Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier: a6yc5lVbMHVtmwDQ9LeWe6pT+irhHRkiGPCxJBZ+o3w=
Subject key identifier: 67:F4:76:54:94:6B:F1:23:67:BA:4F:8A:AB:8F:7D:DB:70:B6:42:8D
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 019E1C1012BBC521CA14E7854D6848492E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number: 0707
Signing time: Tue 12 May 2026 12:01:15 +0000
Manifest this update: Tue 12 May 2026 12:01:15 +0000
Manifest next update: Wed 13 May 2026 12:01:15 +0000
Files and hashes: 1: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: KwhDAsCXUvbqHB4xLkcNG7QfIa5b9oriGInyKKhzsHM=)
2: Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa (hash: imyx+MqhErllzPgURUbLOjPqBlQ0hxwFitun79GI6bQ=)
3: pIH-PyJ-S7KYRBMhx3HzyVyBgpM.roa (hash: 1cLs+Wdw+wnP8h4XUUBLHG3PCH085TENzzZDNYgitoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:12:bb:c5:21:ca:14:e7:85:4d:68:48:49:2e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: May 12 12:01:15 2026 GMT
Not After : May 13 12:01:15 2026 GMT
Subject: CN=67f47654946bf12367ba4f8aab8f7ddb70b6428d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:86:8b:43:4f:b8:22:2a:13:34:f2:28:ab:35:
2f:74:b6:4b:ae:97:68:3d:dc:ea:d5:fd:07:82:96:
81:2d:1c:df:86:e3:7a:de:8c:7d:65:c0:a9:1f:2f:
87:5e:ac:c0:a7:5d:62:11:c5:e4:10:32:05:3b:e9:
59:80:0d:84:4a:ec:3d:8e:9f:30:e4:48:63:1a:9b:
56:43:a3:1b:e6:c6:85:60:df:b7:c4:ee:5b:4d:e8:
6a:86:52:38:68:c7:6e:fb:df:8d:d7:47:e5:d8:5e:
e1:23:f3:b8:b6:7e:ff:4d:78:7b:aa:3d:62:6e:5c:
7d:6d:32:85:35:be:44:94:0d:60:7d:a6:d0:86:b3:
8e:84:f9:31:86:5d:e6:19:ac:7a:bf:fd:bb:1b:54:
3a:f1:ca:ef:9c:e1:d4:8c:a0:4e:d1:e1:a0:02:1d:
f2:3f:b4:2d:12:ec:26:01:9e:96:b1:8a:a4:74:06:
3d:e7:ee:8e:c9:66:06:b4:cd:91:8d:3f:1f:16:6a:
76:27:df:f2:58:5e:0e:0b:27:c6:b7:34:06:e5:1c:
8b:e8:0e:e4:8a:c3:14:a3:1f:0d:5f:26:aa:77:48:
36:21:85:a3:e3:5e:37:33:02:93:47:2c:d7:a0:f8:
55:04:05:bc:56:f4:ee:f1:c9:f2:33:41:d2:89:5b:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F4:76:54:94:6B:F1:23:67:BA:4F:8A:AB:8F:7D:DB:70:B6:42:8D
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:11:92:53:34:0d:ca:19:a0:7b:4a:3a:80:b1:20:34:5c:07:
2d:a0:d7:7c:79:a7:a9:23:81:22:b5:9a:c1:f5:02:d9:e5:cc:
93:25:43:62:e3:44:68:1f:4e:be:aa:d5:be:cd:f9:99:80:51:
2c:cc:bb:8a:cb:a3:13:54:d1:20:06:0d:73:85:75:1d:10:6f:
2c:fe:e3:15:cb:33:dc:fd:85:23:e4:65:d3:bc:a1:d4:99:ca:
e0:26:14:09:d1:62:c2:5b:b2:7b:38:96:90:00:d0:65:aa:17:
b1:a6:10:4c:90:98:d3:ca:32:31:d6:b6:5c:7a:b4:e7:0e:8d:
97:61:a3:54:31:42:d3:fb:4c:b5:c0:05:d8:47:b6:5c:28:32:
82:5b:f0:dc:2b:62:f1:5b:67:13:79:d3:94:3e:aa:11:bf:13:
54:b1:d0:f1:1d:e0:4c:19:7c:8c:b2:7f:23:05:88:b0:70:5a:
59:18:49:9c:38:92:05:b8:d9:f4:70:b8:39:22:e7:ab:ba:55:
62:eb:7e:52:a7:08:ec:1c:cf:03:1b:fa:0e:fd:8b:ca:d9:50:
9f:6b:bb:87:1e:c9:e5:2c:13:55:bd:e9:5e:41:13:fb:c8:fd:
10:6c:30:2b:bd:bd:f5:92:62:55:85:5e:bc:ae:0e:a5:9f:b2:
c1:88:2c:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cEBK7xSHKFOeFTWhISS6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjNmNmRjNDYxMGY2YzliYmFhNDUzMjExMTczOGU0OTNi
NmFkZjAwHhcNMjYwNTEyMTIwMTE1WhcNMjYwNTEzMTIwMTE1WjAzMTEwLwYDVQQD
Eyg2N2Y0NzY1NDk0NmJmMTIzNjdiYTRmOGFhYjhmN2RkYjcwYjY0MjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYaLQ0+4IioTNPIoqzUvdLZLrpdo
Pdzq1f0HgpaBLRzfhuN63ox9ZcCpHy+HXqzAp11iEcXkEDIFO+lZgA2ESuw9jp8w
5EhjGptWQ6Mb5saFYN+3xO5bTehqhlI4aMdu+9+N10fl2F7hI/O4tn7/TXh7qj1i
blx9bTKFNb5ElA1gfabQhrOOhPkxhl3mGax6v/27G1Q68crvnOHUjKBO0eGgAh3y
P7QtEuwmAZ6WsYqkdAY95+6OyWYGtM2RjT8fFmp2J9/yWF4OCyfGtzQG5RyL6A7k
isMUox8NXyaqd0g2IYWj4143MwKTRyzXoPhVBAW8VvTu8cnyM0HSiVtkoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGf0dlSUa/EjZ7pPiquPfdtwtkKNMB8GA1UdIwQY
MBaAFOHz9txGEPbJu6pFMhEXOOSTtq3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzYxMzItY2E3Ny00NTg0LThkN2It
MjkxYjdhZDA5M2JmLzEvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMzYxMzItY2E3Ny00NTg0LThkN2ItMjkxYjdhZDA5M2Jm
LzEvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxGSUzQN
yhmge0o6gLEgNFwHLaDXfHmnqSOBIrWawfUC2eXMkyVDYuNEaB9OvqrVvs35mYBR
LMy7isujE1TRIAYNc4V1HRBvLP7jFcsz3P2FI+Rl07yh1JnK4CYUCdFiwluyeziW
kADQZaoXsaYQTJCY08oyMda2XHq05w6Nl2GjVDFC0/tMtcAF2Ee2XCgyglvw3Cti
8VtnE3nTlD6qEb8TVLHQ8R3gTBl8jLJ/IwWIsHBaWRhJnDiSBbjZ9HC4OSLnq7pV
Yut+UqcI7BzPAxv6Dv2LytlQn2u7hx7J5SwTVb3pXkET+8j9EGwwK7299ZJiVYVe
vK4OpZ+ywYgs4w==
-----END CERTIFICATE-----
Generated at Tue May 12 21:29:40 2026 by rpki-client