Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
File: au3YfPvkKOnEKzDCLhlh9xfx20k.mft (raw, json)
Hash identifier: 0q42tJ2fdp3fRCIx/aG98yO7Mv91zUVxuGNb2HXjh5g=
Subject key identifier: 4C:24:FC:3E:6D:29:74:78:C6:8A:D2:0A:7C:B7:35:1E:51:A6:30:F0
Authority key identifier: 6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49
Certificate issuer: /CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
Certificate serial: 019DCD192D4E7FC61E72D1654DDBD0716ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
Manifest number: F4
Signing time: Mon 27 Apr 2026 04:01:12 +0000
Manifest this update: Mon 27 Apr 2026 04:01:12 +0000
Manifest next update: Tue 28 Apr 2026 04:01:12 +0000
Files and hashes: 1: au3YfPvkKOnEKzDCLhlh9xfx20k.crl (hash: A4u5C8zIE+yHQVCgVcyyqfo5FXaPptTChKsCqzjHknc=)
2: vWjIW1eikUSm_cPtDhI_f3EodY4.roa (hash: PyLkHRQBEvUL9Bk7Ermj8JEaYKhwlYCHxtYPNjdnGVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:2d:4e:7f:c6:1e:72:d1:65:4d:db:d0:71:6e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
Validity
Not Before: Apr 27 04:01:12 2026 GMT
Not After : Apr 28 04:01:12 2026 GMT
Subject: CN=4c24fc3e6d297478c68ad20a7cb7351e51a630f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:5a:5b:0f:2d:97:50:a0:e6:8c:3f:69:b6:
f4:29:b4:95:1b:f9:9b:15:38:97:22:b4:71:0c:36:
4a:87:f8:44:45:9e:19:d7:83:a3:98:50:c2:12:0d:
3d:9f:83:65:c9:4b:ac:f7:6b:6a:b6:26:3d:e2:01:
df:94:13:c2:69:7d:f4:94:3b:1b:0e:e0:17:35:ca:
21:fc:0a:ec:39:85:30:be:7c:59:69:5d:e1:b6:b7:
73:01:1c:43:44:70:45:00:6b:8d:d6:b5:50:22:72:
e2:21:6e:b1:54:73:be:9d:b6:21:98:9d:b7:41:a1:
31:75:3a:2e:c1:78:d3:17:a7:e1:b7:b8:47:58:00:
d6:1c:2b:1a:93:88:4e:b1:50:48:f9:54:8a:a6:7d:
d1:03:73:1f:d9:62:01:0b:1d:fd:a7:5e:ee:d6:f1:
f2:0c:3f:c9:7d:c0:98:6e:fc:a6:fd:ca:04:ed:9a:
a7:4d:fb:9f:69:ad:0b:06:68:f5:60:49:3f:56:2a:
d9:d1:cf:42:57:2c:93:ea:60:9b:4f:13:8b:32:39:
01:89:f2:3f:07:ed:2c:3b:70:a0:84:0b:ec:07:8b:
fd:e1:40:f5:94:52:4e:6c:4e:ca:80:63:c0:eb:bf:
02:e1:28:f0:f1:b4:98:51:59:f4:34:f7:e5:90:a7:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:24:FC:3E:6D:29:74:78:C6:8A:D2:0A:7C:B7:35:1E:51:A6:30:F0
X509v3 Authority Key Identifier:
keyid:6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b6:db:5b:44:61:4d:f3:78:a7:c4:39:14:98:1e:97:7e:14:
92:04:c9:46:57:66:16:7e:e4:9f:ea:41:01:e8:85:b0:0a:3b:
