Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
File: 4mi9DSXlWsGkKoTCo7nIkINh1uE.mft (raw, json)
Hash identifier: NybCOwJDn1ra/Cvg4npucstihWRVe8C6DAZgIMbTD7k=
Subject key identifier: 29:6E:67:2C:5E:41:FB:49:1B:53:BB:2B:C0:11:E1:A9:20:6E:7B:C8
Authority key identifier: E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
Certificate issuer: /CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Certificate serial: 019E1DC7AC91B97D72A64CF21121AD881830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
Manifest number: DE
Signing time: Tue 12 May 2026 20:01:25 +0000
Manifest this update: Tue 12 May 2026 20:01:25 +0000
Manifest next update: Wed 13 May 2026 20:01:25 +0000
Files and hashes: 1: 4mi9DSXlWsGkKoTCo7nIkINh1uE.crl (hash: tCGcuzEd9uenhqXctlaCjbrw2VEpVQ+YTK1UmxlQm4w=)
2: JQH3U3cXJOwqHLIl-7Bwky7-HLY.roa (hash: SJWNpyd0W8U00MUBSeKEN8/PPIQ0TFlfn5di0BSI3Hg=)
3: K0Bz8gUXJ1GAp68K0LjDByi_SVk.roa (hash: CPs5nAdCCsQDzUUAym9dDL0dv2iUIo+oUoQLSVCUp9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:ac:91:b9:7d:72:a6:4c:f2:11:21:ad:88:18:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Validity
Not Before: May 12 20:01:25 2026 GMT
Not After : May 13 20:01:25 2026 GMT
Subject: CN=296e672c5e41fb491b53bb2bc011e1a9206e7bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:9e:6d:d5:9a:b4:0f:33:5d:91:7e:7a:f0:
e3:de:3b:1e:d5:fd:8d:0a:f7:4d:e0:97:b6:c9:c1:
b3:9f:9d:7b:e3:d2:3f:81:86:48:75:c2:18:da:26:
6e:f2:45:27:05:36:22:a2:e7:40:2a:86:0b:8e:97:
23:c2:1c:56:dc:dc:e2:55:87:c8:87:52:4b:ce:5c:
19:29:67:fd:b2:5b:49:6c:56:2b:04:ac:ba:4d:5a:
d8:9c:52:dc:15:b1:8d:f8:66:f3:ee:4d:88:f3:a6:
4f:49:9e:79:68:1d:d1:5b:a0:df:62:82:1e:53:ad:
83:6e:67:fe:80:3b:86:8f:6b:bd:46:21:c1:01:6a:
01:13:6d:8f:2e:28:09:2a:df:54:8f:7a:4e:bf:c6:
37:e0:5d:25:bf:4c:53:8d:3b:d1:a0:ab:66:a7:a3:
aa:1b:12:e6:a6:12:7c:a2:87:c7:0d:d3:25:6e:9e:
e9:2d:72:86:74:97:e4:16:88:50:98:7d:ef:6d:c2:
3b:cf:23:f8:30:eb:fc:ae:d4:36:22:de:27:b6:86:
28:4e:0c:56:4a:eb:96:9c:81:2c:16:97:fc:55:d5:
ab:39:f5:8c:d8:68:67:b8:10:b4:fd:59:b3:e3:b5:
fe:0f:c0:85:ea:7e:9b:2e:92:3e:99:a9:0e:0a:26:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6E:67:2C:5E:41:FB:49:1B:53:BB:2B:C0:11:E1:A9:20:6E:7B:C8
X509v3 Authority Key Identifier:
keyid:E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:10:32:ba:57:a6:cf:a6:0a:46:d0:c0:a4:1c:e0:f4:b0:ed:
