Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
File: 4K-xYKlzOKshEUhArdxhgKW6QrE.mft (raw, json)
Hash identifier: FtwZ7AqrSvuIX/y+5XTTMk8MPZDobHu5BrjXK1AKpZM=
Subject key identifier: 84:A5:C7:10:06:08:BB:74:A5:3C:76:1E:99:0D:36:3D:8A:6E:3F:DD
Authority key identifier: E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
Certificate issuer: /CN=e0afb160a97338ab21114840addc6180a5ba42b1
Certificate serial: 019E30A904A82D9DA48A36976E20168F7469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
Manifest number: 15E5
Signing time: Sat 16 May 2026 12:00:43 +0000
Manifest this update: Sat 16 May 2026 12:00:43 +0000
Manifest next update: Sun 17 May 2026 12:00:43 +0000
Files and hashes: 1: 2uv4A35uHTMpYA3zuKbwoHVzKho.roa (hash: 1l7FhVG9aM98lzJEoZX89yaj7eW/134YEJfp3yB6jdU=)
2: 4K-xYKlzOKshEUhArdxhgKW6QrE.crl (hash: Cvss4IcY/Gbp+YPt8prjlGXIaHiVrThMwshfiAn5sdg=)
3: 901P5QTG_zP5-toad6ON5djGco8.roa (hash: T7sgL+7utEqmF1118OKVZINBycYJGTPVYzDcW0kyicE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:04:a8:2d:9d:a4:8a:36:97:6e:20:16:8f:74:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0afb160a97338ab21114840addc6180a5ba42b1
Validity
Not Before: May 16 12:00:43 2026 GMT
Not After : May 17 12:00:43 2026 GMT
Subject: CN=84a5c7100608bb74a53c761e990d363d8a6e3fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:76:a9:68:d3:2a:f8:6d:62:55:90:65:6e:
f1:f5:02:3d:89:c8:12:31:aa:c6:a6:8b:b9:eb:c9:
e0:27:2f:b7:3e:6e:4b:23:03:5d:6c:ae:9a:55:28:
0d:d9:09:ff:8c:8d:d4:5e:5e:7a:c1:db:f3:69:80:
08:2c:46:ec:e6:89:8a:20:f2:6a:5f:28:1c:a9:e9:
2c:c8:d9:ba:18:5d:98:66:ed:ec:d3:11:40:fe:de:
2c:51:6f:3c:16:b6:23:28:4c:54:43:9e:0b:a8:bc:
d2:16:45:b6:90:e6:23:c1:50:c3:f7:ee:b7:7e:48:
90:be:41:70:aa:16:27:5e:74:d0:9b:a2:00:7f:e0:
bf:0a:04:63:bd:96:3f:9b:c5:22:76:d2:dd:6c:ca:
01:76:d3:7a:8a:7d:08:da:23:00:25:3d:1c:a8:9f:
d7:02:dd:54:bb:92:40:97:7a:7e:14:20:19:93:95:
8b:ea:65:df:45:7c:b6:1b:82:26:b5:f6:12:86:ab:
ac:10:60:b8:90:a7:6b:06:0b:07:1f:21:bc:5e:e5:
f1:b7:32:3b:84:56:22:02:f7:7b:12:44:6f:f9:bb:
75:c1:6a:98:bc:af:83:ec:07:b2:7f:1f:4b:35:78:
a0:03:31:98:93:d5:ad:6f:d8:c7:28:1d:b2:9c:92:
a8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A5:C7:10:06:08:BB:74:A5:3C:76:1E:99:0D:36:3D:8A:6E:3F:DD
X509v3 Authority Key Identifier:
keyid:E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c6:7b:a9:70:35:c9:1d:a4:9e:e9:09:9a:63:3f:6a:b9:0b:
a6:56:19:3c:91:24:f9:04:a8:ff:66:4a:49:05:38:23:66:f3:
0f:01:79:98:1c:45:b9:75:d4:e6:41:0a:3a:fb:57:f4:1c:43:
27:d6:9c:6d:60:a5:52:3e:ea:1e:8d:9b:77:30:46:2a:48:1d:
53:8b:24:79:ab:36:58:e0:a0:ea:ab:fe:51:84:d2:53:2b:94:
a9:30:87:3d:5b:82:81:da:96:00:49:b8:12:a6:79:bd:07:87:
43:5b:96:30:ea:a8:0e:aa:0c:fa:ee:ed:74:4d:d6:be:4b:f3:
dd:53:1b:3d:6d:da:05:65:24:86:13:f0:7f:e7:58:93:72:5e:
56:da:34:09:19:32:d9:fa:4e:b2:fd:5e:07:7f:52:a1:fa:16:
84:1c:84:1f:12:cb:33:ac:d6:db:0a:11:b3:62:52:28:aa:e1:
e2:e4:08:2f:44:71:09:19:7c:8d:f2:f5:a3:20:aa:53:4e:53:
a3:d2:bf:1d:9e:e2:e4:c2:9e:9e:ae:f1:4a:6f:dc:44:be:b0:
8d:c6:51:53:5c:3f:41:f3:1b:f0:80:1b:c6:9e:b4:c2:49:b3:
e3:d6:08:b7:70:db:89:88:0a:c5:43:62:a6:ae:5a:a0:25:76:
39:2a:b8:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqQSoLZ2kijaXbiAWj3RpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYWZiMTYwYTk3MzM4YWIyMTExNDg0MGFkZGM2MTgwYTVi
YTQyYjEwHhcNMjYwNTE2MTIwMDQzWhcNMjYwNTE3MTIwMDQzWjAzMTEwLwYDVQQD
Eyg4NGE1YzcxMDA2MDhiYjc0YTUzYzc2MWU5OTBkMzYzZDhhNmUzZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVl2qWjTKvhtYlWQZW7x9QI9icgS
MarGpou568ngJy+3Pm5LIwNdbK6aVSgN2Qn/jI3UXl56wdvzaYAILEbs5omKIPJq
XygcqeksyNm6GF2YZu3s0xFA/t4sUW88FrYjKExUQ54LqLzSFkW2kOYjwVDD9+63
fkiQvkFwqhYnXnTQm6IAf+C/CgRjvZY/m8UidtLdbMoBdtN6in0I2iMAJT0cqJ/X
At1Uu5JAl3p+FCAZk5WL6mXfRXy2G4ImtfYShqusEGC4kKdrBgsHHyG8XuXxtzI7
hFYiAvd7EkRv+bt1wWqYvK+D7Aeyfx9LNXigAzGYk9Wtb9jHKB2ynJKoAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISlxxAGCLt0pTx2HpkNNj2Kbj/dMB8GA1UdIwQY
MBaAFOCvsWCpczirIRFIQK3cYYClukKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEsteFlLbHpPS3NoRVVoQXJkeGhnS1c2UXJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi80NjYxMTktODczZi00Y2ZkLTkxYTYt
YjFlMzEzZDc5ODkzLzEvNEsteFlLbHpPS3NoRVVoQXJkeGhnS1c2UXJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi80NjYxMTktODczZi00Y2ZkLTkxYTYtYjFlMzEzZDc5ODkz
LzEvNEsteFlLbHpPS3NoRVVoQXJkeGhnS1c2UXJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8Z7qXA1
yR2knukJmmM/arkLplYZPJEk+QSo/2ZKSQU4I2bzDwF5mBxFuXXU5kEKOvtX9BxD
J9acbWClUj7qHo2bdzBGKkgdU4skeas2WOCg6qv+UYTSUyuUqTCHPVuCgdqWAEm4
EqZ5vQeHQ1uWMOqoDqoM+u7tdE3Wvkvz3VMbPW3aBWUkhhPwf+dYk3JeVto0CRky
2fpOsv1eB39SofoWhByEHxLLM6zW2woRs2JSKKrh4uQIL0RxCRl8jfL1oyCqU05T
o9K/HZ7i5MKenq7xSm/cRL6wjcZRU1w/QfMb8IAbxp60wkmz49YIt3DbiYgKxUNi
pq5aoCV2OSq4Fg==
-----END CERTIFICATE-----
Generated at Sat May 16 17:57:32 2026 by rpki-client