Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
File: 4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json)
Hash identifier: n2QSDi2OBXWmndEGJDCfACGTJC0mHE8Qy58llroNeZc=
Subject key identifier: 04:3B:CD:CC:F0:4F:3A:F0:28:87:A6:99:75:6B:ED:C9:85:C3:6C:A7
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Certificate issuer: /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial: 019E1C0F837DA15843795F80CDEC04B9D5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 12:00:39 +0000
Manifest this update: Tue 12 May 2026 12:00:39 +0000
Manifest next update: Wed 13 May 2026 12:00:39 +0000
Files and hashes: 1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: 81nRsZMC4MENQJ9XsjG+Lblz5r7Nh4dWZ/vcWqPtgV4=)
2: UdwPC5AdaFNXtHywAO0ry8S25cM.roa (hash: tBmGJBJCpxYDGJAJLW9uH/5FtF0sovEOEcwJbFRoFVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:83:7d:a1:58:43:79:5f:80:cd:ec:04:b9:d5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Validity
Not Before: May 12 12:00:39 2026 GMT
Not After : May 13 12:00:39 2026 GMT
Subject: CN=043bcdccf04f3af02887a699756bedc985c36ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:dc:6d:2a:26:19:52:67:f6:62:06:f1:03:
65:4d:82:c4:7e:c0:10:ba:c2:ef:e9:1a:24:11:fb:
87:48:02:3d:ad:ff:69:eb:d7:79:b5:5b:2a:3c:4f:
ab:73:ec:6f:7e:4b:90:23:ac:80:c9:ef:31:8c:e1:
d8:fa:06:a0:f0:c0:78:f3:e2:f7:b6:36:4d:7c:c6:
2e:0f:6d:8d:b2:46:9b:a8:43:81:c3:a9:10:18:42:
35:cf:17:d3:c4:c4:c7:43:5d:70:d0:fa:9a:c2:05:
9e:a4:df:c1:ac:ff:d3:7b:92:94:89:72:3f:f5:e2:
65:63:4f:73:ef:c1:85:36:6e:14:d9:a9:ee:a6:77:
f0:38:49:70:fb:9f:1e:9c:08:d8:b9:4c:a9:63:bc:
a9:84:46:64:1f:1b:59:7f:27:4b:b0:82:dd:a0:6e:
4e:fb:c5:00:0a:e5:ab:61:a1:3d:2e:17:fa:b4:ef:
4b:7a:5a:88:5c:3f:28:ae:8d:73:dd:7e:d4:d7:be:
bd:7c:d1:cf:3d:e4:0e:09:35:2a:69:f0:a5:a8:e9:
8d:13:2d:26:c0:c9:3e:01:b7:29:e5:f4:f3:d6:1a:
8d:80:a3:0b:e3:ac:15:49:b8:72:a9:d5:c1:b2:82:
6d:5b:33:c4:d0:17:c3:9a:f1:e9:52:c3:43:22:fd:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3B:CD:CC:F0:4F:3A:F0:28:87:A6:99:75:6B:ED:C9:85:C3:6C:A7
X509v3 Authority Key Identifier:
keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5f:22:14:33:e9:1e:e5:4e:47:72:31:d0:74:eb:33:61:71:
93:fe:52:20:4b:da:92:fa:98:de:b1:0c:29:d3:d5:28:00:c2:
a7:56:c0:26:d2:71:f1:64:8c:31:f1:a2:1d:fe:6a:5a:85:e8:
44:db:1e:d5:a7:b0:86:73:b7:0f:26:59:f9:59:fc:37:3d:b0:
0b:f2:e2:3b:c6:69:0a:2b:e0:71:af:1b:76:02:64:16:48:8f:
63:c0:a6:be:10:d5:2c:ed:d9:29:b4:57:5a:8a:f4:a0:05:dd:
7a:01:c3:95:ff:29:2c:84:05:93:06:d0:75:74:03:19:d7:37:
08:10:22:8c:47:e6:61:18:fd:9d:38:1e:7e:b8:c9:bb:2a:3f:
17:72:a2:c1:05:b2:78:c3:de:87:6d:10:e6:88:62:9e:4c:a3:
45:3b:58:bd:c2:12:35:a5:87:98:49:b5:89:68:61:0c:83:5a:
43:ba:ad:31:31:56:e4:f2:cb:91:09:da:62:4a:59:dd:40:c0:
50:5a:0b:e0:27:4a:d9:34:01:fd:d5:76:c0:56:8e:ae:4f:07:
2e:8a:e5:ce:d1:38:c8:28:ed:b6:cc:20:f1:dc:0d:3a:1f:af:
da:04:ef:8a:05:f8:55:02:36:fe:64:6f:c4:8c:c5:a2:29:4a:
cd:06:f2:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cD4N9oVhDeV+AzewEudXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDA2YTA2ZGM0OTA5OTdmZjhmYzNhNDJlY2YzODliZWQz
ZGQxNzgwHhcNMjYwNTEyMTIwMDM5WhcNMjYwNTEzMTIwMDM5WjAzMTEwLwYDVQQD
EygwNDNiY2RjY2YwNGYzYWYwMjg4N2E2OTk3NTZiZWRjOTg1YzM2Y2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGncbSomGVJn9mIG8QNlTYLEfsAQ
usLv6RokEfuHSAI9rf9p69d5tVsqPE+rc+xvfkuQI6yAye8xjOHY+gag8MB48+L3
tjZNfMYuD22NskabqEOBw6kQGEI1zxfTxMTHQ11w0PqawgWepN/BrP/Te5KUiXI/
9eJlY09z78GFNm4U2anupnfwOElw+58enAjYuUypY7yphEZkHxtZfydLsILdoG5O
+8UACuWrYaE9Lhf6tO9LelqIXD8oro1z3X7U1769fNHPPeQOCTUqafClqOmNEy0m
wMk+Abcp5fTz1hqNgKML46wVSbhyqdXBsoJtWzPE0BfDmvHpUsNDIv3VnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQ7zczwTzrwKIemmXVr7cmFw2ynMB8GA1UdIwQY
MBaAFOEAagbcSQmX/4/DpC7POJvtPdF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzBiNWMtYjZjOC00OTc5LWE1M2Ut
NDk0ZTI2NDkxNzk2LzEvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84MzBiNWMtYjZjOC00OTc5LWE1M2UtNDk0ZTI2NDkxNzk2
LzEvNFFCcUJ0eEpDWmZfajhPa0xzODRtLTA5MFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM18iFDPp
HuVOR3Ix0HTrM2Fxk/5SIEvakvqY3rEMKdPVKADCp1bAJtJx8WSMMfGiHf5qWoXo
RNse1aewhnO3DyZZ+Vn8Nz2wC/LiO8ZpCivgca8bdgJkFkiPY8CmvhDVLO3ZKbRX
Wor0oAXdegHDlf8pLIQFkwbQdXQDGdc3CBAijEfmYRj9nTgefrjJuyo/F3KiwQWy
eMPeh20Q5ohinkyjRTtYvcISNaWHmEm1iWhhDINaQ7qtMTFW5PLLkQnaYkpZ3UDA
UFoL4CdK2TQB/dV2wFaOrk8HLorlztE4yCjttswg8dwNOh+v2gTvigX4VQI2/mRv
xIzFoilKzQbyJQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:26:18 2026 by rpki-client