Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier: HWAWFJEyFVW6lCev1KXe5mfYy44AOZW7LkF45fWFpME=
Subject key identifier: FA:01:38:7D:C9:46:7D:5E:99:C1:8D:B6:34:1D:C7:6F:BB:E7:05:7A
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial: 019E1E34D90F84002A9F19FF146FB50B1938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number: 07D2
Signing time: Tue 12 May 2026 22:00:40 +0000
Manifest this update: Tue 12 May 2026 22:00:40 +0000
Manifest next update: Wed 13 May 2026 22:00:40 +0000
Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: zgvpFpJLG2PWcZpk9mkiDVFOeqxM54yMvWS5BYD9Tcg=)
2: AHfZCvtyXR1N7LVfRri-RiC1E6I.roa (hash: Rc0GVzYrZ//kqYZ3Jv1c6BblzqpktiqTIXdTmceeo7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:d9:0f:84:00:2a:9f:19:ff:14:6f:b5:0b:19:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Validity
Not Before: May 12 22:00:40 2026 GMT
Not After : May 13 22:00:40 2026 GMT
Subject: CN=fa01387dc9467d5e99c18db6341dc76fbbe7057a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:f9:3c:07:09:5b:02:86:a1:85:6d:7f:b7:
47:72:54:97:b9:55:61:9b:c8:a6:2a:48:c2:4c:39:
7e:f7:c4:dc:28:0a:e7:ae:36:1b:98:46:8e:9f:f9:
d8:b1:64:fa:54:93:1a:f5:55:9c:dc:de:03:df:a9:
68:aa:e8:fb:3d:88:b4:0c:a4:d0:cf:8e:ef:c8:58:
8a:8a:c1:3f:0f:bf:d9:6d:bd:af:2e:50:c8:5b:ae:
c2:4c:ac:84:c5:b3:d8:73:21:7e:23:52:e0:b1:98:
5f:73:c2:f9:5a:62:88:c5:8f:59:fb:fe:21:09:9f:
18:2e:9d:e2:e6:f6:c8:da:35:ce:ec:d1:54:52:93:
a7:64:d6:fb:cf:35:5a:e5:9c:02:a8:0b:51:39:39:
0a:24:0e:88:ea:e0:5d:09:bb:6d:c2:18:fd:76:29:
4d:f3:bc:b7:62:e2:75:08:06:01:60:14:af:df:b2:
7f:79:46:ca:db:4d:c1:2a:94:d4:15:7d:17:3e:c5:
50:60:4a:4b:e7:2d:84:41:26:33:ac:ff:d6:1f:ad:
38:ad:b9:af:14:49:96:d8:e3:78:b3:49:b6:a3:1c:
9d:e7:52:9a:08:7d:18:01:dd:e9:07:a4:59:73:83:
3f:33:1e:57:41:d0:4d:fa:48:46:37:f2:cd:d0:67:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:38:7D:C9:46:7D:5E:99:C1:8D:B6:34:1D:C7:6F:BB:E7:05:7A
X509v3 Authority Key Identifier:
keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:91:f3:b9:2a:56:7e:d0:5d:bd:44:59:17:bf:31:72:b3:6a:
93:05:0a:d8:a5:45:f1:99:7a:67:2e:fb:87:d6:8f:43:1f:e7:
4b:d2:e1:27:87:3b:d4:a1:75:86:fd:4d:39:32:7a:e7:49:ee:
f7:fe:5a:45:f8:7d:d3:ae:2e:b5:6a:32:8f:ed:03:f5:7e:a9:
4f:00:42:fb:2e:dd:9d:82:e9:f8:69:23:56:19:94:15:d6:0b:
a8:19:3a:f8:cc:5f:63:24:1c:19:2e:fa:28:9c:de:ed:c3:8a:
3c:cf:38:52:55:ce:b2:69:3f:25:e9:42:15:63:7c:b7:31:f1:
a9:c1:74:d3:66:87:59:b6:99:91:71:7d:2b:4c:49:02:53:a6:
39:c0:29:f8:d9:7e:3f:8c:fc:74:d9:73:6a:4c:37:f1:7c:a0:
ff:a2:a3:9e:17:fa:0a:ab:6a:9e:a2:63:56:8d:f5:bd:0c:78:
e2:97:29:dd:0a:7b:1c:e0:a1:c6:28:79:95:f3:66:81:9b:86:
b8:c4:8b:4f:ca:86:bf:a7:50:8d:cc:ca:c4:99:6d:b1:0e:a5:
e6:c8:40:1f:08:6e:14:53:44:52:5b:82:dc:ac:92:23:6b:2f:
3b:15:4e:a0:02:da:91:c0:50:5e:89:ff:21:e8:b8:4f:d8:9e:
ed:2b:e2:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNNkPhAAqnxn/FG+1Cxk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZDVkNTYxZTc2ZWYyNTljNGEwMmRmMzBmMzUwNjRkZWRl
ZGYyZDcwHhcNMjYwNTEyMjIwMDQwWhcNMjYwNTEzMjIwMDQwWjAzMTEwLwYDVQQD
EyhmYTAxMzg3ZGM5NDY3ZDVlOTljMThkYjYzNDFkYzc2ZmJiZTcwNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss35PAcJWwKGoYVtf7dHclSXuVVh
m8imKkjCTDl+98TcKArnrjYbmEaOn/nYsWT6VJMa9VWc3N4D36loquj7PYi0DKTQ
z47vyFiKisE/D7/Zbb2vLlDIW67CTKyExbPYcyF+I1LgsZhfc8L5WmKIxY9Z+/4h
CZ8YLp3i5vbI2jXO7NFUUpOnZNb7zzVa5ZwCqAtROTkKJA6I6uBdCbttwhj9dilN
87y3YuJ1CAYBYBSv37J/eUbK203BKpTUFX0XPsVQYEpL5y2EQSYzrP/WH604rbmv
FEmW2ON4s0m2oxyd51KaCH0YAd3pB6RZc4M/Mx5XQdBN+khGN/LN0GeoiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoBOH3JRn1emcGNtjQdx2+75wV6MB8GA1UdIwQY
MBaAFODV1WHnbvJZxKAt8w81Bk3t7fLXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kNDU0NjktMGM3Yi00NDEwLWJiNWUt
N2RjNTI4YWE1ZDRlLzEvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kNDU0NjktMGM3Yi00NDEwLWJiNWUtN2RjNTI4YWE1ZDRl
LzEvNE5YVlllZHU4bG5Fb0MzekR6VUdUZTN0OHRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzZHzuSpW
ftBdvURZF78xcrNqkwUK2KVF8Zl6Zy77h9aPQx/nS9LhJ4c71KF1hv1NOTJ650nu
9/5aRfh9064utWoyj+0D9X6pTwBC+y7dnYLp+GkjVhmUFdYLqBk6+MxfYyQcGS76
KJze7cOKPM84UlXOsmk/JelCFWN8tzHxqcF002aHWbaZkXF9K0xJAlOmOcAp+Nl+
P4z8dNlzakw38Xyg/6Kjnhf6CqtqnqJjVo31vQx44pcp3Qp7HOChxih5lfNmgZuG
uMSLT8qGv6dQjczKxJltsQ6l5shAHwhuFFNEUluC3KySI2svOxVOoALakcBQXon/
Iei4T9ie7SvipA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:10:41 2026 by rpki-client