Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: Lb2JIv4fg+y57gdilnrq33dwpix2+p4zYS1XzkoOTRY=
Subject key identifier: 35:8A:88:7F:1C:4B:D2:97:E8:B6:5E:04:64:A5:29:A7:C9:79:4D:3F
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 019E205A36C6EFEDDA7E3FAEFAACB9023C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 0AB4
Signing time: Wed 13 May 2026 08:00:43 +0000
Manifest this update: Wed 13 May 2026 08:00:43 +0000
Manifest next update: Thu 14 May 2026 08:00:43 +0000
Files and hashes: 1: OBJUqWKdq6kiQbp0gg2le_lxwc8.roa (hash: Q6TNVRFJT35RFtqmG8IVN0WlQLvaNhPi6XH41fNOOas=)
2: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: liDFc67GlKZirIOzQexcbf6GEBTzSQQ6yjme9NJInWg=)
3: pDXgmFSEjeXu5kTO9JnxKOTny04.roa (hash: zBFnWy98uBKGBRB8AClKYux+jyTzJfSF7W9SKPlT+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:36:c6:ef:ed:da:7e:3f:ae:fa:ac:b9:02:3c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: May 13 08:00:43 2026 GMT
Not After : May 14 08:00:43 2026 GMT
Subject: CN=358a887f1c4bd297e8b65e0464a529a7c9794d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:b7:26:01:16:18:8b:30:fc:73:d1:09:15:
0f:a9:66:84:8b:a3:92:3a:82:08:91:63:4b:1f:73:
38:79:9a:70:13:52:98:29:5c:74:c8:75:94:ac:14:
1a:af:eb:f8:b7:e2:f6:c1:ce:9c:d0:4e:3a:13:77:
94:62:c1:2e:87:70:2e:8f:de:95:a6:92:70:ca:17:
f3:2f:92:c0:32:20:62:0a:5a:fb:36:b4:8f:27:68:
46:2b:7b:9d:14:b9:3d:0a:54:31:49:87:ab:23:f8:
31:8a:93:a2:63:a1:42:d6:90:f6:68:1d:46:c9:5b:
99:8f:ed:41:ef:6e:7c:f7:35:83:38:ff:b0:52:12:
be:32:33:40:b5:36:fe:6a:ac:b6:1d:03:bd:e5:09:
c0:a6:2e:87:59:63:fc:a5:e2:b5:9f:4d:a6:ec:7e:
49:3d:fb:c7:4d:0e:64:f8:8c:ef:b7:a2:81:29:02:
7d:a2:1a:99:4d:47:2f:af:f2:02:2d:17:5f:c6:80:
a6:ed:23:c8:a4:71:fb:84:a7:e5:3f:cf:35:80:85:
30:d9:87:53:49:de:49:21:89:0c:21:74:52:8a:0b:
20:05:db:e6:06:4d:53:dd:a4:72:a2:c5:ab:48:c0:
88:e1:19:01:5f:79:35:5e:1b:4c:b7:e0:b2:53:b4:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8A:88:7F:1C:4B:D2:97:E8:B6:5E:04:64:A5:29:A7:C9:79:4D:3F
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:31:00:32:f3:0a:f5:54:c1:60:2e:58:d7:29:69:10:6e:2b:
56:04:c5:b4:81:4d:c7:34:83:13:6c:da:aa:eb:1c:22:96:be:
6a:15:4a:64:90:0e:5a:ec:cc:fd:6a:01:ba:6b:0a:d3:1b:47:
05:cf:90:75:89:d4:34:4b:c6:55:f4:4e:b1:b4:6b:37:97:cf:
c4:7c:20:7b:f1:a2:19:ec:ce:0b:46:d4:ed:4a:38:71:b2:0c:
bb:4f:82:2a:29:23:35:09:9c:96:86:28:bf:71:a9:b8:78:a1:
62:a1:94:26:b1:76:22:29:e7:36:e3:d4:43:75:db:bd:d6:15:
b0:47:9b:b8:ef:4a:3e:46:26:95:32:4c:2d:09:02:4e:96:7f:
06:6f:02:f5:2f:53:61:b6:0f:58:98:b1:3f:50:42:d6:80:19:
04:aa:be:3e:00:2f:29:c7:a8:18:6e:ee:42:3f:dd:bd:bb:4b:
a2:29:0d:4f:34:85:18:52:87:ae:83:44:a3:0d:bc:28:d5:e4:
38:24:57:b1:49:bd:d3:2f:70:3c:14:61:2e:80:5b:3e:fe:ec:
46:e0:ff:e9:04:c3:f4:1c:dc:cd:18:9f:fb:27:a3:7e:bd:0b:
de:30:e8:c7:00:6f:42:2e:dc:39:61:e0:ef:66:d9:e2:47:f9:
21:6a:62:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWjbG7+3afj+u+qy5AjxzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3OGM3ZmM2YjIxMWUyNzFmNzQ4M2Y3MjFkNDVmMjM4ZGQ3
ZGU1YzQwHhcNMjYwNTEzMDgwMDQzWhcNMjYwNTE0MDgwMDQzWjAzMTEwLwYDVQQD
EygzNThhODg3ZjFjNGJkMjk3ZThiNjVlMDQ2NGE1MjlhN2M5Nzk0ZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0K3JgEWGIsw/HPRCRUPqWaEi6OS
OoIIkWNLH3M4eZpwE1KYKVx0yHWUrBQar+v4t+L2wc6c0E46E3eUYsEuh3Auj96V
ppJwyhfzL5LAMiBiClr7NrSPJ2hGK3udFLk9ClQxSYerI/gxipOiY6FC1pD2aB1G
yVuZj+1B72589zWDOP+wUhK+MjNAtTb+aqy2HQO95QnApi6HWWP8peK1n02m7H5J
PfvHTQ5k+Izvt6KBKQJ9ohqZTUcvr/ICLRdfxoCm7SPIpHH7hKflP881gIUw2YdT
Sd5JIYkMIXRSigsgBdvmBk1T3aRyosWrSMCI4RkBX3k1XhtMt+CyU7Q72wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWKiH8cS9KX6LZeBGSlKafJeU0/MB8GA1UdIwQY
MBaAFEeMf8ayEeJx90g/ch1F8jjdfeXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMt
NjJiMWRhMjYxMzI5LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMtNjJiMWRhMjYxMzI5
LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTEAMvMK
9VTBYC5Y1ylpEG4rVgTFtIFNxzSDE2zaquscIpa+ahVKZJAOWuzM/WoBumsK0xtH
Bc+QdYnUNEvGVfROsbRrN5fPxHwge/GiGezOC0bU7Uo4cbIMu0+CKikjNQmcloYo
v3GpuHihYqGUJrF2IinnNuPUQ3XbvdYVsEebuO9KPkYmlTJMLQkCTpZ/Bm8C9S9T
YbYPWJixP1BC1oAZBKq+PgAvKceoGG7uQj/dvbtLoikNTzSFGFKHroNEow28KNXk
OCRXsUm90y9wPBRhLoBbPv7sRuD/6QTD9BzczRif+yejfr0L3jDoxwBvQi7cOWHg
72bZ4kf5IWpi0g==
-----END CERTIFICATE-----
Generated at Wed May 13 13:58:49 2026 by rpki-client