Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
File: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json)
Hash identifier: LRWU5mnDO/9S2yJoTQeOZS6Af5isGkv5u1gdYQLTzZo=
Subject key identifier: 1D:97:DB:B9:40:EC:0D:F2:EC:11:E5:90:D1:AD:96:B7:16:2C:6B:92
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 019E8910F388AAA824B579128915CD6B8755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
Manifest number: 0A3D
Signing time: Tue 02 Jun 2026 16:00:49 +0000
Manifest this update: Tue 02 Jun 2026 16:00:49 +0000
Manifest next update: Wed 03 Jun 2026 16:00:49 +0000
Files and hashes: 1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: wq5+SZVQAMK1fCgtfRYSUN3XjK4fD+qwUgg+1pbmVsM=)
2: iJ2dkGge62Vh8toLziz4BBDFsIU.roa (hash: FGUiRuQcTHwY2x/0lhI9Cq7axh0DNfE+YZZ6Pi8PjoE=)
3: yi1fK_-RnGIR53EDaGJ-NbFb4cw.roa (hash: 8qVvUWprWEP3+o1dHxaz8tb18/xPwq5gKAudzTrXXEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:10:f3:88:aa:a8:24:b5:79:12:89:15:cd:6b:87:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Jun 2 16:00:49 2026 GMT
Not After : Jun 3 16:00:49 2026 GMT
Subject: CN=1d97dbb940ec0df2ec11e590d1ad96b7162c6b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:7b:ef:28:fb:c9:55:82:59:80:a2:e3:a2:
e4:43:ef:95:34:12:b0:71:b0:83:15:2e:f1:35:a2:
82:05:62:62:c1:d5:7b:9d:de:a5:c6:25:73:93:9a:
97:5b:ff:fc:23:6d:87:55:c2:99:a3:9b:95:5f:60:
16:f2:b9:b5:bd:35:5e:b5:79:e3:0f:a6:49:10:e5:
52:69:e4:41:4e:0b:bd:a4:a2:a4:c0:e1:b7:9d:08:
32:ec:ae:ec:73:76:73:fc:fa:b8:15:74:30:72:6e:
eb:32:47:5c:13:e7:04:4e:c2:c2:95:4b:dc:22:36:
57:f3:01:b1:ed:02:ee:63:fd:66:51:28:d8:15:45:
1c:96:62:90:98:00:77:ec:f6:0d:15:48:be:bd:1e:
90:5d:66:35:d4:d8:61:4c:34:c3:2b:a2:a2:46:c5:
8d:dc:27:c6:46:77:28:ee:81:45:60:be:0d:ab:21:
fd:8c:55:a5:9e:6b:97:6f:11:69:4b:8b:92:e2:9a:
62:91:f9:d0:8b:49:f2:ea:2b:22:6e:f5:e6:d4:17:
9b:d0:38:d5:5f:10:a0:12:d6:87:ee:e6:d0:e7:cd:
8a:4c:a0:1b:c7:57:52:e1:fe:6c:f5:2f:43:2d:4b:
15:c7:fb:cc:76:b3:01:9b:c7:f0:9c:73:54:07:64:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:97:DB:B9:40:EC:0D:F2:EC:11:E5:90:D1:AD:96:B7:16:2C:6B:92
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:dd:fa:3c:15:1a:0d:73:df:50:27:da:3e:08:c2:64:a8:9e:
5d:9a:dc:46:81:86:ce:3c:01:d9:84:ec:68:28:14:9b:bc:ab:
7b:53:14:de:0f:f0:18:0e:4d:3d:19:f6:6c:21:39:38:eb:ee:
