Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
File: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft (raw, json)
Hash identifier: ZXWB67OOw9MiLl4TaHsN0kHtO1uyNyRMcat5NN+g4tc=
Subject key identifier: 97:F7:53:3D:26:34:44:CA:AA:A4:A7:AC:6B:B3:7A:19:79:8E:E7:10
Authority key identifier: E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
Certificate issuer: /CN=e2c756c691073752260eda0b29df3140cec48c18
Certificate serial: 019E1E6C9497ED0AE80814A0126AB0D4149B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
Manifest number: 11F2
Signing time: Tue 12 May 2026 23:01:32 +0000
Manifest this update: Tue 12 May 2026 23:01:32 +0000
Manifest next update: Wed 13 May 2026 23:01:32 +0000
Files and hashes: 1: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl (hash: JD/sXpUoagJrXWoHPiqAdb12J0/H+cfraa/nmAE39e4=)
2: T3y-vjZIxVWN7JxZPOetrQJcWz0.roa (hash: XkyUMDJqJv6+3HQxI00RxtfuBMdhPrCaA/EHDWTyM5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:94:97:ed:0a:e8:08:14:a0:12:6a:b0:d4:14:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c756c691073752260eda0b29df3140cec48c18
Validity
Not Before: May 12 23:01:32 2026 GMT
Not After : May 13 23:01:32 2026 GMT
Subject: CN=97f7533d263444caaaa4a7ac6bb37a19798ee710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:30:e6:9d:57:3c:58:a4:99:80:f6:fc:cc:
8b:32:92:4d:df:5a:b1:ff:cc:21:4a:f7:eb:04:19:
c6:3e:60:6f:3f:48:97:20:e0:53:74:43:e8:a5:92:
05:7d:0c:ac:80:5b:65:9f:c3:a2:30:b9:37:42:a6:
5c:80:47:75:98:6f:41:ef:c3:66:fc:37:1d:b4:10:
c1:ab:eb:80:e0:bb:76:f6:ee:c3:64:dc:a8:fd:bf:
6b:7d:18:2f:85:18:b8:45:8f:58:37:36:98:a3:4b:
8a:0c:49:ef:26:bb:af:dd:31:39:2e:83:1f:a9:06:
32:09:f3:ed:ac:b9:e5:30:d4:bd:29:6d:ba:8f:23:
50:29:fa:7c:90:56:4b:05:c0:16:fb:ef:3e:66:82:
4b:3c:91:41:b6:c9:1a:9b:dc:3e:aa:94:57:3a:e0:
ce:35:92:48:d9:f6:97:28:b3:ba:b0:92:fe:fc:ef:
3e:86:69:d1:16:c4:44:ce:46:45:5f:06:9a:1f:78:
bb:76:7f:2e:56:f6:44:6a:ca:bb:29:d5:35:1f:2d:
2c:65:1c:af:82:1b:e8:65:e6:40:c0:06:69:f0:9c:
3a:d0:e4:4c:69:b4:01:b1:27:d8:a6:cf:04:1a:f2:
2f:b4:04:d7:10:b1:1f:ba:d0:8a:08:a2:cf:99:d2:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F7:53:3D:26:34:44:CA:AA:A4:A7:AC:6B:B3:7A:19:79:8E:E7:10
X509v3 Authority Key Identifier:
keyid:E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:55:e9:36:80:ad:9e:cc:3c:fd:da:50:7c:4a:6c:15:3b:b2:
33:27:f9:a7:6f:14:b1:a0:c4:4e:83:76:ef:54:99:91:24:6e:
60:e6:27:24:43:84:61:63:7b:fa:19:f9:55:a0:97:ea:b2:4f:
ef:c0:f9:97:fa:99:e1:fa:71:bd:c5:38:02:24:54:76:28:94:
ec:3d:82:4d:f9:c8:97:67:ad:a3:e2:e4:de:9d:77:65:ae:f2:
1b:38:b9:64:2d:6d:fe:cf:ae:ba:e8:b1:4b:4e:b6:97:28:0c:
82:cf:77:bd:de:e5:02:88:72:24:81:6a:4a:6d:a2:d2:66:ed:
9c:6c:2a:4a:23:8c:c7:3c:70:ae:82:1f:3c:4a:37:7e:25:28:
20:fe:73:8a:38:05:15:c0:8e:61:28:ec:6c:78:a4:0d:3a:a5:
c3:fe:24:99:51:af:04:aa:c4:96:7e:25:16:87:9a:2c:db:da:
37:33:d4:4d:a9:72:f9:f7:6c:4b:2a:7c:c9:0d:1f:5e:fe:f0:
3c:52:cd:57:0c:b8:09:d3:41:82:83:67:e0:2a:94:05:95:05:
40:0b:e5:bf:eb:ca:86:82:4b:4a:c5:88:bb:da:3b:6d:b9:a1:
f9:ff:04:16:cf:e4:b4:71:da:6f:9a:3f:1d:7c:0a:78:b3:37:
2e:52:fb:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebJSX7QroCBSgEmqw1BSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzc1NmM2OTEwNzM3NTIyNjBlZGEwYjI5ZGYzMTQwY2Vj
NDhjMTgwHhcNMjYwNTEyMjMwMTMyWhcNMjYwNTEzMjMwMTMyWjAzMTEwLwYDVQQD
Eyg5N2Y3NTMzZDI2MzQ0NGNhYWFhNGE3YWM2YmIzN2ExOTc5OGVlNzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5Mw5p1XPFikmYD2/MyLMpJN31qx
/8whSvfrBBnGPmBvP0iXIOBTdEPopZIFfQysgFtln8OiMLk3QqZcgEd1mG9B78Nm
/DcdtBDBq+uA4Lt29u7DZNyo/b9rfRgvhRi4RY9YNzaYo0uKDEnvJruv3TE5LoMf
qQYyCfPtrLnlMNS9KW26jyNQKfp8kFZLBcAW++8+ZoJLPJFBtskam9w+qpRXOuDO
NZJI2faXKLO6sJL+/O8+hmnRFsREzkZFXwaaH3i7dn8uVvZEasq7KdU1Hy0sZRyv
ghvoZeZAwAZp8Jw60ORMabQBsSfYps8EGvIvtATXELEfutCKCKLPmdLKzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJf3Uz0mNETKqqSnrGuzehl5jucQMB8GA1UdIwQY
MBaAFOLHVsaRBzdSJg7aCynfMUDOxIwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80NTRmMTEtZmMzNS00OThjLWE3YzAt
NWE0ZDhiNGUzZjBhLzEvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80NTRmMTEtZmMzNS00OThjLWE3YzAtNWE0ZDhiNGUzZjBh
LzEvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1XpNoCt
nsw8/dpQfEpsFTuyMyf5p28UsaDEToN271SZkSRuYOYnJEOEYWN7+hn5VaCX6rJP
78D5l/qZ4fpxvcU4AiRUdiiU7D2CTfnIl2eto+Lk3p13Za7yGzi5ZC1t/s+uuuix
S062lygMgs93vd7lAohyJIFqSm2i0mbtnGwqSiOMxzxwroIfPEo3fiUoIP5zijgF
FcCOYSjsbHikDTqlw/4kmVGvBKrEln4lFoeaLNvaNzPUTaly+fdsSyp8yQ0fXv7w
PFLNVwy4CdNBgoNn4CqUBZUFQAvlv+vKhoJLSsWIu9o7bbmh+f8EFs/ktHHab5o/
HXwKeLM3LlL7rw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:38:50 2026 by rpki-client