Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
File: 4uSsYiT-GURCDcOpjdY6uuSvfgA.mft (raw, json)
Hash identifier: N+QADR+JGqSikX/JDAcLApmJgnbPxivF9LBj6HChaC8=
Subject key identifier: ED:C7:FD:B5:1D:F5:92:0E:A0:94:2A:28:0D:76:2B:2E:44:E0:57:ED
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial: 019DB13367006C67469A14E232330F903382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
Manifest number: 14FB
Signing time: Tue 21 Apr 2026 18:00:29 +0000
Manifest this update: Tue 21 Apr 2026 18:00:29 +0000
Manifest next update: Wed 22 Apr 2026 18:00:29 +0000
Files and hashes: 1: 1-TdHN98FGVFEolCtJz5D4Qn8oUU.roa (hash: XtPiDy65/rIGNdB1DOR8MKSXwZBD4oJVNpwQPU3xeNQ=)
2: 4uSsYiT-GURCDcOpjdY6uuSvfgA.crl (hash: IlFWJT/Gn8orH0WtXKi3x7D4kgwkM84qB3ayVV1WOkQ=)
3: RWwBA-mE5T1DeX90DO491TVULLY.roa (hash: MNPZj/RKM4/KkE55j9h8f2IORoXisvl/h9C3t/o3a6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:33:67:00:6c:67:46:9a:14:e2:32:33:0f:90:33:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Validity
Not Before: Apr 21 18:00:29 2026 GMT
Not After : Apr 22 18:00:29 2026 GMT
Subject: CN=edc7fdb51df5920ea0942a280d762b2e44e057ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:13:12:1f:e3:e4:de:1e:af:df:6f:51:d5:ca:
8b:24:dd:e4:88:9f:b1:3d:fd:95:eb:03:80:d1:88:
16:22:d7:e4:29:26:f7:cb:04:9b:1a:ff:61:ad:20:
64:f1:22:41:04:ab:43:a3:ec:0a:9d:4d:63:ec:b6:
ff:3d:3d:e1:85:d9:02:11:1c:6f:bd:a9:71:cf:9a:
4c:70:63:76:a8:c8:2b:a0:10:8a:5c:1c:ef:bf:1e:
29:6d:73:19:93:4b:df:b0:b2:5d:be:19:e6:df:66:
08:5d:94:90:1a:86:cd:4d:ae:39:ba:f3:9d:57:a8:
4f:cd:71:a6:9a:16:eb:b8:8b:3a:31:af:f7:44:3d:
3f:5a:83:83:40:64:8a:63:21:fc:6e:fa:a6:0c:9b:
9d:4f:bd:1a:79:76:12:cf:6a:1e:d1:7e:60:96:53:
1a:29:d8:a0:e5:75:a7:d2:7c:9b:ab:f1:66:79:7a:
b9:a6:4d:43:e2:69:a5:75:9d:56:cb:49:3e:d1:24:
c5:6e:e9:d3:a2:c0:d9:9e:83:29:a1:e5:60:9f:45:
1d:3b:46:1c:0b:22:dd:08:ad:a8:03:c4:d2:65:83:
81:66:0e:0e:d0:05:73:1c:8b:10:c6:7b:34:75:66:
6f:83:72:1f:a9:c6:18:58:b7:59:9e:a9:42:ec:72:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C7:FD:B5:1D:F5:92:0E:A0:94:2A:28:0D:76:2B:2E:44:E0:57:ED
X509v3 Authority Key Identifier:
keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:97:61:0f:8f:68:5c:ee:1c:4f:15:c2:86:99:8b:ca:1e:05:
02:5f:17:2e:6f:f8:bf:92:fc:da:c6:a2:81:81:7c:18:8e:46:
07:08:dc:62:55:0a:b3:bd:0e:d4:55:f9:65:e2:d3:ab:10:36:
3a:1c:5d:ae:77:84:9c:54:48:23:af:64:48:ee:2a:96:30:bc:
28:ec:56:26:e8:6b:e8:11:95:ed:90:00:08:66:9b:ab:25:5e:
98:01:4f:74:8e:59:4a:4e:e7:2f:17:ba:d7:b0:51:0e:23:72:
24:5a:1b:f3:cb:91:ab:8e:14:f8:3f:2e:4a:de:d3:2e:c3:cd:
0a:03:9d:03:0a:09:9b:69:b4:73:5c:c2:01:62:ab:62:ed:bc:
7a:e2:d1:48:2f:76:43:d8:4f:19:86:4c:3e:1f:b8:27:44:de:
05:f9:ba:22:17:50:b5:1c:bf:86:31:98:43:1e:26:34:39:39:
e8:c0:d3:45:4e:90:e9:d9:97:0f:e9:8b:f5:3f:9c:70:e6:33:
e7:3f:d1:68:e6:ac:25:be:59:c2:2a:41:4b:10:39:a1:2b:50:
78:48:ba:73:70:b5:cc:77:0e:3e:11:7e:6a:67:de:fa:47:e0:
be:09:03:06:62:36:88:98:95:5e:98:6d:7f:ed:dc:3d:b3:68:
95:50:ab:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2xM2cAbGdGmhTiMjMPkDOCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTRhYzYyMjRmZTE5NDQ0MjBkYzNhOThkZDYzYWJhZTRh
ZjdlMDAwHhcNMjYwNDIxMTgwMDI5WhcNMjYwNDIyMTgwMDI5WjAzMTEwLwYDVQQD
EyhlZGM3ZmRiNTFkZjU5MjBlYTA5NDJhMjgwZDc2MmIyZTQ0ZTA1N2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xMSH+Pk3h6v329R1cqLJN3kiJ+x
Pf2V6wOA0YgWItfkKSb3ywSbGv9hrSBk8SJBBKtDo+wKnU1j7Lb/PT3hhdkCERxv
valxz5pMcGN2qMgroBCKXBzvvx4pbXMZk0vfsLJdvhnm32YIXZSQGobNTa45uvOd
V6hPzXGmmhbruIs6Ma/3RD0/WoODQGSKYyH8bvqmDJudT70aeXYSz2oe0X5gllMa
Kdig5XWn0nybq/FmeXq5pk1D4mmldZ1Wy0k+0STFbunTosDZnoMpoeVgn0UdO0Yc
CyLdCK2oA8TSZYOBZg4O0AVzHIsQxns0dWZvg3IfqcYYWLdZnqlC7HK51wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3H/bUd9ZIOoJQqKA12Ky5E4FftMB8GA1UdIwQY
MBaAFOLkrGIk/hlEQg3DqY3WOrrkr34AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVTc1lpVC1HVVJDRGNPcGpkWTZ1dVN2ZmdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mNmJlMDMtNGY0NC00MzU0LWI5ZWIt
YmE0ZDA2ZGYwYmU1LzEvNHVTc1lpVC1HVVJDRGNPcGpkWTZ1dVN2ZmdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mNmJlMDMtNGY0NC00MzU0LWI5ZWItYmE0ZDA2ZGYwYmU1
LzEvNHVTc1lpVC1HVVJDRGNPcGpkWTZ1dVN2ZmdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5dhD49o
XO4cTxXChpmLyh4FAl8XLm/4v5L82saigYF8GI5GBwjcYlUKs70O1FX5ZeLTqxA2
OhxdrneEnFRII69kSO4qljC8KOxWJuhr6BGV7ZAACGabqyVemAFPdI5ZSk7nLxe6
17BRDiNyJFob88uRq44U+D8uSt7TLsPNCgOdAwoJm2m0c1zCAWKrYu28euLRSC92
Q9hPGYZMPh+4J0TeBfm6IhdQtRy/hjGYQx4mNDk56MDTRU6Q6dmXD+mL9T+ccOYz
5z/RaOasJb5ZwipBSxA5oStQeEi6c3C1zHcOPhF+amfe+kfgvgkDBmI2iJiVXpht
f+3cPbNolVCrKQ==
-----END CERTIFICATE-----
Generated at Wed Apr 22 00:08:35 2026 by rpki-client