Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: 2dIq9WFLUZGwT+EuozIQXHx2leQTN1CSgfzrOkMWo34=
Subject key identifier: 65:63:A2:42:5A:33:6F:AF:04:CD:0B:13:C3:D2:EE:F9:9B:6B:FD:8A
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 019E1DC77E8844B62DA2E0277EFE4E049B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 1716
Signing time: Tue 12 May 2026 20:01:13 +0000
Manifest this update: Tue 12 May 2026 20:01:13 +0000
Manifest next update: Wed 13 May 2026 20:01:13 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: v9VmRlrKIpjkDPcFzl+/ZSg3+QMYwxiR9GTJANoMzvQ=)
2: E582u3b_wirr6G_w4u9uogz74z8.roa (hash: 81B6PrtCWAN/tZ4dAD4doQginsu0czWU20EU6ygqMqw=)
3: XzHwdc8CnV6b37aUuwbB9K5aCVg.roa (hash: Ajp8GTPxK9A3C7R9uHBAngG8he1JSPPWTWmru9BuMHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:7e:88:44:b6:2d:a2:e0:27:7e:fe:4e:04:9b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: May 12 20:01:13 2026 GMT
Not After : May 13 20:01:13 2026 GMT
Subject: CN=6563a2425a336faf04cd0b13c3d2eef99b6bfd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:16:22:64:5d:0e:dd:a2:44:62:d6:c9:10:41:
2f:bd:b5:66:fc:0b:79:66:2a:b6:d3:5d:7b:42:d9:
88:66:93:61:19:29:a1:79:23:31:30:96:31:31:6e:
e7:fa:72:08:2a:3f:80:ed:20:c0:0b:3d:5c:ed:77:
af:72:f3:ca:85:a1:72:ca:fd:fb:3f:24:70:71:e6:
8d:93:30:d8:2f:9b:7f:dc:59:71:36:55:dc:9b:cb:
23:96:9b:fe:aa:4c:b0:9f:f4:5d:a5:31:1c:65:ca:
20:ce:b4:3d:e7:4a:8f:f5:2d:3b:26:39:b9:76:35:
9f:8a:ca:4a:c1:11:98:4c:4e:c7:77:44:bc:f1:5d:
f6:5a:72:05:03:20:d2:ac:94:0d:4d:74:d8:5e:d0:
66:bc:78:dd:c6:40:ad:29:da:0d:46:13:f3:ac:6a:
a1:dd:9d:29:e1:7c:9c:6a:58:85:8d:6c:77:5e:79:
d3:57:38:13:5e:92:f2:e2:0e:76:0d:df:bf:fb:c9:
5e:9b:5c:53:a5:58:e1:cd:2f:a3:1e:54:52:b6:b4:
b9:51:56:ec:b0:46:6f:2b:36:9b:42:0d:c2:3e:04:
e4:40:a0:bb:93:c0:d0:c4:1f:8a:8e:59:17:11:13:
cd:31:af:da:57:02:5e:37:91:cc:7f:b5:9b:16:f8:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:63:A2:42:5A:33:6F:AF:04:CD:0B:13:C3:D2:EE:F9:9B:6B:FD:8A
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:09:cf:84:6b:ac:f2:92:f7:e1:d2:cd:fc:20:f9:fb:59:d6:
0c:4c:9f:a8:ea:19:65:07:45:76:9e:c1:cd:13:ab:c5:fa:9d:
40:59:ed:d7:92:6a:78:46:f8:34:52:04:c6:03:02:dd:34:aa:
17:ea:38:f7:9d:d3:88:47:c7:e0:37:08:5d:3a:f3:98:49:f7:
a8:a9:13:cb:cb:74:39:b0:00:1d:7b:90:2c:8a:40:a6:21:76:
fc:19:3d:0a:e8:df:de:7c:1a:1d:4e:92:2b:54:7d:3e:dd:8e:
90:a5:a1:e2:00:8d:a0:59:9b:84:84:a1:c1:5c:28:0a:dc:60:
5e:bb:c5:18:73:17:bd:3f:ce:d4:85:fe:8e:2b:b4:5e:30:0e:
c1:b2:e1:eb:89:63:83:83:0a:0d:c0:cc:75:54:86:e2:25:61:
a5:ce:4c:19:c8:8c:f5:25:60:64:f2:a5:86:4d:20:ed:87:d6:
fa:be:33:0b:44:35:cb:3f:1f:f9:48:31:ea:9e:a8:52:99:58:
e3:d2:8c:78:22:03:2e:4f:3a:73:8d:9d:c5:1a:21:cb:65:51:
05:d7:5f:13:02:c9:43:98:b9:45:47:05:92:bd:cb:04:1b:61:
fb:2c:87:e9:7f:c0:03:d9:6c:81:20:f7:70:ab:da:9a:a6:78:
8a:f2:c9:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx36IRLYtouAnfv5OBJsGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjUzNmQyYjE3YzQ1YzE3NTczOWYzMzEzMTE5YmUyMTlk
MzMxYWMwHhcNMjYwNTEyMjAwMTEzWhcNMjYwNTEzMjAwMTEzWjAzMTEwLwYDVQQD
Eyg2NTYzYTI0MjVhMzM2ZmFmMDRjZDBiMTNjM2QyZWVmOTliNmJmZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRYiZF0O3aJEYtbJEEEvvbVm/At5
Ziq20117QtmIZpNhGSmheSMxMJYxMW7n+nIIKj+A7SDACz1c7XevcvPKhaFyyv37
PyRwceaNkzDYL5t/3FlxNlXcm8sjlpv+qkywn/RdpTEcZcogzrQ950qP9S07Jjm5
djWfispKwRGYTE7Hd0S88V32WnIFAyDSrJQNTXTYXtBmvHjdxkCtKdoNRhPzrGqh
3Z0p4XycaliFjWx3XnnTVzgTXpLy4g52Dd+/+8lem1xTpVjhzS+jHlRStrS5UVbs
sEZvKzabQg3CPgTkQKC7k8DQxB+KjlkXERPNMa/aVwJeN5HMf7WbFvhTUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVjokJaM2+vBM0LE8PS7vmba/2KMB8GA1UdIwQY
MBaAFOBlNtKxfEXBdXOfMxMRm+IZ0zGsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEt
MDZjOGJiMzc0YTU4LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEtMDZjOGJiMzc0YTU4
LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwnPhGus
8pL34dLN/CD5+1nWDEyfqOoZZQdFdp7BzROrxfqdQFnt15JqeEb4NFIExgMC3TSq
F+o4953TiEfH4DcIXTrzmEn3qKkTy8t0ObAAHXuQLIpApiF2/Bk9Cujf3nwaHU6S
K1R9Pt2OkKWh4gCNoFmbhIShwVwoCtxgXrvFGHMXvT/O1IX+jiu0XjAOwbLh64lj
g4MKDcDMdVSG4iVhpc5MGciM9SVgZPKlhk0g7YfW+r4zC0Q1yz8f+Ugx6p6oUplY
49KMeCIDLk86c42dxRohy2VRBddfEwLJQ5i5RUcFkr3LBBth+yyH6X/AA9lsgSD3
cKvamqZ4ivLJ7g==
-----END CERTIFICATE-----
Generated at Wed May 13 06:44:47 2026 by rpki-client