:01:
68:ee:3e:e8:95:a6:4e:99:eb:d7:2b:88:b5:2b:eb:84:57:2e:
b8:af:8d:4d:91:39:8b:07:ab:9c:6f:ab:23:f3:4a:88:07:67:
f2:6b:9b:e3:64:01:19:5f:88:c7:f1:42:fb:29:4e:95:5b:a0:
97:5a:83:de:7b:7d:0b:98:81:2c:de:81:c6:06:ac:69:de:26:
f1:28:7f:75:dd:ab:3c:70:f0:51:e0:b6:32:81:31:81:f7:c1:
d3:4d:1d:88:d2:7e:b6:e6:92:3e:06:38:57:ed:c6:59:2f:52:
36:24:6f:ec:62:f4:50:3d:a1:f8:ef:d6:d8:49:9e:bd:3c:d8:
1e:89:bc:6f:4a:0f:32:4a:1a:03:07:be:ad:d6:9a:87:52:d7:
b7:44:db:2e:c5:22:b3:9c:73:97:d3:6d:3c:4f:cc:f4:f7:80:
c5:6b:f3:c3:94:ad:57:3a:5e:99:a8:02:c0:b6:3f:70:f4:f1:
63:36:4d:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9PxsPazpcNsoKB0oKZGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZGY1ODUyYWY5MDViNDE1ZmRmNTNlMzI4NzZmNTdhNzRk
NmMxZjAwHhcNMjYwNDE3MDEwMTI1WhcNMjYwNDE4MDEwMTI1WjAzMTEwLwYDVQQD
EyhhMDY1YzQxNDBjMGRmZDRiNjMzMmQzNDk0MjI4ZjZlNjI2ZDBmN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIDu61PQ5brZ+BljnDtMUj6kXD1h
2pb3qsJvQ+XO6hnBXheU9BdOZzoSUydeHiL9pYzvfYRl16efBLhoG4jOFZVE942z
3z2s+/hoZ+c5YqTb05WwRv67xLhnvhPaQVganFcjkXZGXRloY7S65juKJRu4pdEc
BlvaIZJIwQFlLEgZQR7qIpm33Jgc78DVUdOcxSTgFV3cUUjlXTnskySzuod2BqGt
/mddCDAlACoU9RsQCocLbvRK99YjYOjsZK3WD/Twnq0Z11ODAWIZqMkbEny0YYHY
+Lg68QgasacMcmODujn5ifiLpF737T+irAQBaMIlqatEGJj8eZJX5V28mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBlxBQMDf1LYzLTSUIo9uYm0Pe6MB8GA1UdIwQY
MBaAFOHfWFKvkFtBX99T4yh29Xp01sHwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80YzkyMDYtOTVjYi00MzI0LWFiODgt
MWU2NTc3Y2ExNzJkLzEvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80YzkyMDYtOTVjYi00MzI0LWFiODgtMWU2NTc3Y2ExNzJk
LzEvNGQ5WVVxLVFXMEZmMzFQaktIYjFlblRXd2ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACN88Io+p
fhKjQQDHd6kG2jm8/RlHJecr7lDFOn9BcZearPAPkbmCcATPvPUjWgjRagOE+CMd
22vPQs+XBvEni4WmtFUa8QoBaO4+6JWmTpnr1yuItSvrhFcuuK+NTZE5iwernG+r
I/NKiAdn8mub42QBGV+Ix/FC+ylOlVugl1qD3nt9C5iBLN6Bxgasad4m8Sh/dd2r
PHDwUeC2MoExgffB000diNJ+tuaSPgY4V+3GWS9SNiRv7GL0UD2h+O/W2EmevTzY
Hom8b0oPMkoaAwe+rdaah1LXt0TbLsUis5xzl9NtPE/M9PeAxWvzw5StVzpemagC
wLY/cPTxYzZNgw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:21 2026 by rpki-client