Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: 0+1aKIh7dNdpTKMHJZTJVR+MFcNUQdMNjIid3iD5Bdw=
Subject key identifier: E5:12:68:AD:5B:04:5D:3A:DB:B4:35:BE:E6:13:69:E2:6B:21:92:BE
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 019E1D59746BA29C9F77B655F02E8F7B9BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 17D7
Signing time: Tue 12 May 2026 18:01:02 +0000
Manifest this update: Tue 12 May 2026 18:01:02 +0000
Manifest next update: Wed 13 May 2026 18:01:02 +0000
Files and hashes: 1: 1_xba5d5cbirhQ2s_z8_1tiC0PA.roa (hash: Bfsy6ICU1Mj8KS3Ard+cJzbdeC4klrQoTK7qG8jjB4g=)
2: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: Nh517wD53BZ2F3MyR5XYeePzCUGsznwSph06njZrGMM=)
3: mGPgYFI0a87W2xPkMo1Inw-FNM8.roa (hash: dR0boNIbJAGAYCT8YMYIsJDWFR4gMtz1D9GMelmMhUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:74:6b:a2:9c:9f:77:b6:55:f0:2e:8f:7b:9b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: May 12 18:01:02 2026 GMT
Not After : May 13 18:01:02 2026 GMT
Subject: CN=e51268ad5b045d3adbb435bee61369e26b2192be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4e:5f:30:9e:06:d7:98:ab:58:18:2a:4a:0a:
0e:21:23:ca:a2:be:2b:fc:bc:92:48:ab:b9:a9:b6:
3a:90:ba:00:19:46:de:c9:37:90:e7:97:89:8c:76:
e9:ef:dc:88:4d:73:7f:25:a4:57:5b:a7:9a:89:91:
71:e9:75:a3:0c:cb:52:c0:82:2f:41:e0:2e:db:90:
36:bf:54:5a:68:2e:ff:79:25:d0:92:e0:89:f0:28:
e6:f0:72:a0:9a:7d:d4:6b:33:b6:d8:72:c5:30:68:
9f:5a:3a:1c:b8:5d:6c:34:b3:c1:95:49:33:72:3f:
89:3c:2e:59:7f:91:d3:b8:fb:a0:75:24:be:c8:a7:
ec:24:e7:f4:15:a5:bc:af:a6:1b:13:16:03:71:b8:
27:94:1e:16:79:d0:49:61:16:a6:06:74:b4:e0:3f:
cd:64:b5:c0:42:b4:58:ae:b1:c8:1f:30:28:b2:30:
ad:9b:5e:47:e2:bf:1b:2a:e4:d0:73:c6:04:f7:8b:
5e:e7:cf:6c:72:fd:72:c0:31:9e:54:ee:59:6c:29:
9a:89:7e:73:e5:1e:2d:6f:c7:6a:4d:04:81:8b:ec:
02:ac:2e:0e:99:11:2b:41:18:d9:eb:8a:22:6b:36:
a0:20:ea:21:55:a1:c7:47:2c:cb:77:de:51:d1:94:
e6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:12:68:AD:5B:04:5D:3A:DB:B4:35:BE:E6:13:69:E2:6B:21:92:BE
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d5:dd:0e:bc:42:dd:c4:d2:c4:4e:27:e5:01:97:47:3d:90:
fa:6f:40:d0:21:24:2d:8d:28:cd:f5:62:97:d0:29:ac:52:d9:
d7:4c:7c:10:20:8a:ff:3a:4d:ec:b2:e2:4c:0e:a1:1b:ed:c3:
b9:b5:1c:fa:43:6c:cd:64:74:a8:9e:f8:77:28:da:d5:5d:68:
35:aa:49:45:44:be:42:66:1a:f1:3a:b8:48:b7:63:5f:78:07:
ad:e5:f4:8f:13:ec:2c:fd:2d:1a:25:94:f5:8e:9f:38:4b:ad:
25:0b:5e:c1:ec:fc:1c:7a:e9:2c:90:e6:35:df:4e:5d:07:76:
a1:78:2a:97:21:48:77:15:55:1e:20:66:61:38:6c:17:a0:74:
97:ca:3a:d2:2b:a6:1a:3d:7d:ab:1d:86:65:fb:a2:b2:85:2d:
d6:0c:2f:49:2c:3d:28:18:2d:7c:b0:0c:90:19:2c:ec:9a:88:
b6:b1:e1:dc:dc:46:5d:63:5a:35:3e:71:80:da:18:ee:2f:ce:
06:4d:03:b3:83:a0:a2:5e:8a:a2:44:e0:25:70:d0:29:58:73:
dd:3f:95:01:74:4f:62:91:b3:83:52:67:ce:20:14:dd:a7:62:
45:57:02:10:e7:6c:a3:73:5c:69:17:65:af:e1:0b:87:c2:13:
6b:df:bd:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWXRropyfd7ZV8C6Pe5vZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMzgwNzQyNmE3NDg3YTA4NDRmZGY0ZDdhNTJmMGZiOTBi
ZGI3ZDMwHhcNMjYwNTEyMTgwMTAyWhcNMjYwNTEzMTgwMTAyWjAzMTEwLwYDVQQD
EyhlNTEyNjhhZDViMDQ1ZDNhZGJiNDM1YmVlNjEzNjllMjZiMjE5MmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh05fMJ4G15irWBgqSgoOISPKor4r
/LySSKu5qbY6kLoAGUbeyTeQ55eJjHbp79yITXN/JaRXW6eaiZFx6XWjDMtSwIIv
QeAu25A2v1RaaC7/eSXQkuCJ8Cjm8HKgmn3UazO22HLFMGifWjocuF1sNLPBlUkz
cj+JPC5Zf5HTuPugdSS+yKfsJOf0FaW8r6YbExYDcbgnlB4WedBJYRamBnS04D/N
ZLXAQrRYrrHIHzAosjCtm15H4r8bKuTQc8YE94te589scv1ywDGeVO5ZbCmaiX5z
5R4tb8dqTQSBi+wCrC4OmRErQRjZ64oiazagIOohVaHHRyzLd95R0ZTm4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUSaK1bBF0627Q1vuYTaeJrIZK+MB8GA1UdIwQY
MBaAFOM4B0JqdIeghE/fTXpS8PuQvbfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHpnSFFtcDBoNkNFVDk5TmVsTHctNUM5dDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xNzUwYmQtNDdkNi00NTA1LWFiMDUt
ODI4MTk3NjM0OTc2LzEvNHpnSFFtcDBoNkNFVDk5TmVsTHctNUM5dDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xNzUwYmQtNDdkNi00NTA1LWFiMDUtODI4MTk3NjM0OTc2
LzEvNHpnSFFtcDBoNkNFVDk5TmVsTHctNUM5dDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9XdDrxC
3cTSxE4n5QGXRz2Q+m9A0CEkLY0ozfVil9AprFLZ10x8ECCK/zpN7LLiTA6hG+3D
ubUc+kNszWR0qJ74dyja1V1oNapJRUS+QmYa8Tq4SLdjX3gHreX0jxPsLP0tGiWU
9Y6fOEutJQtewez8HHrpLJDmNd9OXQd2oXgqlyFIdxVVHiBmYThsF6B0l8o60ium
Gj19qx2GZfuisoUt1gwvSSw9KBgtfLAMkBks7JqItrHh3NxGXWNaNT5xgNoY7i/O
Bk0Ds4Ogol6KokTgJXDQKVhz3T+VAXRPYpGzg1JnziAU3adiRVcCEOdso3NcaRdl
r+ELh8ITa9+9uA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:12:21 2026 by rpki-client