Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft
File: 4YpwGxuHPrjfflleMt8fBxMJ4vE.mft (raw, json)
Hash identifier: yc0chKA8ZhXuuQcIPZiFCb0YRtAZJxJaqHxAXgnEkCU=
Subject key identifier: F9:89:B6:3B:60:05:FF:44:D9:C0:C9:B4:C5:3B:A9:11:F5:FF:05:49
Authority key identifier: E1:8A:70:1B:1B:87:3E:B8:DF:7E:59:5E:32:DF:1F:07:13:09:E2:F1
Certificate issuer: /CN=e18a701b1b873eb8df7e595e32df1f071309e2f1
Certificate serial: 019E202345B3CBC3AF3B7057ECD26AD9C6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YpwGxuHPrjfflleMt8fBxMJ4vE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft
Manifest number: 0138
Signing time: Wed 13 May 2026 07:00:42 +0000
Manifest this update: Wed 13 May 2026 07:00:42 +0000
Manifest next update: Thu 14 May 2026 07:00:42 +0000
Files and hashes: 1: 4YpwGxuHPrjfflleMt8fBxMJ4vE.crl (hash: YyTGEgDu721KzkftTJGRM3QelMRcYYxoI0V01RrV7XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YpwGxuHPrjfflleMt8fBxMJ4vE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:45:b3:cb:c3:af:3b:70:57:ec:d2:6a:d9:c6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18a701b1b873eb8df7e595e32df1f071309e2f1
Validity
Not Before: May 13 07:00:42 2026 GMT
Not After : May 14 07:00:42 2026 GMT
Subject: CN=f989b63b6005ff44d9c0c9b4c53ba911f5ff0549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:23:9e:73:23:45:e7:7f:c9:50:97:40:76:
d8:d5:2b:6d:82:ca:e1:d6:4d:21:7c:37:66:98:d4:
cd:8e:d1:73:0b:0d:f6:cf:1b:82:7b:b6:24:07:b1:
dd:27:f5:89:b2:df:ba:d1:2f:86:9c:cf:05:e9:4c:
53:29:2d:4c:a2:13:66:b5:e9:ac:ef:79:32:b9:fa:
c7:02:98:75:26:e4:48:74:f4:86:39:af:20:0d:04:
3b:b0:05:c4:32:82:d1:46:1a:19:3b:f8:3f:f0:43:
f8:cf:b6:a7:0b:98:41:b2:ca:fa:1d:e9:cd:2d:3d:
37:76:96:81:c7:c4:6c:04:ef:2e:65:9a:e2:c0:42:
3f:71:64:9c:25:d9:0b:d0:31:11:49:ad:fd:e7:48:
96:cd:f5:fe:06:ed:5e:88:31:84:ac:5a:01:80:d0:
bc:43:ec:59:08:49:2e:6f:27:a5:c6:1d:c7:40:bf:
9a:c3:0a:99:84:73:5e:12:1d:c5:b0:48:2d:17:9d:
a8:a3:59:39:80:79:1a:8e:eb:7b:fd:c3:af:d2:aa:
97:70:79:61:0f:3a:0c:6d:08:f4:bb:47:fd:49:ac:
6c:e3:7b:c2:94:f1:d3:20:fd:5e:ea:7c:00:da:43:
c1:94:ae:cc:7b:c6:38:68:a3:b8:25:fc:97:df:40:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:89:B6:3B:60:05:FF:44:D9:C0:C9:B4:C5:3B:A9:11:F5:FF:05:49
X509v3 Authority Key Identifier:
keyid:E1:8A:70:1B:1B:87:3E:B8:DF:7E:59:5E:32:DF:1F:07:13:09:E2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YpwGxuHPrjfflleMt8fBxMJ4vE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4280af-b212-4968-9f92-b795cacb3b93/1/4YpwGxuHPrjfflleMt8fBxMJ4vE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:aa:6f:fe:d9:75:ac:a3:f2:9f:dd:da:94:ab:89:1c:bf:77:
a5:fe:9e:93:aa:8c:39:9e:fd:a8:81:45:50:1f:4a:cb:fc:f4:
37:da:4e:f2:65:8a:5d:eb:53:91:27:2a:91:16:df:2b:30:fb:
56:1d:62:c7:e2:cc:a7:db:b3:87:09:11:22:cd:75:39:59:b2:
dc:1e:fa:79:9b:17:cb:1d:03:a8:15:97:a1:90:0f:45:4e:fe:
cc:89:be:18:c4:10:58:e3:db:26:bf:22:6d:c1:d4:c5:c9:30:
c8:1a:29:98:c8:89:fe:3b:81:24:91:3a:3f:e9:62:21:44:c5:
c5:c0:8c:2e:4d:41:b8:a8:8f:0f:98:3e:a4:8f:d2:78:18:fa:
ff:81:42:3c:3e:f5:32:25:e8:8f:79:a5:83:9c:27:7d:af:9a:
51:a7:ce:da:08:1d:66:e7:09:08:09:ba:65:3e:61:6c:f6:69:
51:02:5b:f3:7c:b7:5c:20:cc:0a:42:ea:4a:e2:29:08:a6:11:
42:d7:d5:67:6b:a3:81:51:d2:fe:65:59:f4:65:a8:51:bf:aa:
ec:92:7a:fc:11:90:f3:ea:1b:26:b0:3b:ed:9e:92:62:a8:1d:
cb:64:0f:4c:90:f4:16:ef:25:fe:06:a4:9c:d5:3a:3f:03:5f:
2e:10:fd:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI0Wzy8OvO3BX7NJq2cbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOGE3MDFiMWI4NzNlYjhkZjdlNTk1ZTMyZGYxZjA3MTMw
OWUyZjEwHhcNMjYwNTEzMDcwMDQyWhcNMjYwNTE0MDcwMDQyWjAzMTEwLwYDVQQD
EyhmOTg5YjYzYjYwMDVmZjQ0ZDljMGM5YjRjNTNiYTkxMWY1ZmYwNTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuIjnnMjRed/yVCXQHbY1Sttgsrh
1k0hfDdmmNTNjtFzCw32zxuCe7YkB7HdJ/WJst+60S+GnM8F6UxTKS1MohNmtems
73kyufrHAph1JuRIdPSGOa8gDQQ7sAXEMoLRRhoZO/g/8EP4z7anC5hBssr6HenN
LT03dpaBx8RsBO8uZZriwEI/cWScJdkL0DERSa3950iWzfX+Bu1eiDGErFoBgNC8
Q+xZCEkubyelxh3HQL+awwqZhHNeEh3FsEgtF52oo1k5gHkajut7/cOv0qqXcHlh
DzoMbQj0u0f9Saxs43vClPHTIP1e6nwA2kPBlK7Me8Y4aKO4JfyX30CbGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmJtjtgBf9E2cDJtMU7qRH1/wVJMB8GA1UdIwQY
MBaAFOGKcBsbhz64335ZXjLfHwcTCeLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlwd0d4dUhQcmpmZmxsZU10OGZCeE1KNHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80MjgwYWYtYjIxMi00OTY4LTlmOTIt
Yjc5NWNhY2IzYjkzLzEvNFlwd0d4dUhQcmpmZmxsZU10OGZCeE1KNHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi80MjgwYWYtYjIxMi00OTY4LTlmOTItYjc5NWNhY2IzYjkz
LzEvNFlwd0d4dUhQcmpmZmxsZU10OGZCeE1KNHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6pv/tl1
rKPyn93alKuJHL93pf6ek6qMOZ79qIFFUB9Ky/z0N9pO8mWKXetTkScqkRbfKzD7
Vh1ix+LMp9uzhwkRIs11OVmy3B76eZsXyx0DqBWXoZAPRU7+zIm+GMQQWOPbJr8i
bcHUxckwyBopmMiJ/juBJJE6P+liIUTFxcCMLk1BuKiPD5g+pI/SeBj6/4FCPD71
MiXoj3mlg5wnfa+aUafO2ggdZucJCAm6ZT5hbPZpUQJb83y3XCDMCkLqSuIpCKYR
QtfVZ2ujgVHS/mVZ9GWoUb+q7JJ6/BGQ8+obJrA77Z6SYqgdy2QPTJD0Fu8l/gak
nNU6PwNfLhD9WQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:01:50 2026 by rpki-client