Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: nD4fNTIm8mxqhTZlPIDQ42pWXfrhqJVELm5SWH7obZY=
Subject key identifier: B4:FA:71:E5:B0:A1:F9:1E:04:20:51:5D:2E:C8:89:9D:E7:CA:B9:CD
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 019E28EF73BAD73430BA30E5F29B503FFAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 09D2
Signing time: Fri 15 May 2026 00:00:41 +0000
Manifest this update: Fri 15 May 2026 00:00:41 +0000
Manifest next update: Sat 16 May 2026 00:00:41 +0000
Files and hashes: 1: 1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa (hash: WqRlSVx1Vu6h+ixUdX0cx9Mi9fCqLKMKSDgwbsVbLZ8=)
2: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: jMgvF5CEy9u7aQIAzx6582+f2o0F0rPUQrlHiLDyxE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:73:ba:d7:34:30:ba:30:e5:f2:9b:50:3f:fa:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: May 15 00:00:41 2026 GMT
Not After : May 16 00:00:41 2026 GMT
Subject: CN=b4fa71e5b0a1f91e0420515d2ec8899de7cab9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:c9:53:d6:fa:9f:74:d9:87:fd:63:1a:20:
a3:20:86:7e:de:7f:ea:ab:35:75:68:76:e0:ac:2c:
4c:b4:7c:6c:2f:c6:08:28:49:31:15:87:e2:63:4f:
61:fd:8e:c9:11:8b:5d:41:5f:bd:38:c5:4c:77:5b:
b2:85:56:dc:89:6a:1a:76:78:f4:de:9d:66:f7:a1:
eb:e3:92:50:17:37:b7:6b:2a:2a:a5:d5:b7:a6:e4:
20:97:38:30:5a:ba:6c:da:ed:3c:40:61:c2:d4:c5:
15:e4:72:2d:b3:6d:1f:cf:0e:32:dd:ca:47:24:54:
09:51:69:1c:08:44:8a:2e:ab:33:10:cc:de:4e:79:
c7:0c:fb:bc:07:7b:0a:d2:de:84:48:4b:af:f7:d3:
d0:a2:92:f5:0b:23:ce:b4:bb:5c:b3:15:73:d2:f0:
fb:ef:cb:7f:a6:da:5a:96:e7:f1:ef:d0:17:a6:3f:
b3:59:62:e3:4c:cb:9b:61:1d:07:c8:42:07:9b:6a:
2b:f0:f3:02:72:27:b6:fe:cc:80:95:1a:47:63:a3:
8e:8f:04:ce:d4:19:36:a8:66:d2:b4:62:32:46:08:
89:be:74:bf:e8:86:3f:4e:df:77:be:9c:24:a9:5f:
33:4e:55:94:0e:aa:65:90:e9:53:b9:bf:15:db:78:
c4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FA:71:E5:B0:A1:F9:1E:04:20:51:5D:2E:C8:89:9D:E7:CA:B9:CD
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c8:f5:7b:84:46:4f:66:16:60:93:e7:55:b6:65:05:91:ce:
9a:b0:3c:e5:bf:de:3d:af:10:2d:d8:1d:94:51:7f:2b:e0:75:
4a:6f:df:1c:c5:37:d1:4f:a5:3c:d9:b9:01:a6:fe:f6:97:cd:
12:17:aa:31:da:20:4a:12:a5:4f:60:f6:cc:b2:e6:89:b7:3a:
c8:98:f5:eb:fa:e3:79:80:ea:66:79:3d:09:bb:59:c6:30:00:
2c:ce:51:ea:49:54:d5:a8:63:90:46:90:77:91:f5:9e:b5:88:
e7:52:13:ba:2a:df:d7:9c:c1:7c:f6:0c:62:df:b7:57:f3:51:
ea:6a:60:84:ef:0a:35:1e:65:b7:94:f5:00:e2:13:21:ff:be:
63:f5:b0:4a:f5:ed:bc:a7:44:b0:b1:b2:c4:27:ca:13:e7:9b:
2d:7e:df:bb:59:05:57:3c:2c:3e:6d:a8:1d:ea:88:6a:cc:8b:
57:47:09:93:f0:5d:8f:e3:e9:88:12:84:0d:8f:84:66:6b:23:
74:5f:1f:3e:c0:c7:d7:d2:e0:2d:dc:78:12:bd:f8:55:54:c3:
cc:52:52:b3:f5:cc:33:70:a2:3b:84:7f:82:f6:72:84:db:5b:
8d:d8:1f:b4:28:f1:c4:1c:78:8e:58:05:a0:1d:d6:43:07:b7:
35:4d:56:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4o73O61zQwujDl8ptQP/qrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjkzMDZiYzYxNWMzMjBhZTQxYTRlNzI2NjNlYmJhOThl
ZjM1N2MwHhcNMjYwNTE1MDAwMDQxWhcNMjYwNTE2MDAwMDQxWjAzMTEwLwYDVQQD
EyhiNGZhNzFlNWIwYTFmOTFlMDQyMDUxNWQyZWM4ODk5ZGU3Y2FiOWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdHJU9b6n3TZh/1jGiCjIIZ+3n/q
qzV1aHbgrCxMtHxsL8YIKEkxFYfiY09h/Y7JEYtdQV+9OMVMd1uyhVbciWoadnj0
3p1m96Hr45JQFze3ayoqpdW3puQglzgwWrps2u08QGHC1MUV5HIts20fzw4y3cpH
JFQJUWkcCESKLqszEMzeTnnHDPu8B3sK0t6ESEuv99PQopL1CyPOtLtcsxVz0vD7
78t/ptpalufx79AXpj+zWWLjTMubYR0HyEIHm2or8PMCcie2/syAlRpHY6OOjwTO
1Bk2qGbStGIyRgiJvnS/6IY/Tt93vpwkqV8zTlWUDqplkOlTub8V23jElwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLT6ceWwofkeBCBRXS7IiZ3nyrnNMB8GA1UdIwQY
MBaAFOP5MGvGFcMgrkGk5yZj67qY7zV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEt
M2NkMzNmZjMyNzQzLzEvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82YzQ4ZjEtMjAzNy00MGEwLWIyZTEtM2NkMzNmZjMyNzQz
LzEvNF9rd2E4WVZ3eUN1UWFUbkptUHJ1cGp2Tlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMj1e4RG
T2YWYJPnVbZlBZHOmrA85b/ePa8QLdgdlFF/K+B1Sm/fHMU30U+lPNm5Aab+9pfN
EheqMdogShKlT2D2zLLmibc6yJj16/rjeYDqZnk9CbtZxjAALM5R6klU1ahjkEaQ
d5H1nrWI51ITuirf15zBfPYMYt+3V/NR6mpghO8KNR5lt5T1AOITIf++Y/WwSvXt
vKdEsLGyxCfKE+ebLX7fu1kFVzwsPm2oHeqIasyLV0cJk/Bdj+PpiBKEDY+EZmsj
dF8fPsDH19LgLdx4Er34VVTDzFJSs/XMM3CiO4R/gvZyhNtbjdgftCjxxBx4jlgF
oB3WQwe3NU1Wzg==
-----END CERTIFICATE-----
Generated at Fri May 15 10:35:04 2026 by rpki-client