Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.mft
File: 4DcKtxTbCPR405PRKCdIkbeTKVI.mft (raw, json)
Hash identifier: nlyoDNwEtzS0eMooUKPQX4iu0dcUE+EZr0irf3myzgY=
Subject key identifier: 57:07:8A:CD:11:BD:F2:F1:A7:1C:9A:E1:23:E2:02:F9:4E:90:0B:1B
Authority key identifier: E0:37:0A:B7:14:DB:08:F4:78:D3:93:D1:28:27:48:91:B7:93:29:52
Certificate issuer: /CN=e0370ab714db08f478d393d128274891b7932952
Certificate serial: 019E1C0FD387DB6C2477BBFA687181DB142C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DcKtxTbCPR405PRKCdIkbeTKVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.mft
Manifest number: C7
Signing time: Tue 12 May 2026 12:00:59 +0000
Manifest this update: Tue 12 May 2026 12:00:59 +0000
Manifest next update: Wed 13 May 2026 12:00:59 +0000
Files and hashes: 1: 4DcKtxTbCPR405PRKCdIkbeTKVI.crl (hash: cxiGagBSrI7PBYBBiDHEek4HzyWjvOTyd9ZyzQku1tc=)
2: PF6_QJj8YRzBUWzRDIQ4t1IPmnA.roa (hash: h6piPoUmp38AjHoQiX6p9iBQOr+oUtxb1p4/tf2CUQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DcKtxTbCPR405PRKCdIkbeTKVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:d3:87:db:6c:24:77:bb:fa:68:71:81:db:14:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0370ab714db08f478d393d128274891b7932952
Validity
Not Before: May 12 12:00:59 2026 GMT
Not After : May 13 12:00:59 2026 GMT
Subject: CN=57078acd11bdf2f1a71c9ae123e202f94e900b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:95:ba:0f:b7:0e:8d:be:53:e9:12:65:0e:
a2:27:d3:17:63:f9:2c:bc:5a:a6:40:e9:f3:10:5a:
5f:8c:93:5f:1a:cc:18:b9:5e:99:f0:f0:3f:2b:78:
72:fe:54:6c:9a:74:07:d2:12:ad:b2:8a:af:ab:96:
2e:3d:4d:93:1f:91:df:dc:29:17:2b:64:0c:7a:05:
cd:33:90:a7:76:c5:bf:e8:10:62:7a:c4:8d:fc:01:
ee:2f:89:6e:62:22:f5:2d:bf:8f:2f:aa:d8:de:17:
41:70:c3:f5:05:f2:9a:f1:8b:c2:e6:75:b4:73:ee:
fa:b7:cc:85:2d:8b:e8:c5:a9:fd:e7:80:74:20:14:
c7:2b:a3:37:3c:c3:83:48:d7:0f:98:be:03:15:a0:
cf:fc:e0:6f:49:73:26:3b:fc:9d:35:eb:bf:db:4a:
c5:98:f3:fc:f9:af:92:58:85:dc:e9:61:9d:f6:0e:
56:98:8c:54:e9:ca:c9:c3:2b:3f:d7:07:00:83:ae:
49:8b:42:3f:6b:20:59:49:38:82:06:7a:c2:86:83:
b3:71:92:72:e2:f4:84:22:e4:43:49:94:32:33:90:
71:19:ba:6e:73:c4:c4:7c:64:7e:00:e0:3b:4a:51:
5a:54:c3:fb:15:30:e3:b6:1b:96:a0:2d:4c:dd:dc:
fc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:07:8A:CD:11:BD:F2:F1:A7:1C:9A:E1:23:E2:02:F9:4E:90:0B:1B
X509v3 Authority Key Identifier:
keyid:E0:37:0A:B7:14:DB:08:F4:78:D3:93:D1:28:27:48:91:B7:93:29:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DcKtxTbCPR405PRKCdIkbeTKVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a7:40:23:7b:b3:f8:ce:18:05:63:47:49:e6:95:7a:5b:90:
82:56:1e:74:48:73:2c:15:ca:10:3b:1c:1c:05:01:44:49:af:
0d:fd:8b:8f:f5:89:25:46:9b:e9:7f:21:5a:0d:25:fd:c8:de:
1e:4a:4f:6f:85:ec:ff:82:77:bd:e1:dd:ff:61:48:0f:e8:e8:
5a:0f:68:a3:0e:fe:ec:f3:c9:66:ed:06:1d:48:5c:d3:f0:e8:
ef:e4:f8:43:ad:10:b9:ed:3f:2b:a0:a8:ee:62:7e:8c:c2:8c:
dd:fc:5d:8f:ab:a8:57:36:32:62:2c:be:30:e0:62:87:0c:2f:
b2:82:58:1e:f8:8f:e7:48:ad:77:2c:28:59:64:37:2f:d4:bd:
9e:63:3a:8d:93:19:d6:38:e5:40:4f:97:69:ff:b6:14:71:1c:
8c:f7:c2:89:f1:82:75:af:34:46:a3:a2:85:82:49:c2:96:54:
2b:20:a2:d1:b0:5a:1e:33:fc:7b:46:d2:5d:5a:3a:92:bd:07:
bd:cb:00:8a:35:d6:48:69:6f:c0:5d:1b:77:f0:ca:20:f9:32:
00:af:73:c5:fb:50:0c:05:9f:d0:b1:ec:4f:13:39:20:d3:bb:
20:74:f2:37:4e:d8:1b:0a:9e:63:1b:4f:dd:e6:ae:bb:c4:18:
d8:30:1b:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cD9OH22wkd7v6aHGB2xQsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMzcwYWI3MTRkYjA4ZjQ3OGQzOTNkMTI4Mjc0ODkxYjc5
MzI5NTIwHhcNMjYwNTEyMTIwMDU5WhcNMjYwNTEzMTIwMDU5WjAzMTEwLwYDVQQD
Eyg1NzA3OGFjZDExYmRmMmYxYTcxYzlhZTEyM2UyMDJmOTRlOTAwYjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp26Vug+3Do2+U+kSZQ6iJ9MXY/ks
vFqmQOnzEFpfjJNfGswYuV6Z8PA/K3hy/lRsmnQH0hKtsoqvq5YuPU2TH5Hf3CkX
K2QMegXNM5CndsW/6BBiesSN/AHuL4luYiL1Lb+PL6rY3hdBcMP1BfKa8YvC5nW0
c+76t8yFLYvoxan954B0IBTHK6M3PMODSNcPmL4DFaDP/OBvSXMmO/ydNeu/20rF
mPP8+a+SWIXc6WGd9g5WmIxU6crJwys/1wcAg65Ji0I/ayBZSTiCBnrChoOzcZJy
4vSEIuRDSZQyM5BxGbpuc8TEfGR+AOA7SlFaVMP7FTDjthuWoC1M3dz8IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcHis0RvfLxpxya4SPiAvlOkAsbMB8GA1UdIwQY
MBaAFOA3CrcU2wj0eNOT0SgnSJG3kylSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNERjS3R4VGJDUFI0MDVQUktDZElrYmVUS1ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80NDFlOWUtNWVmYi00M2Y4LTk5MWEt
ZWQ2ODg1Y2E1Njc5LzEvNERjS3R4VGJDUFI0MDVQUktDZElrYmVUS1ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi80NDFlOWUtNWVmYi00M2Y4LTk5MWEtZWQ2ODg1Y2E1Njc5
LzEvNERjS3R4VGJDUFI0MDVQUktDZElrYmVUS1ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbadAI3uz
+M4YBWNHSeaVeluQglYedEhzLBXKEDscHAUBREmvDf2Lj/WJJUab6X8hWg0l/cje
HkpPb4Xs/4J3veHd/2FID+joWg9oow7+7PPJZu0GHUhc0/Do7+T4Q60Que0/K6Co
7mJ+jMKM3fxdj6uoVzYyYiy+MOBihwwvsoJYHviP50itdywoWWQ3L9S9nmM6jZMZ
1jjlQE+Xaf+2FHEcjPfCifGCda80RqOihYJJwpZUKyCi0bBaHjP8e0bSXVo6kr0H
vcsAijXWSGlvwF0bd/DKIPkyAK9zxftQDAWf0LHsTxM5INO7IHTyN07YGwqeYxtP
3eauu8QY2DAbNw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:55 2026 by rpki-client