5c:8a:f3:d0:5a:57:d2:4f:5e:cd:cc:90:c3:63:74:c4:ce:b5:
43:c6:57:9b:1d:52:65:52:fe:99:24:40:b5:34:dd:15:21:e2:
4d:c0:93:69:9a:52:93:3b:0a:a7:73:d2:b1:53:2c:6d:a8:0f:
d3:a9:55:58:46:8d:4b:5c:7b:c9:2a:22:c0:55:14:0e:67:42:
db:17:c7:9d:74:a9:9c:b5:8b:fd:1b:f7:19:83:2e:f9:b5:6f:
a0:90:0f:18:93:cc:9b:79:15:d9:43:fc:d6:4f:61:e6:77:4d:
99:86:19:2f:7a:1e:aa:e6:60:b8:6b:d7:72:da:c3:c0:d8:6f:
0f:4c:cd:56:bf:04:b7:64:fa:0e:2a:5d:e0:1a:4a:06:4e:b0:
42:9d:65:db:11:93:dc:b1:b5:6e:f4:ce:a8:cc:fa:a7:97:8a:
e9:02:77:f6:c3:01:42:03:a1:06:ff:ab:2f:59:da:bc:22:4c:
01:d6:69:08:c9:4e:20:d6:5c:86:fd:47:19:a0:88:a8:f0:d6:
42:d7:e5:27:23:7b:b8:d5:1b:b3:57:bd:c7:94:cc:87:63:8d:
87:b7:63:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NGS1Of8YectFlTdvQcW7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZWRkODdjZmJlNDI4ZTljNDJiMzBjMjJlMTk2MWY3MTdm
MWRiNDkwHhcNMjYwNDI3MDQwMTEyWhcNMjYwNDI4MDQwMTEyWjAzMTEwLwYDVQQD
Eyg0YzI0ZmMzZTZkMjk3NDc4YzY4YWQyMGE3Y2I3MzUxZTUxYTYzMGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWtaWw8tl1Cg5ow/abb0KbSVG/mb
FTiXIrRxDDZKh/hERZ4Z14OjmFDCEg09n4NlyUus92tqtiY94gHflBPCaX30lDsb
DuAXNcoh/ArsOYUwvnxZaV3htrdzARxDRHBFAGuN1rVQInLiIW6xVHO+nbYhmJ23
QaExdTouwXjTF6fht7hHWADWHCsak4hOsVBI+VSKpn3RA3Mf2WIBCx39p17u1vHy
DD/JfcCYbvym/coE7ZqnTfufaa0LBmj1YEk/VirZ0c9CVyyT6mCbTxOLMjkBifI/
B+0sO3CghAvsB4v94UD1lFJObE7KgGPA678C4Sjw8bSYUVn0NPflkKd+RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwk/D5tKXR4xorSCny3NR5RpjDwMB8GA1UdIwQY
MBaAFGrt2Hz75CjpxCswwi4ZYfcX8dtJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXUzWWZQdmtLT25FS3pEQ0xobGg5eGZ4MjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTgzZmMtMjAxOS00N2IzLWE2YzMt
ZDk5YzhjMjVkYmM4LzEvYXUzWWZQdmtLT25FS3pEQ0xobGg5eGZ4MjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83OTgzZmMtMjAxOS00N2IzLWE2YzMtZDk5YzhjMjVkYmM4
LzEvYXUzWWZQdmtLT25FS3pEQ0xobGg5eGZ4MjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7bbW0Rh
TfN4p8Q5FJgel34UkgTJRldmFn7kn+pBAeiFsAo7XIrz0FpX0k9ezcyQw2N0xM61
Q8ZXmx1SZVL+mSRAtTTdFSHiTcCTaZpSkzsKp3PSsVMsbagP06lVWEaNS1x7ySoi
wFUUDmdC2xfHnXSpnLWL/Rv3GYMu+bVvoJAPGJPMm3kV2UP81k9h5ndNmYYZL3oe
quZguGvXctrDwNhvD0zNVr8Et2T6Dipd4BpKBk6wQp1l2xGT3LG1bvTOqMz6p5eK
6QJ39sMBQgOhBv+rL1navCJMAdZpCMlOINZchv1HGaCIqPDWQtflJyN7uNUbs1e9
x5TMh2ONh7djGQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:14:19 2026 by rpki-client