Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f7987b-dec8-473e-9aee-fa9707163592/1/4wJ74mXbaaT32KtXHGXYnvzq9_4.mft
File: 4wJ74mXbaaT32KtXHGXYnvzq9_4.mft (raw, json)
Hash identifier: Uzo633hhheQAllqYHOL2UOW6ViMJ1vM89ACB4t/jc80=
Subject key identifier: 55:4F:1B:23:9C:6D:B6:1C:32:CB:04:C7:AF:8C:BE:5A:38:73:DB:46
Authority key identifier: E3:02:7B:E2:65:DB:69:A4:F7:D8:AB:57:1C:65:D8:9E:FC:EA:F7:FE
Certificate issuer: /CN=e3027be265db69a4f7d8ab571c65d89efceaf7fe
Certificate serial: 019E1C0FA4C8EA79F26E6FB6BAEBAF64874C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wJ74mXbaaT32KtXHGXYnvzq9_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f7987b-dec8-473e-9aee-fa9707163592/1/4wJ74mXbaaT32KtXHGXYnvzq9_4.mft
Manifest number: 11
Signing time: Tue 12 May 2026 12:00:47 +0000
Manifest this update: Tue 12 May 2026 12:00:47 +0000
Manifest next update: Wed 13 May 2026 12:00:47 +0000
Files and hashes: 1: 4wJ74mXbaaT32KtXHGXYnvzq9_4.crl (hash: 9wasuuuOAkI/4kQBaS7oS3Cso5frzWUaKaU8R8S8oGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f7987b-dec8-473e-9aee-fa9707163592/1/4wJ74mXbaaT32KtXHGXYnvzq9_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f7987b-dec8-473e-9aee-fa9707163592/1/4wJ74mXbaaT32KtXHGXYnvzq9_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wJ74mXbaaT32KtXHGXYnvzq9_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:a4:c8:ea:79:f2:6e:6f:b6:ba:eb:af:64:87:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3027be265db69a4f7d8ab571c65d89efceaf7fe
Validity
Not Before: May 12 12:00:47 2026 GMT
Not After : May 13 12:00:47 2026 GMT
Subject: CN=554f1b239c6db61c32cb04c7af8cbe5a3873db46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d5:70:3e:89:d0:dd:4b:73:ae:c8:46:41:ef:
47:84:1f:1b:13:d0:2d:9d:f6:d8:95:5d:4c:8c:21:
35:90:d5:f6:e2:5f:5a:4c:10:6f:4b:ef:5e:41:cf:
6b:83:9f:91:63:a1:d2:95:1a:08:b1:85:b3:bd:f3:
c0:7a:70:5f:bb:2a:f5:87:af:ae:62:ac:36:90:76:
25:86:fd:b9:2a:c8:fb:d0:f9:d8:48:20:94:9f:c1:
29:c8:a7:fd:e3:8d:69:71:e3:5c:4a:35:65:30:aa:
90:f5:e3:91:77:7e:98:33:12:8f:30:05:51:da:2e:
3b:b0:fc:d5:19:a9:84:12:f7:93:47:08:e8:c5:66:
27:3b:ca:48:f5:c8:9f:46:a0:02:c9:c1:ae:17:ae:
bf:e2:f3:0b:df:bc:67:fe:0e:37:96:72:f7:7a:6d:
f6:82:c3:af:7f:30:20:96:53:2f:99:80:5e:d9:c4:
7b:5e:e8:46:b1:b8:2a:4f:96:4c:c4:32:b0:d9:ca:
8c:63:4f:e4:b4:1f:b3:b4:64:4b:11:8b:38:9e:76:
30:01:bf:b9:8b:4a:f4:e2:5c:0f:06:be:6e:ec:6b:
22:f5:48:d4:f6:c3:d0:b5:e3:08:35:91:69:67:ba:
46:9a:ed:11:6f:18:aa:6b:5c:5a:ef:ac:84:e5:75:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4F:1B:23:9C:6D:B6:1C:32:CB:04:C7:AF:8C:BE:5A:38:73:DB:46
X509v3 Authority Key Identifier:
keyid:E3:02:7B:E2:65:DB:69:A4:F7:D8:AB:57:1C:65:D8:9E:FC:EA:F7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wJ74mXbaaT32KtXHGXYnvzq9_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f7987b-dec8-473e-9aee-fa9707163592/1/4wJ74mXbaaT32KtXHGXYnvzq9_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f7987b-dec8-473e-9aee-fa9707163592/1/4wJ74mXbaaT32KtXHGXYnvzq9_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f7:92:9d:99:f2:e9:6a:2b:b3:34:69:1c:1f:8b:21:cb:a2:
ce:87:a3:67:b3:2c:42:4c:43:68:d4:01:dc:bd:af:0c:b8:23:
58:54:05:26:71:8c:5e:d9:6f:96:55:16:1e:d7:21:d9:6c:84:
75:bd:af:4f:22:48:8a:5a:5f:ea:e3:2a:f1:c3:53:e7:97:4e:
43:56:a2:1e:8d:c2:4b:50:2f:7a:97:bd:b3:d2:52:8d:62:d7:
03:b7:4f:c8:b0:ba:2b:64:b3:17:31:1a:80:a0:9f:82:bf:6e:
0b:0c:4a:4f:e8:71:ae:21:03:fd:07:9f:a4:07:1f:cf:37:11:
43:e1:91:9e:3b:d5:9e:2f:5e:ce:5d:13:7f:b7:37:8b:17:83:
55:63:97:1f:5a:ba:4e:b4:dc:4a:9b:72:85:a0:0e:00:70:2a:
d4:73:7f:84:eb:67:6d:14:f6:47:e7:ca:83:6d:9d:5a:bf:d8:
37:a1:9a:19:57:87:67:2f:c0:21:75:dc:a5:b4:77:55:e2:be:
cb:e7:fa:2f:c6:43:51:c2:af:85:9b:9c:d3:92:d7:98:7a:a8:
62:4e:25:c6:84:f8:da:e5:49:5d:76:61:63:de:c0:84:b9:e2:
14:f5:e4:d3:0d:74:95:ae:d9:d8:f5:e7:3c:8d:44:5f:7b:58:
f2:0b:19:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cD6TI6nnybm+2uuuvZIdMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMDI3YmUyNjVkYjY5YTRmN2Q4YWI1NzFjNjVkODllZmNl
YWY3ZmUwHhcNMjYwNTEyMTIwMDQ3WhcNMjYwNTEzMTIwMDQ3WjAzMTEwLwYDVQQD
Eyg1NTRmMWIyMzljNmRiNjFjMzJjYjA0YzdhZjhjYmU1YTM4NzNkYjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9VwPonQ3UtzrshGQe9HhB8bE9At
nfbYlV1MjCE1kNX24l9aTBBvS+9eQc9rg5+RY6HSlRoIsYWzvfPAenBfuyr1h6+u
Yqw2kHYlhv25Ksj70PnYSCCUn8EpyKf9441pceNcSjVlMKqQ9eORd36YMxKPMAVR
2i47sPzVGamEEveTRwjoxWYnO8pI9cifRqACycGuF66/4vML37xn/g43lnL3em32
gsOvfzAgllMvmYBe2cR7XuhGsbgqT5ZMxDKw2cqMY0/ktB+ztGRLEYs4nnYwAb+5
i0r04lwPBr5u7Gsi9UjU9sPQteMINZFpZ7pGmu0Rbxiqa1xa76yE5XX78wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVPGyOcbbYcMssEx6+Mvlo4c9tGMB8GA1UdIwQY
MBaAFOMCe+Jl22mk99irVxxl2J786vf+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHdKNzRtWGJhYVQzMkt0WEhHWFludnpxOV80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mNzk4N2ItZGVjOC00NzNlLTlhZWUt
ZmE5NzA3MTYzNTkyLzEvNHdKNzRtWGJhYVQzMkt0WEhHWFludnpxOV80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mNzk4N2ItZGVjOC00NzNlLTlhZWUtZmE5NzA3MTYzNTky
LzEvNHdKNzRtWGJhYVQzMkt0WEhHWFludnpxOV80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/eSnZny
6WorszRpHB+LIcuizoejZ7MsQkxDaNQB3L2vDLgjWFQFJnGMXtlvllUWHtch2WyE
db2vTyJIilpf6uMq8cNT55dOQ1aiHo3CS1Avepe9s9JSjWLXA7dPyLC6K2SzFzEa
gKCfgr9uCwxKT+hxriED/QefpAcfzzcRQ+GRnjvVni9ezl0Tf7c3ixeDVWOXH1q6
TrTcSptyhaAOAHAq1HN/hOtnbRT2R+fKg22dWr/YN6GaGVeHZy/AIXXcpbR3VeK+
y+f6L8ZDUcKvhZuc05LXmHqoYk4lxoT42uVJXXZhY97AhLniFPXk0w10la7Z2PXn
PI1EX3tY8gsZNg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:48:09 2026 by rpki-client