Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft
File: 4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft (raw, json)
Hash identifier: HYLY4AlyZM1vh6V9QD9FXBfpzlHOlIke7ALcQKG8gbw=
Subject key identifier: B0:7D:82:C7:20:D7:83:86:37:78:E1:1D:7C:1C:70:5E:6F:CE:0A:F1
Authority key identifier: E0:35:F8:82:FA:6E:EF:25:20:0B:6A:7D:73:78:C2:85:92:6D:8C:9E
Certificate issuer: /CN=e035f882fa6eef25200b6a7d7378c285926d8c9e
Certificate serial: 019E1D595DFE203E8F6E291EC5D8C1451D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DX4gvpu7yUgC2p9c3jChZJtjJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft
Manifest number: 25
Signing time: Tue 12 May 2026 18:00:56 +0000
Manifest this update: Tue 12 May 2026 18:00:56 +0000
Manifest next update: Wed 13 May 2026 18:00:56 +0000
Files and hashes: 1: 4DX4gvpu7yUgC2p9c3jChZJtjJ4.crl (hash: Oe7U2VxaftDQY0ILHJ0ojn6WjE7X61s3lZvp+9gPCXY=)
2: xulwkrdTClCIo8JTMQSPEZiJ5xM.roa (hash: zBwBsovIkxRJ5sWGqQLeI9gfF8IlVwdOJj27qMN+l8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DX4gvpu7yUgC2p9c3jChZJtjJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:5d:fe:20:3e:8f:6e:29:1e:c5:d8:c1:45:1d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e035f882fa6eef25200b6a7d7378c285926d8c9e
Validity
Not Before: May 12 18:00:56 2026 GMT
Not After : May 13 18:00:56 2026 GMT
Subject: CN=b07d82c720d783863778e11d7c1c705e6fce0af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:c9:1a:37:c2:24:35:e1:67:4c:f0:1c:62:
2e:03:6d:48:81:de:22:88:45:ee:ac:4b:ab:d6:d0:
c7:f1:92:86:35:11:9f:a9:53:12:e9:50:43:e6:f1:
73:74:52:ee:1e:3a:c7:8f:8b:0e:03:8d:c7:a8:29:
c0:86:0b:bb:0c:0e:19:f6:60:7d:c6:4e:98:9b:ff:
ad:15:f8:9b:d1:d5:af:91:32:f9:d3:c2:7e:1b:a7:
c0:92:a9:d1:4e:cb:59:63:db:2e:71:25:bb:2e:1e:
63:49:88:9c:88:e9:37:fc:ef:b7:5e:80:de:49:93:
b6:4a:24:4c:ee:90:32:f7:8e:92:c0:61:ef:c1:87:
73:7a:57:8e:9d:d2:21:51:f0:03:c6:7b:65:20:ef:
f0:2b:a6:22:4e:c4:f7:64:ca:48:a9:f3:55:d8:c6:
b2:ca:c9:e0:24:6f:ff:9e:a9:ae:d3:b2:bf:a0:85:
98:4f:cb:d7:14:4f:46:ed:cb:63:07:91:cf:6f:a4:
87:91:ce:39:18:af:fb:4a:7f:f8:f6:8d:56:7a:1e:
6a:0f:4e:f9:83:c5:13:50:6f:09:be:e4:99:27:a1:
27:43:a3:b6:a5:b2:d9:b3:34:4a:d9:19:de:1a:bd:
75:ff:be:bc:69:fd:40:df:f3:78:d9:44:97:fd:35:
3f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7D:82:C7:20:D7:83:86:37:78:E1:1D:7C:1C:70:5E:6F:CE:0A:F1
X509v3 Authority Key Identifier:
keyid:E0:35:F8:82:FA:6E:EF:25:20:0B:6A:7D:73:78:C2:85:92:6D:8C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DX4gvpu7yUgC2p9c3jChZJtjJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cf:e3:2c:9b:55:b5:22:84:27:98:52:21:5f:71:6c:e9:c7:
bc:62:1b:4c:85:7d:53:15:a5:68:e4:25:c2:81:88:11:96:23:
a8:cd:d4:ba:3b:6c:d2:e7:95:30:07:fc:6f:e5:13:af:bb:04:
45:34:af:d1:35:6a:00:4b:1f:ce:06:d4:8b:c0:08:d6:fa:12:
7c:e2:55:dd:6a:01:2f:e5:23:d9:7c:28:a7:ea:cf:7a:a7:ce:
4d:65:d6:c5:33:4c:29:9f:40:73:b7:3a:a4:89:0c:36:90:ff:
6e:e3:a5:51:bd:ef:40:ae:66:2b:9b:b8:9e:82:76:7c:f1:24:
20:61:9a:ca:20:fc:81:dc:1a:5c:9c:b2:90:3c:63:cf:6a:7e:
12:b6:0c:7d:1c:96:ea:9f:41:6c:2f:83:88:82:51:a2:94:af:
fe:62:7a:1f:1f:79:71:24:db:00:79:63:fc:04:46:d4:1f:e3:
66:77:38:a6:53:1f:2b:93:fd:74:ee:9d:ec:97:22:14:dc:aa:
f0:cd:14:b7:25:a4:d1:3f:19:4a:b0:94:f7:0d:a1:a4:85:b0:
a6:03:81:c6:42:dc:1e:6d:02:6b:2b:e3:ac:98:4c:e5:7e:02:
38:31:74:74:d5:20:e1:20:4a:07:8d:72:1e:da:27:17:ad:8c:
95:99:55:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWV3+ID6PbikexdjBRR1PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMzVmODgyZmE2ZWVmMjUyMDBiNmE3ZDczNzhjMjg1OTI2
ZDhjOWUwHhcNMjYwNTEyMTgwMDU2WhcNMjYwNTEzMTgwMDU2WjAzMTEwLwYDVQQD
EyhiMDdkODJjNzIwZDc4Mzg2Mzc3OGUxMWQ3YzFjNzA1ZTZmY2UwYWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqXJGjfCJDXhZ0zwHGIuA21Igd4i
iEXurEur1tDH8ZKGNRGfqVMS6VBD5vFzdFLuHjrHj4sOA43HqCnAhgu7DA4Z9mB9
xk6Ym/+tFfib0dWvkTL508J+G6fAkqnRTstZY9sucSW7Lh5jSYiciOk3/O+3XoDe
SZO2SiRM7pAy946SwGHvwYdzeleOndIhUfADxntlIO/wK6YiTsT3ZMpIqfNV2May
ysngJG//nqmu07K/oIWYT8vXFE9G7ctjB5HPb6SHkc45GK/7Sn/49o1Weh5qD075
g8UTUG8JvuSZJ6EnQ6O2pbLZszRK2RneGr11/768af1A3/N42USX/TU/rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLB9gscg14OGN3jhHXwccF5vzgrxMB8GA1UdIwQY
MBaAFOA1+IL6bu8lIAtqfXN4woWSbYyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNERYNGd2cHU3eVVnQzJwOWMzakNoWkp0ako0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZjBhNzEtOTg5Zi00MDUyLThiMzgt
MjdmMzFiNzAyN2JkLzEvNERYNGd2cHU3eVVnQzJwOWMzakNoWkp0ako0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZjBhNzEtOTg5Zi00MDUyLThiMzgtMjdmMzFiNzAyN2Jk
LzEvNERYNGd2cHU3eVVnQzJwOWMzakNoWkp0ako0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8/jLJtV
tSKEJ5hSIV9xbOnHvGIbTIV9UxWlaOQlwoGIEZYjqM3Uujts0ueVMAf8b+UTr7sE
RTSv0TVqAEsfzgbUi8AI1voSfOJV3WoBL+Uj2Xwop+rPeqfOTWXWxTNMKZ9Ac7c6
pIkMNpD/buOlUb3vQK5mK5u4noJ2fPEkIGGayiD8gdwaXJyykDxjz2p+ErYMfRyW
6p9BbC+DiIJRopSv/mJ6Hx95cSTbAHlj/ARG1B/jZnc4plMfK5P9dO6d7JciFNyq
8M0UtyWk0T8ZSrCU9w2hpIWwpgOBxkLcHm0CayvjrJhM5X4CODF0dNUg4SBKB41y
HtonF62MlZlV/A==
-----END CERTIFICATE-----
Generated at Tue May 12 21:48:20 2026 by rpki-client