5b:da:8c:b3:35:21:44:ae:0c:c8:46:13:09:13:7c:32:cc:e3:
e4:dc:54:67:85:1b:83:a6:b5:8f:47:ee:e0:41:67:13:a6:b2:
49:76:4d:76:6c:2d:12:a0:a7:c0:c2:63:22:d7:9b:98:5e:1d:
17:65:32:23:99:91:b7:5c:a4:10:5c:5c:c7:c6:50:4d:f2:c8:
1a:b4:27:71:9f:57:da:32:d5:84:c6:22:23:60:08:76:fe:e7:
2a:9b:3c:0f:19:bc:24:9d:7d:b3:a8:05:1c:00:87:fb:ae:5d:
9c:9a:da:c7:e0:ed:1d:64:57:b4:3a:f8:27:6a:ae:db:b8:6c:
07:14:e1:fd:6e:3b:0e:c7:bc:d7:d4:88:ff:dd:45:cf:a2:ed:
c2:4c:e9:6b:1d:60:e2:02:aa:27:c6:cb:0e:a8:a8:a1:e8:83:
75:0d:89:fd:5a:18:5b:ca:10:c4:58:16:53:be:2d:79:bf:21:
de:5e:c3:50:ce:0d:fd:6f:60:d1:8b:47:7b:18:cd:6f:2b:29:
15:be:d2:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6JEPOIqqgktXkSiRXNa4dVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMGY4ODk0ZjMwODE3MmFjZTkyZmJlNjA1MmVlYzIzODUz
ZWFkYWQwHhcNMjYwNjAyMTYwMDQ5WhcNMjYwNjAzMTYwMDQ5WjAzMTEwLwYDVQQD
EygxZDk3ZGJiOTQwZWMwZGYyZWMxMWU1OTBkMWFkOTZiNzE2MmM2YjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNh77yj7yVWCWYCi46LkQ++VNBKw
cbCDFS7xNaKCBWJiwdV7nd6lxiVzk5qXW//8I22HVcKZo5uVX2AW8rm1vTVetXnj
D6ZJEOVSaeRBTgu9pKKkwOG3nQgy7K7sc3Zz/Pq4FXQwcm7rMkdcE+cETsLClUvc
IjZX8wGx7QLuY/1mUSjYFUUclmKQmAB37PYNFUi+vR6QXWY11NhhTDTDK6KiRsWN
3CfGRnco7oFFYL4NqyH9jFWlnmuXbxFpS4uS4ppikfnQi0ny6isibvXm1Beb0DjV
XxCgEtaH7ubQ582KTKAbx1dS4f5s9S9DLUsVx/vMdrMBm8fwnHNUB2TTJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2X27lA7A3y7BHlkNGtlrcWLGuSMB8GA1UdIwQY
MBaAFOMPiJTzCBcqzpL75gUu7COFPq2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHctSWxQTUlGeXJPa3Z2bUJTN3NJNFUtcmEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81ODc0NjAtZWFiNy00MGQ5LWE1MTIt
M2U2NjBkMDI1MmRiLzEvNHctSWxQTUlGeXJPa3Z2bUJTN3NJNFUtcmEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81ODc0NjAtZWFiNy00MGQ5LWE1MTItM2U2NjBkMDI1MmRi
LzEvNHctSWxQTUlGeXJPa3Z2bUJTN3NJNFUtcmEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAet36PBUa
DXPfUCfaPgjCZKieXZrcRoGGzjwB2YTsaCgUm7yre1MU3g/wGA5NPRn2bCE5OOvu
W9qMszUhRK4MyEYTCRN8Mszj5NxUZ4Ubg6a1j0fu4EFnE6aySXZNdmwtEqCnwMJj
ItebmF4dF2UyI5mRt1ykEFxcx8ZQTfLIGrQncZ9X2jLVhMYiI2AIdv7nKps8Dxm8
JJ19s6gFHACH+65dnJrax+DtHWRXtDr4J2qu27hsBxTh/W47Dse819SI/91Fz6Lt
wkzpax1g4gKqJ8bLDqiooeiDdQ2J/VoYW8oQxFgWU74teb8h3l7DUM4N/W9g0YtH
exjNbyspFb7SSQ==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:57:24 2026 by rpki-client