Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
File: 4njEqqAhvti5JuNZH99QyN9rwXI.mft (raw, json)
Hash identifier: a7QBXZpdOuRWmkeaeeNF/U7ex2pynwiAld8xdN61UmY=
Subject key identifier: 23:BF:FC:E4:C3:B2:23:A7:B3:D9:7E:4C:17:9C:89:E8:00:66:18:6E
Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
Certificate issuer: /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Certificate serial: 019E2091232A4AE41E55B0AC6674A04D9CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
Manifest number: 0B7D
Signing time: Wed 13 May 2026 09:00:43 +0000
Manifest this update: Wed 13 May 2026 09:00:43 +0000
Manifest next update: Thu 14 May 2026 09:00:43 +0000
Files and hashes: 1: 1-8kJiWXbzYyQn9Z_qYA1FhOH3SQ.roa (hash: sbcGPB93z3YNWrVB4YHHakteB4jeVAtpbXTGFYuXZTU=)
2: 4njEqqAhvti5JuNZH99QyN9rwXI.crl (hash: NUpfOSq1U/p6JovNFnBgWDzoX189J6hpLMQiXpiAbP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:23:2a:4a:e4:1e:55:b0:ac:66:74:a0:4d:9c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Validity
Not Before: May 13 09:00:43 2026 GMT
Not After : May 14 09:00:43 2026 GMT
Subject: CN=23bffce4c3b223a7b3d97e4c179c89e80066186e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ca:25:47:6c:60:f4:dd:ef:db:d8:92:7d:e4:
e0:aa:91:c5:1a:c8:d8:e7:ba:d3:03:b5:dd:8d:d7:
49:c6:56:44:26:24:8c:2c:70:19:69:65:a0:69:e5:
c7:65:d1:88:8f:6f:00:77:f5:10:1b:87:96:fd:c4:
bf:16:4a:5f:f2:77:21:fb:94:d1:f4:57:59:bf:5b:
3c:73:4a:22:61:44:1c:08:10:08:9b:1e:46:79:0d:
28:4d:d3:cb:6a:eb:54:be:31:72:14:23:fb:d3:b9:
16:db:85:d6:ae:30:4c:8f:6d:53:46:4f:14:f3:a3:
e4:18:a9:12:f2:bb:61:3a:73:6e:e4:56:26:96:50:
0b:9a:ef:4b:ae:2c:bd:fe:dd:e7:81:ab:4d:9a:06:
fe:e8:cf:d6:c6:d4:af:44:07:76:9f:8f:d1:66:bb:
17:5e:91:71:9e:83:fc:fa:6f:01:6c:7d:c3:14:dd:
79:de:13:ea:51:0a:f8:6c:ef:49:ca:04:a0:43:99:
b5:83:a0:6d:f8:cd:5e:47:03:f6:21:cf:04:ec:0f:
89:cc:18:c9:b7:bf:2a:40:4d:02:31:95:48:51:49:
50:30:71:ed:69:12:1e:24:ee:bd:e9:dd:02:5a:2c:
db:55:c7:c5:63:55:d4:18:1f:f2:ac:f1:32:2b:b5:
57:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BF:FC:E4:C3:B2:23:A7:B3:D9:7E:4C:17:9C:89:E8:00:66:18:6E
X509v3 Authority Key Identifier:
keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5b:0d:74:a8:a2:ac:f3:63:08:3a:1d:db:56:8d:a3:5e:cf:
10:85:0f:15:f6:83:d7:59:b3:ed:a7:f0:7f:00:97:8c:ae:94:
1f:d8:1a:5d:4a:c0:1f:ad:66:82:5a:b6:d0:80:60:d4:32:f0:
5e:4c:da:ca:79:4a:b3:38:15:f6:3a:6b:f1:bb:15:11:3f:df:
41:d3:0c:1d:da:2a:7c:43:dd:05:7a:30:e7:3b:01:df:d4:61:
b8:f8:3b:95:21:82:30:b2:fd:8d:1e:a0:9e:34:2e:41:de:08:
c7:67:97:36:59:1d:dd:d7:17:39:53:74:15:5d:21:17:ef:38:
56:92:6e:91:d7:d9:23:d5:53:d9:d8:3b:b8:3f:0d:25:14:39:
fb:5d:2a:c6:54:4f:bd:2e:f4:51:f2:ce:73:94:9b:da:15:8e:
d7:1a:b3:f1:03:93:03:30:3f:81:51:4a:a6:12:79:eb:e6:8e:
e6:23:c2:ed:1c:c3:3e:9f:92:19:aa:59:c4:2b:a6:ba:b8:a1:
8f:e8:4f:a0:63:94:56:0a:7f:fa:63:71:cd:d5:cd:af:1b:a1:
5a:63:16:69:ca:3e:68:77:c2:91:48:04:00:06:b3:27:c7:85:
9b:e5:79:ff:fb:5c:80:46:fd:b5:9b:1e:61:71:97:9f:60:e0:
17:b9:b1:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkSMqSuQeVbCsZnSgTZzVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNzhjNGFhYTAyMWJlZDhiOTI2ZTM1OTFmZGY1MGM4ZGY2
YmMxNzIwHhcNMjYwNTEzMDkwMDQzWhcNMjYwNTE0MDkwMDQzWjAzMTEwLwYDVQQD
EygyM2JmZmNlNGMzYjIyM2E3YjNkOTdlNGMxNzljODllODAwNjYxODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMolR2xg9N3v29iSfeTgqpHFGsjY
57rTA7XdjddJxlZEJiSMLHAZaWWgaeXHZdGIj28Ad/UQG4eW/cS/Fkpf8nch+5TR
9FdZv1s8c0oiYUQcCBAImx5GeQ0oTdPLautUvjFyFCP707kW24XWrjBMj21TRk8U
86PkGKkS8rthOnNu5FYmllALmu9Lriy9/t3ngatNmgb+6M/WxtSvRAd2n4/RZrsX
XpFxnoP8+m8BbH3DFN153hPqUQr4bO9JygSgQ5m1g6Bt+M1eRwP2Ic8E7A+JzBjJ
t78qQE0CMZVIUUlQMHHtaRIeJO696d0CWizbVcfFY1XUGB/yrPEyK7VXSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCO//OTDsiOns9l+TBeciegAZhhuMB8GA1UdIwQY
MBaAFOJ4xKqgIb7YuSbjWR/fUMjfa8FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jMDY5MzctOTNiMy00NDJlLTg2NzYt
ZmM0MzM5MTk4OGY3LzEvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jMDY5MzctOTNiMy00NDJlLTg2NzYtZmM0MzM5MTk4OGY3
LzEvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlsNdKii
rPNjCDod21aNo17PEIUPFfaD11mz7afwfwCXjK6UH9gaXUrAH61mglq20IBg1DLw
XkzaynlKszgV9jpr8bsVET/fQdMMHdoqfEPdBXow5zsB39RhuPg7lSGCMLL9jR6g
njQuQd4Ix2eXNlkd3dcXOVN0FV0hF+84VpJukdfZI9VT2dg7uD8NJRQ5+10qxlRP
vS70UfLOc5Sb2hWO1xqz8QOTAzA/gVFKphJ56+aO5iPC7RzDPp+SGapZxCumurih
j+hPoGOUVgp/+mNxzdXNrxuhWmMWaco+aHfCkUgEAAazJ8eFm+V5//tcgEb9tZse
YXGXn2DgF7mxIg==
-----END CERTIFICATE-----
Generated at Wed May 13 18:06:12 2026 by rpki-client