Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: 4bS8vNEPOkj4lyt/9mg/AQhMMlU6XaOx6glBaQDOCmY=
Subject key identifier: B5:F5:08:A0:84:BF:D3:AA:5A:12:30:45:24:6A:27:94:0F:53:E7:31
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 019DCE995F1C929D61C7F9355F5EA4C021DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 1427
Signing time: Mon 27 Apr 2026 11:00:50 +0000
Manifest this update: Mon 27 Apr 2026 11:00:50 +0000
Manifest next update: Tue 28 Apr 2026 11:00:50 +0000
Files and hashes: 1: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: AShxTV0luCkSy0GhIGdaOeiJAhdzFZ4V28/Sxjs3SyU=)
2: UUqgGSLj84boI_NxgkGB4TKwVIU.roa (hash: el0OUsfFn2pwq6lrAb2NBOC3HWUwPQO50Ng8SKy5hMc=)
3: YmIRs6_4Cx0UeKMkGUDdp5mRk_0.roa (hash: bFavmNyn/CPcWGJeZG409Nafloy5IsBvUxX5L0UODxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:5f:1c:92:9d:61:c7:f9:35:5f:5e:a4:c0:21:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Apr 27 11:00:50 2026 GMT
Not After : Apr 28 11:00:50 2026 GMT
Subject: CN=b5f508a084bfd3aa5a123045246a27940f53e731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bf:b5:d3:5b:8a:45:69:ba:50:25:dd:29:02:
2f:c7:79:50:ab:bf:17:2d:c0:99:c6:51:c6:5c:36:
86:fc:de:48:4c:8e:e0:fa:e5:15:2d:9b:a3:f2:06:
7d:20:2f:db:57:38:68:f1:a0:4f:c1:77:7c:85:e2:
68:dd:15:4b:57:81:5e:b5:2a:16:ef:f7:fe:ed:ca:
cc:f4:fe:c3:0e:58:31:67:8b:ac:dd:46:05:d0:cd:
9c:b3:55:1e:9f:34:58:4b:fe:92:e3:34:a1:ff:09:
21:68:b8:ef:d7:a8:9d:f5:f4:d2:5a:a0:cc:e9:8b:
2f:42:10:3a:43:3a:d7:8b:f3:80:7e:bc:ae:a5:f5:
c1:b9:e1:9c:43:97:94:29:01:38:fc:5f:59:f8:b2:
af:69:d7:6a:df:f6:94:b1:71:ea:eb:fc:5d:7c:b1:
3c:d7:e8:8c:41:48:4a:0f:f6:a7:1b:f5:f0:65:10:
ef:52:64:80:5c:6a:ea:5e:95:4c:17:e8:59:f8:06:
aa:27:f3:75:60:df:ec:53:c3:7d:bd:c8:27:a2:33:
e6:83:76:cc:5d:6b:6d:7e:0b:ce:cd:eb:56:1e:a9:
2c:6e:2e:28:9c:c0:36:8f:33:f4:1d:df:c9:ee:53:
3b:7c:7f:92:c0:c9:f4:c9:71:64:7d:fa:ef:75:99:
c4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F5:08:A0:84:BF:D3:AA:5A:12:30:45:24:6A:27:94:0F:53:E7:31
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a8:18:bd:24:b6:b4:a5:09:50:87:19:1a:a7:17:44:a2:75:
b2:f7:8c:68:ec:1f:1b:34:2c:22:7c:dc:65:e0:9b:bd:eb:7c:
87:97:b5:2c:a8:ef:4e:b4:79:06:4d:38:93:bd:26:00:52:3c:
34:b4:5e:30:25:7b:5a:2f:32:1e:a2:43:18:ad:8e:f5:45:dc:
b6:67:71:2d:93:d2:cc:bb:00:e3:d5:78:0d:7e:8d:46:4e:ff:
1a:c6:7f:87:7f:60:be:6b:82:c1:a6:a5:3c:d1:a7:9e:f4:5d:
25:ee:34:67:4c:83:6f:13:62:91:a2:0e:60:bf:58:35:d0:e7:
76:46:02:c8:61:81:7c:e2:dd:e7:c2:b0:17:11:90:fc:b3:48:
c3:6e:16:7b:5c:f8:70:90:9d:75:59:8c:be:5d:1a:4b:bc:ed:
17:e6:fd:d5:a3:44:2e:89:08:ab:bc:c2:4b:99:81:75:66:c5:
88:f4:d0:31:e9:d5:25:e9:62:9d:d6:5d:5e:ae:fe:94:bb:2e:
c1:70:df:4c:25:1a:a3:fb:70:01:22:98:12:f5:62:49:03:0e:
eb:e0:3e:a1:79:da:6a:da:88:21:e8:ca:4c:01:0c:7b:71:1b:
66:4f:f9:c8:f1:c3:24:cd:94:4d:19:a7:5c:ac:ba:17:72:71:
9e:ac:8f:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OmV8ckp1hx/k1X16kwCHaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDQ5MzA3ODgxMmQwOWUxYTFlMGViMmEzODBmYzY1NzQ5
ODNmNWMwHhcNMjYwNDI3MTEwMDUwWhcNMjYwNDI4MTEwMDUwWjAzMTEwLwYDVQQD
EyhiNWY1MDhhMDg0YmZkM2FhNWExMjMwNDUyNDZhMjc5NDBmNTNlNzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL+101uKRWm6UCXdKQIvx3lQq78X
LcCZxlHGXDaG/N5ITI7g+uUVLZuj8gZ9IC/bVzho8aBPwXd8heJo3RVLV4FetSoW
7/f+7crM9P7DDlgxZ4us3UYF0M2cs1UenzRYS/6S4zSh/wkhaLjv16id9fTSWqDM
6YsvQhA6QzrXi/OAfryupfXBueGcQ5eUKQE4/F9Z+LKvaddq3/aUsXHq6/xdfLE8
1+iMQUhKD/anG/XwZRDvUmSAXGrqXpVMF+hZ+AaqJ/N1YN/sU8N9vcgnojPmg3bM
XWttfgvOzetWHqksbi4onMA2jzP0Hd/J7lM7fH+SwMn0yXFkffrvdZnE0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLX1CKCEv9OqWhIwRSRqJ5QPU+cxMB8GA1UdIwQY
MBaAFAjUkweIEtCeGh4OsqOA/GV0mD9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQt
MzFhZGY2NDM5NjQzLzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQtMzFhZGY2NDM5NjQz
LzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqgYvSS2
tKUJUIcZGqcXRKJ1sveMaOwfGzQsInzcZeCbvet8h5e1LKjvTrR5Bk04k70mAFI8
NLReMCV7Wi8yHqJDGK2O9UXctmdxLZPSzLsA49V4DX6NRk7/GsZ/h39gvmuCwaal
PNGnnvRdJe40Z0yDbxNikaIOYL9YNdDndkYCyGGBfOLd58KwFxGQ/LNIw24We1z4
cJCddVmMvl0aS7ztF+b91aNELokIq7zCS5mBdWbFiPTQMenVJelindZdXq7+lLsu
wXDfTCUao/twASKYEvViSQMO6+A+oXnaatqIIejKTAEMe3EbZk/5yPHDJM2UTRmn
XKy6F3JxnqyPfw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:38:38 2026 by rpki-client