4e:37:19:f6:a5:ee:41:28:e6:c7:0d:28:4c:5a:95:57:8a:a8:
c7:46:c7:35:d9:1c:01:51:4f:1e:a7:c0:6f:0d:48:24:3f:f8:
7d:81:16:e6:bd:27:a9:41:5c:3e:67:b4:84:63:28:82:f5:6d:
47:e9:b1:0b:13:8e:a4:ab:48:5b:ec:61:7c:3c:fd:b1:1e:16:
5d:fc:da:d1:47:a4:11:07:13:15:9d:78:63:1b:ec:67:4c:3e:
5a:10:7c:77:41:de:a6:1f:d3:a2:62:c4:78:c2:40:de:33:55:
d3:09:cf:86:c1:00:09:0e:2e:01:c8:7c:8a:ea:26:99:6d:81:
ef:30:92:64:5d:50:12:a0:6c:56:00:4b:58:4d:f5:e0:d8:4d:
da:5b:63:a3:28:ad:2a:25:01:8f:7a:8a:95:67:f0:82:4a:e6:
15:f5:ff:15:26:2b:08:eb:52:99:c9:54:b8:ec:08:19:85:90:
b6:b8:49:05:e9:a9:00:d3:e7:c4:1c:56:23:13:b4:73:ee:1e:
0a:d2:77:1c:64:44:d4:1c:d2:9e:ab:54:ff:66:9d:55:85:f4:
4c:ca:9b:17:78:1c:31:e6:9d:d0:89:a9:dd:c3:32:6a:29:91:
36:d7:f2:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx6yRuX1ypkzyESGtiBgwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNjhiZDBkMjVlNTVhYzFhNDJhODRjMmEzYjljODkwODM2
MWQ2ZTEwHhcNMjYwNTEyMjAwMTI1WhcNMjYwNTEzMjAwMTI1WjAzMTEwLwYDVQQD
EygyOTZlNjcyYzVlNDFmYjQ5MWI1M2JiMmJjMDExZTFhOTIwNmU3YmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2eebdWatA8zXZF+evDj3jse1f2N
CvdN4Je2ycGzn51749I/gYZIdcIY2iZu8kUnBTYioudAKoYLjpcjwhxW3NziVYfI
h1JLzlwZKWf9sltJbFYrBKy6TVrYnFLcFbGN+Gbz7k2I86ZPSZ55aB3RW6DfYoIe
U62Dbmf+gDuGj2u9RiHBAWoBE22PLigJKt9Uj3pOv8Y34F0lv0xTjTvRoKtmp6Oq
GxLmphJ8oofHDdMlbp7pLXKGdJfkFohQmH3vbcI7zyP4MOv8rtQ2It4ntoYoTgxW
SuuWnIEsFpf8VdWrOfWM2GhnuBC0/Vmz47X+D8CF6n6bLpI+makOCiY3yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCluZyxeQftJG1O7K8AR4akgbnvIMB8GA1UdIwQY
MBaAFOJovQ0l5VrBpCqEwqO5yJCDYdbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG1pOURTWGxXc0drS29UQ283bklrSU5oMXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kMmI4NmItMWFiOC00NTc0LWJlOGIt
OGMzMjJlNzQzN2U0LzEvNG1pOURTWGxXc0drS29UQ283bklrSU5oMXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kMmI4NmItMWFiOC00NTc0LWJlOGItOGMzMjJlNzQzN2U0
LzEvNG1pOURTWGxXc0drS29UQ283bklrSU5oMXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBAyulem
z6YKRtDApBzg9LDtTjcZ9qXuQSjmxw0oTFqVV4qox0bHNdkcAVFPHqfAbw1IJD/4
fYEW5r0nqUFcPme0hGMogvVtR+mxCxOOpKtIW+xhfDz9sR4WXfza0UekEQcTFZ14
YxvsZ0w+WhB8d0Heph/TomLEeMJA3jNV0wnPhsEACQ4uAch8iuommW2B7zCSZF1Q
EqBsVgBLWE314NhN2ltjoyitKiUBj3qKlWfwgkrmFfX/FSYrCOtSmclUuOwIGYWQ
trhJBempANPnxBxWIxO0c+4eCtJ3HGRE1BzSnqtU/2adVYX0TMqbF3gcMead0Imp
3cMyaimRNtfyMA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:11:57 2026 by rpki-client