Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
File: 4fLKlRgjMUpfTRCmangiOY-4iWs.mft (raw, json)
Hash identifier: LmLTaII479Iavpm5iSZeK014yUAARwlJYoz0O4oL0NE=
Subject key identifier: 20:DA:67:1E:8C:C8:87:B2:FE:73:42:A9:08:E6:13:F3:F5:DE:53:B1
Authority key identifier: E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
Certificate issuer: /CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
Certificate serial: 019E1C475D1CEA7680C7491E5DEB84DD27CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 13:01:39 +0000
Manifest this update: Tue 12 May 2026 13:01:39 +0000
Manifest next update: Wed 13 May 2026 13:01:39 +0000
Files and hashes: 1: 4fLKlRgjMUpfTRCmangiOY-4iWs.crl (hash: hUl9zdloKfwqXhjg3X0AUEJF+hxwq/4NPTk4FB1XzVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:5d:1c:ea:76:80:c7:49:1e:5d:eb:84:dd:27:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
Validity
Not Before: May 12 13:01:39 2026 GMT
Not After : May 13 13:01:39 2026 GMT
Subject: CN=20da671e8cc887b2fe7342a908e613f3f5de53b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:27:99:24:83:68:3c:0a:de:ae:8c:30:e3:
a2:65:e6:9e:3d:b8:ae:d5:66:1a:6a:99:d2:5a:41:
1a:50:ff:b0:f7:fa:17:d7:46:79:dd:c3:5d:90:82:
82:64:7f:fe:03:35:91:82:67:9d:5c:2f:df:88:a0:
e8:fc:19:18:45:40:d6:e5:31:39:01:4b:06:68:cd:
16:e4:15:d9:72:b0:00:b4:0d:61:81:06:de:42:29:
11:a9:5d:8e:c0:ed:27:92:ed:94:e9:8f:82:05:1c:
e0:f9:63:bd:ca:ed:4d:0e:4b:cc:78:bb:03:ad:42:
73:97:78:8a:61:6f:c8:4a:7e:b5:d7:a6:7e:52:78:
11:9c:c0:a8:8f:12:f5:4a:48:3c:80:7d:fc:df:23:
f3:b8:99:04:c3:89:a4:d6:bd:4c:8d:81:06:1c:55:
75:dd:9b:ec:aa:01:75:e8:fe:55:16:69:02:ed:fb:
29:3d:b0:9f:07:e0:53:7f:9f:d3:14:d3:9c:4f:99:
07:7d:6e:00:12:63:5b:2e:60:d4:4e:37:ca:50:29:
6d:24:2a:94:88:af:af:ae:bf:de:be:97:9a:e8:d1:
ae:5a:ef:e3:8d:2b:ad:e6:d0:a1:19:83:79:08:83:
ae:d7:30:e0:cc:50:9d:01:86:e0:07:d5:11:8c:6c:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DA:67:1E:8C:C8:87:B2:FE:73:42:A9:08:E6:13:F3:F5:DE:53:B1
X509v3 Authority Key Identifier:
keyid:E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4e:b4:ee:c8:35:f7:10:19:28:cb:5d:79:25:1b:af:9c:12:
54:9b:f9:88:24:67:0b:ab:48:33:4f:5f:04:60:c6:12:1f:34:
23:66:7a:e6:5d:1c:e3:9c:a7:e7:5f:19:85:63:8d:2b:f2:ce:
f6:2b:d1:6e:a5:31:8e:08:37:f1:d4:93:b7:68:e0:4b:86:82:
34:7b:23:dc:80:5c:c9:36:2d:ba:e8:f1:4c:df:7e:64:f3:a1:
68:11:3b:fc:42:f0:c4:1e:47:4c:85:b3:da:26:97:ea:a7:90:
10:c5:d0:7b:75:7f:7d:78:40:c7:ab:37:a3:7e:c6:ce:e0:e8:
1b:f0:ba:55:b6:83:b2:be:59:9c:01:62:ba:3c:2f:e8:e3:49:
1a:28:4d:08:36:bb:c0:e8:16:ac:19:4c:69:e3:fd:45:c7:a1:
af:3a:45:ee:b3:87:c4:b6:17:be:d4:ae:ea:95:69:2f:59:a1:
45:00:a3:f3:d4:4c:5d:ca:20:c5:a6:61:7c:d6:69:0a:29:80:
09:fb:38:c8:18:78:20:2c:d1:aa:31:6d:1a:94:76:0a:99:33:
ad:2d:04:bc:90:99:97:7c:c3:9b:e6:03:93:0f:d6:66:88:00:
78:fe:a4:1b:a8:7c:23:78:32:18:e0:72:f0:f1:e5:d6:80:8a:
ef:02:a2:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cR10c6naAx0keXeuE3SfNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjJjYTk1MTgyMzMxNGE1ZjRkMTBhNjZhNzgyMjM5OGZi
ODg5NmIwHhcNMjYwNTEyMTMwMTM5WhcNMjYwNTEzMTMwMTM5WjAzMTEwLwYDVQQD
EygyMGRhNjcxZThjYzg4N2IyZmU3MzQyYTkwOGU2MTNmM2Y1ZGU1M2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIwnmSSDaDwK3q6MMOOiZeaePbiu
1WYaapnSWkEaUP+w9/oX10Z53cNdkIKCZH/+AzWRgmedXC/fiKDo/BkYRUDW5TE5
AUsGaM0W5BXZcrAAtA1hgQbeQikRqV2OwO0nku2U6Y+CBRzg+WO9yu1NDkvMeLsD
rUJzl3iKYW/ISn6116Z+UngRnMCojxL1Skg8gH383yPzuJkEw4mk1r1MjYEGHFV1
3ZvsqgF16P5VFmkC7fspPbCfB+BTf5/TFNOcT5kHfW4AEmNbLmDUTjfKUCltJCqU
iK+vrr/evpea6NGuWu/jjSut5tChGYN5CIOu1zDgzFCdAYbgB9URjGyzFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDaZx6MyIey/nNCqQjmE/P13lOxMB8GA1UdIwQY
MBaAFOHyypUYIzFKX00Qpmp4IjmPuIlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZMS2xSZ2pNVXBmVFJDbWFuZ2lPWS00aVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC80ZjY5YWEtMjEzYS00OTdiLWIwNTkt
ZDI4ODRhMTliZTBhLzEvNGZMS2xSZ2pNVXBmVFJDbWFuZ2lPWS00aVdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC80ZjY5YWEtMjEzYS00OTdiLWIwNTktZDI4ODRhMTliZTBh
LzEvNGZMS2xSZ2pNVXBmVFJDbWFuZ2lPWS00aVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADk607sg1
9xAZKMtdeSUbr5wSVJv5iCRnC6tIM09fBGDGEh80I2Z65l0c45yn518ZhWONK/LO
9ivRbqUxjgg38dSTt2jgS4aCNHsj3IBcyTYtuujxTN9+ZPOhaBE7/ELwxB5HTIWz
2iaX6qeQEMXQe3V/fXhAx6s3o37GzuDoG/C6VbaDsr5ZnAFiujwv6ONJGihNCDa7
wOgWrBlMaeP9RcehrzpF7rOHxLYXvtSu6pVpL1mhRQCj89RMXcogxaZhfNZpCimA
Cfs4yBh4ICzRqjFtGpR2CpkzrS0EvJCZl3zDm+YDkw/WZogAeP6kG6h8I3gyGOBy
8PHl1oCK7wKivQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:52:11 2026 by rpki-client