Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
File: 4ucXSfgCklOQH3HUZBA56Q8al_o.mft (raw, json)
Hash identifier: tYHH7X32tQj1H7wZE93V9F6mXC0Pv7RghTsP5ppIQZY=
Subject key identifier: 4E:63:CB:5F:EF:DE:5A:77:94:7B:54:C3:CD:84:C8:60:8F:EF:00:E3
Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
Certificate issuer: /CN=e2e71749f8029253901f71d4641039e90f1a97fa
Certificate serial: 019D9B50A592E82E8C7E21638F042CAB8896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
Manifest number: E6
Signing time: Fri 17 Apr 2026 12:00:46 +0000
Manifest this update: Fri 17 Apr 2026 12:00:46 +0000
Manifest next update: Sat 18 Apr 2026 12:00:46 +0000
Files and hashes: 1: 4ucXSfgCklOQH3HUZBA56Q8al_o.crl (hash: XicN1FRVZxpXNrYqdNbO1Hz3+GQjGNPPCfYdtBk9Ais=)
2: JcRsIAV11TxO42T56xBXGNtE8kc.roa (hash: 3pabyOSkwOQBV5aehMnDFgC88a6tehv2gFnKarnZZow=)
3: XbFlHyCBOID9fwZAWWJUvKR3I1U.roa (hash: d1XG1P6bU90g/zeLcvn00HiiT+uT6qBEWhZA1fPBjyc=)
4: ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa (hash: Ilz4iptmtb2hDf1QiYufOvE04YvbCXcLVA+AVaG4uKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:a5:92:e8:2e:8c:7e:21:63:8f:04:2c:ab:88:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa
Validity
Not Before: Apr 17 12:00:46 2026 GMT
Not After : Apr 18 12:00:46 2026 GMT
Subject: CN=4e63cb5fefde5a77947b54c3cd84c8608fef00e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:31:15:5b:56:9e:c6:8d:3e:8f:b9:7e:d2:
71:44:ea:8e:94:fb:35:fa:cd:eb:87:9a:e5:b9:f8:
0e:6e:ae:bb:9d:0d:8d:40:e4:83:23:c5:e5:ca:b6:
bf:cf:90:00:54:f7:cd:ee:e5:82:fe:ef:5f:5f:a7:
5c:35:8b:73:7a:ea:6f:43:bf:e8:de:4b:53:77:7d:
73:b6:ad:75:24:29:60:79:74:76:a7:db:3a:92:f3:
56:ba:4e:67:61:85:4d:a8:3d:9e:f3:c2:a8:80:6a:
f5:88:b2:d6:31:6b:24:42:0c:00:23:b0:7e:e6:f3:
3c:4b:b2:04:c3:a4:02:8f:58:ca:4b:c9:61:36:8a:
f6:80:cb:d9:32:85:5b:c8:8f:91:6a:4b:91:a7:19:
fa:bd:fd:38:10:cc:aa:82:65:91:8b:ea:22:c8:00:
a8:85:75:51:82:d2:5f:e4:99:d4:aa:72:f9:50:d8:
51:83:b5:5f:85:c2:2a:4e:09:4c:71:13:9d:7a:e1:
2c:93:c6:17:00:bf:5f:39:dc:b3:50:0c:04:84:ea:
63:a5:26:8b:09:9c:43:84:6a:b2:16:e6:86:b9:35:
52:d1:80:a3:d0:31:6c:7f:15:b3:d9:2f:d8:c9:dc:
ee:c0:ff:72:3b:af:98:55:d6:5c:25:7a:1c:a1:4d:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:63:CB:5F:EF:DE:5A:77:94:7B:54:C3:CD:84:C8:60:8F:EF:00:E3
X509v3 Authority Key Identifier:
keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d8:f9:51:e4:08:58:e3:aa:1f:aa:54:2a:2c:d8:a9:88:b4:
4d:ad:b5:b0:14:23:5f:27:1b:50:e1:b8:ae:06:94:11:62:6d:
4f:57:ea:39:25:1c:25:12:cb:53:4c:55:3b:2f:d2:24:e8:f4:
12:4e:ea:24:8b:57:47:4a:56:63:b5:cd:2e:63:04:59:e4:75:
8d:2a:e8:0d:73:6b:e6:a0:a8:93:3b:4d:99:a2:6d:c4:fe:95:
83:6a:d8:6d:51:2a:4d:65:4d:a4:07:b3:0a:67:3d:52:5a:88:
8b:b3:69:c6:04:95:1d:b1:93:a5:00:91:37:02:86:87:ac:59:
f9:3a:42:28:ba:64:ba:8b:2f:f6:c9:2a:c0:ee:8d:54:bf:7c:
ae:f7:10:20:50:b2:b6:97:92:ac:d0:42:c5:68:5d:ea:98:b7:
f5:ce:9b:5a:ae:65:ad:b0:91:73:e8:98:90:8a:08:5c:65:98:
f4:2e:07:21:ff:ec:ef:bb:f6:9c:34:42:5b:88:c9:a5:de:5b:
56:8d:cb:12:01:ac:38:2b:86:82:bd:ff:a5:b9:01:ce:a0:c0:
c6:d6:89:02:d6:be:75:b9:2b:fd:e5:bb:11:52:c9:44:c5:7d:
89:43:d2:38:f0:a7:e4:e0:e9:98:ac:31:de:58:ac:1b:6b:9f:
da:cd:52:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUKWS6C6MfiFjjwQsq4iWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTcxNzQ5ZjgwMjkyNTM5MDFmNzFkNDY0MTAzOWU5MGYx
YTk3ZmEwHhcNMjYwNDE3MTIwMDQ2WhcNMjYwNDE4MTIwMDQ2WjAzMTEwLwYDVQQD
Eyg0ZTYzY2I1ZmVmZGU1YTc3OTQ3YjU0YzNjZDg0Yzg2MDhmZWYwMGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPExFVtWnsaNPo+5ftJxROqOlPs1
+s3rh5rlufgObq67nQ2NQOSDI8Xlyra/z5AAVPfN7uWC/u9fX6dcNYtzeupvQ7/o
3ktTd31ztq11JClgeXR2p9s6kvNWuk5nYYVNqD2e88KogGr1iLLWMWskQgwAI7B+
5vM8S7IEw6QCj1jKS8lhNor2gMvZMoVbyI+RakuRpxn6vf04EMyqgmWRi+oiyACo
hXVRgtJf5JnUqnL5UNhRg7VfhcIqTglMcROdeuEsk8YXAL9fOdyzUAwEhOpjpSaL
CZxDhGqyFuaGuTVS0YCj0DFsfxWz2S/YydzuwP9yO6+YVdZcJXocoU37KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5jy1/v3lp3lHtUw82EyGCP7wDjMB8GA1UdIwQY
MBaAFOLnF0n4ApJTkB9x1GQQOekPGpf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zMzEwNGEtYTkwMy00Mjc4LWJjNjAt
OGFkMjMwMThhNWFkLzEvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8zMzEwNGEtYTkwMy00Mjc4LWJjNjAtOGFkMjMwMThhNWFk
LzEvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdj5UeQI
WOOqH6pUKizYqYi0Ta21sBQjXycbUOG4rgaUEWJtT1fqOSUcJRLLU0xVOy/SJOj0
Ek7qJItXR0pWY7XNLmMEWeR1jSroDXNr5qCokztNmaJtxP6Vg2rYbVEqTWVNpAez
Cmc9UlqIi7NpxgSVHbGTpQCRNwKGh6xZ+TpCKLpkuosv9skqwO6NVL98rvcQIFCy
tpeSrNBCxWhd6pi39c6bWq5lrbCRc+iYkIoIXGWY9C4HIf/s77v2nDRCW4jJpd5b
Vo3LEgGsOCuGgr3/pbkBzqDAxtaJAta+dbkr/eW7EVLJRMV9iUPSOPCn5ODpmKwx
3lisG2uf2s1SWQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:08:41 2026 by rpki-client