Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier: 9KWvpcCvW56ChBuoT4IeVA5zExdorivYbGTgWGs0MXI=
Subject key identifier: B5:DC:AC:5A:44:8E:45:E1:E3:54:C3:B3:70:AC:8F:71:B4:BA:A6:E9
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 019E314E4149C9314F582892B3079E1E72BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number: 0712
Signing time: Sat 16 May 2026 15:01:12 +0000
Manifest this update: Sat 16 May 2026 15:01:12 +0000
Manifest next update: Sun 17 May 2026 15:01:12 +0000
Files and hashes: 1: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: ZhoQ4i0GMUE1hOG7tM8wlABqfjcbn1kcVVoz2JsL6z8=)
2: Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa (hash: imyx+MqhErllzPgURUbLOjPqBlQ0hxwFitun79GI6bQ=)
3: pIH-PyJ-S7KYRBMhx3HzyVyBgpM.roa (hash: 1cLs+Wdw+wnP8h4XUUBLHG3PCH085TENzzZDNYgitoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:41:49:c9:31:4f:58:28:92:b3:07:9e:1e:72:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: May 16 15:01:12 2026 GMT
Not After : May 17 15:01:12 2026 GMT
Subject: CN=b5dcac5a448e45e1e354c3b370ac8f71b4baa6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:c5:ab:b7:60:55:76:1b:67:5a:af:54:a2:
7a:3b:85:ea:bf:6a:e9:60:7f:84:e9:bf:96:52:e4:
d3:bf:e8:df:f3:0c:ee:4e:bf:8a:9d:42:13:d3:fb:
fb:07:b3:6d:65:ea:60:9e:a4:74:cb:8d:96:6b:fd:
f6:0f:c7:4a:52:fe:4f:9f:a2:fe:a5:b7:83:ec:c3:
27:b1:bd:ff:72:a9:13:2a:05:f5:5a:d7:0c:6a:78:
84:78:84:f5:43:4c:22:03:7a:bf:87:54:72:15:64:
e7:90:6c:16:fe:ad:56:9f:f6:92:a1:9a:e7:af:60:
82:80:c6:e6:f6:ca:8c:ee:c2:86:b8:7f:8a:a0:c8:
71:ac:35:c8:c2:15:e9:a7:db:ac:be:a3:46:6e:f6:
a7:43:62:e0:c9:8f:56:9e:10:fa:f3:06:6f:35:69:
95:e9:9c:10:e0:e0:ce:a4:31:9f:35:7f:d6:dd:7b:
bf:81:7e:f7:7a:ad:2c:41:b8:65:79:db:63:a0:21:
81:29:a7:26:93:7a:0c:61:cc:cc:57:27:a5:b5:7c:
35:6e:bb:6c:a0:f9:bc:ce:77:bc:d4:7c:dc:21:75:
66:f1:43:26:06:c0:5b:d8:d2:cb:1c:1c:20:75:b8:
bd:c4:8d:90:9f:4d:9e:ba:7f:04:95:90:1f:de:76:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DC:AC:5A:44:8E:45:E1:E3:54:C3:B3:70:AC:8F:71:B4:BA:A6:E9
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:79:5c:88:d3:d0:da:72:3f:a0:f7:b9:c5:f7:32:fd:e7:ac:
a0:df:a5:a7:1a:9e:01:58:24:e7:2c:0a:44:ba:aa:49:66:b8:
d6:6c:dc:31:27:b5:c7:bd:c0:95:f3:37:05:03:0e:4e:58:3b:
78:fb:e0:6f:bc:b1:ef:76:8d:72:5f:d6:7c:37:37:33:5f:8c:
72:6f:c9:8b:83:0d:79:1e:00:5c:72:db:68:c7:a6:f0:c5:31:
99:ee:4a:ab:6e:b1:3e:ac:58:32:e3:35:46:49:60:2c:df:7a:
9f:91:97:8a:ba:fc:77:5e:40:92:43:1f:63:66:76:60:4e:f7:
4d:56:c6:20:12:4e:af:b4:d1:d9:a8:8b:b4:85:2a:6e:39:c7:
92:ca:10:ab:b1:78:f7:52:3c:1e:70:fd:8e:74:60:c0:33:db:
60:89:b4:3f:bd:45:d2:75:5e:7c:96:e1:19:07:2d:01:08:60:
db:b1:04:bd:5d:11:8c:89:5a:bf:d0:a8:b6:2d:fc:8e:56:e3:
52:4f:89:4a:bf:33:3d:cb:83:17:0e:de:de:2e:20:e6:99:db:
68:90:05:73:27:3f:a4:41:66:40:68:dc:20:8b:90:71:55:26:
a3:75:00:f9:8b:5b:c5:cd:76:19:b6:80:08:ef:08:e1:71:ae:
7f:9d:f8:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTkFJyTFPWCiSsweeHnK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjNmNmRjNDYxMGY2YzliYmFhNDUzMjExMTczOGU0OTNi
NmFkZjAwHhcNMjYwNTE2MTUwMTEyWhcNMjYwNTE3MTUwMTEyWjAzMTEwLwYDVQQD
EyhiNWRjYWM1YTQ0OGU0NWUxZTM1NGMzYjM3MGFjOGY3MWI0YmFhNmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1HFq7dgVXYbZ1qvVKJ6O4Xqv2rp
YH+E6b+WUuTTv+jf8wzuTr+KnUIT0/v7B7NtZepgnqR0y42Wa/32D8dKUv5Pn6L+
pbeD7MMnsb3/cqkTKgX1WtcManiEeIT1Q0wiA3q/h1RyFWTnkGwW/q1Wn/aSoZrn
r2CCgMbm9sqM7sKGuH+KoMhxrDXIwhXpp9usvqNGbvanQ2LgyY9WnhD68wZvNWmV
6ZwQ4ODOpDGfNX/W3Xu/gX73eq0sQbhledtjoCGBKacmk3oMYczMVyeltXw1brts
oPm8zne81HzcIXVm8UMmBsBb2NLLHBwgdbi9xI2Qn02eun8ElZAf3nZyOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXcrFpEjkXh41TDs3Csj3G0uqbpMB8GA1UdIwQY
MBaAFOHz9txGEPbJu6pFMhEXOOSTtq3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzYxMzItY2E3Ny00NTg0LThkN2It
MjkxYjdhZDA5M2JmLzEvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMzYxMzItY2E3Ny00NTg0LThkN2ItMjkxYjdhZDA5M2Jm
LzEvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXlciNPQ
2nI/oPe5xfcy/eesoN+lpxqeAVgk5ywKRLqqSWa41mzcMSe1x73AlfM3BQMOTlg7
ePvgb7yx73aNcl/WfDc3M1+Mcm/Ji4MNeR4AXHLbaMem8MUxme5Kq26xPqxYMuM1
RklgLN96n5GXirr8d15AkkMfY2Z2YE73TVbGIBJOr7TR2aiLtIUqbjnHksoQq7F4
91I8HnD9jnRgwDPbYIm0P71F0nVefJbhGQctAQhg27EEvV0RjIlav9Coti38jlbj
Uk+JSr8zPcuDFw7e3i4g5pnbaJAFcyc/pEFmQGjcIIuQcVUmo3UA+Ytbxc12GbaA
CO8I4XGuf534/A==
-----END CERTIFICATE-----
Generated at Sat May 16 17:13:31 2026 by rpki-client