Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: I44nGO/LAirTmnd0mMcB2brvggFBGJd1HHLOwGeTzdA=
Subject key identifier: FD:9D:A1:53:A6:5E:5C:07:36:DC:72:2D:54:D6:B0:3B:2A:1D:BF:6D
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 019E1DFDE2107787EAF85C5F61DD48A4C115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 21:00:38 +0000
Manifest this update: Tue 12 May 2026 21:00:38 +0000
Manifest next update: Wed 13 May 2026 21:00:38 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: q2hiBST5NkXbs72hrRoIwyXOA5pm5UPYZQrnag+VnmE=)
2: aD4aJMmaQg_1w8VUSr55ba35-_4.roa (hash: 3Ez4Ad6m2JnI3XnTs61pJ+5b17Kb2kmyt6ZM1f7rwSI=)
3: g2k94sbrfkriJ_TYzjO-TqZlMBM.roa (hash: 1ZkSwSDFlimbj/n4XoixvGsfM3nfxp389BDAwVqw2BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:e2:10:77:87:ea:f8:5c:5f:61:dd:48:a4:c1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: May 12 21:00:38 2026 GMT
Not After : May 13 21:00:38 2026 GMT
Subject: CN=fd9da153a65e5c0736dc722d54d6b03b2a1dbf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:e3:60:41:ee:d0:5c:cf:16:de:90:16:3a:
5b:59:78:40:9f:e8:f5:d0:bd:74:bb:a0:d2:a7:43:
8a:d4:cd:d9:c0:23:24:2b:31:d3:dc:c4:76:b4:f7:
5d:8c:3e:0f:ce:bf:8c:e7:b5:89:d4:14:82:59:41:
92:f1:68:39:79:88:7f:af:97:00:60:ab:5d:7c:c4:
57:0f:f1:c8:24:04:06:b6:8d:4e:a6:92:5c:46:b4:
f1:cb:4d:24:86:fb:51:92:b3:32:e1:a4:8a:6f:49:
56:7e:12:6e:1c:d3:61:96:6c:ea:f0:3a:5b:47:38:
4f:81:86:91:80:b8:9c:c5:a1:da:fc:d1:7f:9a:84:
a3:ea:1b:b2:dd:81:f5:95:49:d0:0e:a0:9d:2c:26:
a8:36:7d:08:8f:0b:d9:0a:28:ae:d9:b3:ae:b3:d8:
82:1d:19:84:47:b7:84:d2:8e:1c:7a:39:e8:29:65:
65:bb:e7:50:39:e4:7c:a0:c5:2b:6d:42:4b:6d:4e:
fb:dd:8a:b6:51:d5:a6:4f:11:ae:76:e7:02:d0:ac:
ab:62:60:37:66:f0:27:20:de:00:ed:f4:63:5d:6a:
f2:88:c2:a5:c9:41:f1:63:a0:c0:e3:10:1c:45:9e:
51:37:db:9c:93:cd:ca:27:6a:a6:3d:36:5d:68:b5:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9D:A1:53:A6:5E:5C:07:36:DC:72:2D:54:D6:B0:3B:2A:1D:BF:6D
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c3:69:d9:77:4a:63:87:2d:93:a5:00:75:fe:77:a7:24:bd:
33:6e:15:f5:87:85:a1:1e:e6:cf:1e:ec:c2:17:44:57:46:1c:
2c:61:4b:6e:f1:b0:24:a4:98:ab:fb:e9:5b:a0:32:2d:b6:7c:
2f:41:75:b4:21:86:35:1b:ce:61:17:2d:05:f8:78:a9:97:13:
43:cd:c1:ac:8e:60:ac:f1:b4:48:52:a9:f9:40:fc:65:12:ba:
e3:47:27:14:41:b0:e4:67:5f:68:66:8a:46:89:b4:99:fe:01:
5e:ab:fd:7b:c4:9f:ae:f3:3e:5d:b1:64:b3:76:9a:0d:bd:88:
30:ec:11:6f:65:38:e0:4e:3d:c6:b2:88:ac:53:3e:75:58:40:
41:f0:d3:0c:b9:d9:41:75:76:4b:9c:f2:e0:23:fe:1f:62:03:
23:b0:1a:30:9f:42:07:ba:92:cc:d6:e2:17:b8:fc:b8:a2:09:
37:84:85:3f:75:31:9e:71:a7:6a:50:01:42:af:cb:a2:a0:2a:
06:e7:e9:a1:cb:99:f6:59:2e:b0:96:68:39:60:7d:56:c8:dd:
ed:3e:8c:b6:87:a6:78:53:6b:b9:62:b5:14:04:cc:30:87:34:
36:bc:e3:b5:28:22:61:18:37:6f:a8:18:bc:b7:4b:0f:93:80:
76:b5:ef:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/eIQd4fq+FxfYd1IpMEVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDU0YzQ1NmNlNjhiYThmZWNhZDU0MmFhYjk2MTBiMWVj
YzEyZTIwHhcNMjYwNTEyMjEwMDM4WhcNMjYwNTEzMjEwMDM4WjAzMTEwLwYDVQQD
EyhmZDlkYTE1M2E2NWU1YzA3MzZkYzcyMmQ1NGQ2YjAzYjJhMWRiZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOTjYEHu0FzPFt6QFjpbWXhAn+j1
0L10u6DSp0OK1M3ZwCMkKzHT3MR2tPddjD4Pzr+M57WJ1BSCWUGS8Wg5eYh/r5cA
YKtdfMRXD/HIJAQGto1OppJcRrTxy00khvtRkrMy4aSKb0lWfhJuHNNhlmzq8Dpb
RzhPgYaRgLicxaHa/NF/moSj6huy3YH1lUnQDqCdLCaoNn0IjwvZCiiu2bOus9iC
HRmER7eE0o4cejnoKWVlu+dQOeR8oMUrbUJLbU773Yq2UdWmTxGuducC0KyrYmA3
ZvAnIN4A7fRjXWryiMKlyUHxY6DA4xAcRZ5RN9uck83KJ2qmPTZdaLWBYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2doVOmXlwHNtxyLVTWsDsqHb9tMB8GA1UdIwQY
MBaAFOJFTEVs5ouo/srVQqq5YQsezBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82NGVkNjItYThlZi00ODAyLWExYjQt
OWY5N2IwZmM0ODMyLzEvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS82NGVkNjItYThlZi00ODAyLWExYjQtOWY5N2IwZmM0ODMy
LzEvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMNp2XdK
Y4ctk6UAdf53pyS9M24V9YeFoR7mzx7swhdEV0YcLGFLbvGwJKSYq/vpW6AyLbZ8
L0F1tCGGNRvOYRctBfh4qZcTQ83BrI5grPG0SFKp+UD8ZRK640cnFEGw5GdfaGaK
Rom0mf4BXqv9e8SfrvM+XbFks3aaDb2IMOwRb2U44E49xrKIrFM+dVhAQfDTDLnZ
QXV2S5zy4CP+H2IDI7AaMJ9CB7qSzNbiF7j8uKIJN4SFP3UxnnGnalABQq/LoqAq
BufpocuZ9lkusJZoOWB9Vsjd7T6MtoemeFNruWK1FATMMIc0NrzjtSgiYRg3b6gY
vLdLD5OAdrXvLQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:22:32 2026 by rpki-client