
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier: dwF/0KHmiEZRivUOoQ+G950cQJGndy3+c3L6QTCoZPs=
Subject key identifier: 05:3A:16:26:A4:BE:6D:95:55:1C:E1:73:11:9C:37:80:12:B5:C7:24
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial: 019E1DFE7EF4E44D7F4E11379C3939EC4C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number: 153F
Signing time: Tue 12 May 2026 21:01:18 +0000
Manifest this update: Tue 12 May 2026 21:01:18 +0000
Manifest next update: Wed 13 May 2026 21:01:18 +0000
Files and hashes: 1: 3Kqw9tljPQG5d-js0HaYveBuk-4.roa (hash: D1nlz+BjAzn+Pt0loadLXbRjBXPaaFlVhaNwxEkZAGY=)
2: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: YF4SnUMjoZPG+ov8gPKM2TD8jj5g9BwakDxeanKQdMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:7e:f4:e4:4d:7f:4e:11:37:9c:39:39:ec:4c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Validity
Not Before: May 12 21:01:18 2026 GMT
Not After : May 13 21:01:18 2026 GMT
Subject: CN=053a1626a4be6d95551ce173119c378012b5c724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:89:c8:55:ac:19:78:09:5f:ab:98:f2:50:e9:
34:7e:14:a7:89:0a:a3:2a:29:f2:bc:2c:9d:9d:26:
32:95:ca:72:79:95:6b:8c:11:07:2f:f9:e2:2b:dd:
c1:9b:1f:2d:d6:42:5e:5b:da:fc:61:24:d8:f4:37:
74:1f:68:f9:15:a4:00:8b:c7:e9:21:59:eb:53:ef:
4c:df:e3:ca:25:58:2f:fc:76:73:72:c5:a6:13:af:
bf:c6:d3:37:87:1f:e9:d4:2c:03:29:4f:c4:9d:06:
4d:fb:b3:4e:29:48:42:82:83:27:19:84:4f:74:4a:
14:bd:b8:28:40:b5:51:9c:95:a7:1c:00:93:51:ec:
4e:f3:82:32:67:6e:77:d4:9a:d1:a4:e9:27:8e:98:
32:bf:35:5d:3c:71:ca:74:ec:84:18:5c:cd:28:00:
2b:a0:33:59:97:7c:37:21:0e:c1:e7:e4:2c:7f:d7:
44:76:f2:6d:e9:89:f9:55:25:47:ff:c0:28:64:39:
ad:a9:9c:20:6c:10:c3:e4:90:60:4f:e4:b3:31:f5:
27:e4:36:2c:dc:c2:a0:db:80:0c:ae:38:da:cf:b9:
e8:cf:5a:70:0d:f3:6c:46:08:ee:d7:0e:f7:33:a7:
3d:56:d3:3d:9f:be:46:ac:24:0a:c1:aa:c3:44:47:
e7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3A:16:26:A4:BE:6D:95:55:1C:E1:73:11:9C:37:80:12:B5:C7:24
X509v3 Authority Key Identifier:
keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:9f:c4:18:cb:eb:f7:98:e5:50:71:95:bf:39:a1:e8:43:4c:
cd:9f:c5:8f:35:ae:25:58:bc:b2:08:24:ee:c6:69:72:0d:cf:
f6:61:bf:38:a5:73:e3:1b:f0:5f:07:d7:5e:76:bc:95:8b:1e:
e3:22:6d:b3:8c:82:9d:db:e0:5b:c4:5a:ab:6c:87:53:7f:ce:
21:ab:6a:92:1c:f3:b5:5e:6b:8a:0f:98:8e:1d:9c:9e:5f:ac:
c4:7f:c7:d8:a6:f3:95:d6:71:04:55:83:29:9d:08:74:0e:99:
7e:d3:d5:bb:f4:c0:4c:89:1a:df:85:9c:7d:a3:5f:2a:ed:30:
2d:28:f5:a9:d6:4a:3f:62:d6:e8:f2:2c:bb:29:46:8d:a5:4c:
fb:0c:4e:0c:8c:92:f6:79:bc:b2:f8:d7:7b:8d:94:72:38:47:
72:36:66:f8:3c:59:24:49:2e:09:a6:51:0c:b4:05:c5:2a:1b:
63:f2:ee:87:03:2a:b7:5a:25:9b:c5:dc:4a:45:b2:6d:dd:4c:
3d:18:88:16:d3:5f:52:07:ae:1f:ee:74:18:d6:fd:6c:6f:88:
37:1c:54:da:89:e4:94:b4:50:d2:85:1b:58:65:69:0d:b2:f5:
f2:2d:ac:84:b2:dc:02:9b:92:2c:b7:c7:95:38:09:a8:d4:cb:
06:f6:1b:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/n705E1/ThE3nDk57Ew/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYmQ5Mjc2YTZmNzhkYWMxMDAyYzM3ODNhMThkNDVlYzE0
YjVkNDMwHhcNMjYwNTEyMjEwMTE4WhcNMjYwNTEzMjEwMTE4WjAzMTEwLwYDVQQD
EygwNTNhMTYyNmE0YmU2ZDk1NTUxY2UxNzMxMTljMzc4MDEyYjVjNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8InIVawZeAlfq5jyUOk0fhSniQqj
KinyvCydnSYylcpyeZVrjBEHL/niK93Bmx8t1kJeW9r8YSTY9Dd0H2j5FaQAi8fp
IVnrU+9M3+PKJVgv/HZzcsWmE6+/xtM3hx/p1CwDKU/EnQZN+7NOKUhCgoMnGYRP
dEoUvbgoQLVRnJWnHACTUexO84IyZ2531JrRpOknjpgyvzVdPHHKdOyEGFzNKAAr
oDNZl3w3IQ7B5+Qsf9dEdvJt6Yn5VSVH/8AoZDmtqZwgbBDD5JBgT+SzMfUn5DYs
3MKg24AMrjjaz7noz1pwDfNsRgju1w73M6c9VtM9n75GrCQKwarDREfn3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU6Fiakvm2VVRzhcxGcN4AStcckMB8GA1UdIwQY
MBaAFOK9knam942sEALDeDoY1F7BS11DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hNTg4MWEtOThlOC00ZTQ1LWJjYjgt
NzFlZWNmODk4ZDQyLzEvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hNTg4MWEtOThlOC00ZTQ1LWJjYjgtNzFlZWNmODk4ZDQy
LzEvNHIyU2RxYjNqYXdRQXNONE9oalVYc0ZMWFVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxZ/EGMvr
95jlUHGVvzmh6ENMzZ/FjzWuJVi8sggk7sZpcg3P9mG/OKVz4xvwXwfXXna8lYse
4yJts4yCndvgW8Raq2yHU3/OIatqkhzztV5rig+Yjh2cnl+sxH/H2KbzldZxBFWD
KZ0IdA6ZftPVu/TATIka34WcfaNfKu0wLSj1qdZKP2LW6PIsuylGjaVM+wxODIyS
9nm8svjXe42UcjhHcjZm+DxZJEkuCaZRDLQFxSobY/LuhwMqt1olm8XcSkWybd1M
PRiIFtNfUgeuH+50GNb9bG+INxxU2onklLRQ0oUbWGVpDbL18i2shLLcApuSLLfH
lTgJqNTLBvYbgA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:33:16 2026 by rpki-client