Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
File: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft (raw, json)
Hash identifier: v9tO4Jg0LXZIeGooRq8Pom8wLXhyWhVFMwDghnXpwd4=
Subject key identifier: C4:E3:CA:72:C0:76:70:00:46:55:ED:7E:B0:36:11:73:AB:C3:9B:FF
Authority key identifier: D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
Certificate issuer: /CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Certificate serial: 019DCD18AD6E76610F0C24315F885128A085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
Manifest number: F4
Signing time: Mon 27 Apr 2026 04:00:39 +0000
Manifest this update: Mon 27 Apr 2026 04:00:39 +0000
Manifest next update: Tue 28 Apr 2026 04:00:39 +0000
Files and hashes: 1: 2TqgHYOgfsJXr5AHbOt7Withl0Y.roa (hash: JWTP6ZFvwS7du+ja3Z9xJskq88DbPSQc49cLLypWIKw=)
2: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl (hash: KsIvLOWaKpQSRnQ/+pzQn8JLrCE0IW0CPj7hSCRvMuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:18:ad:6e:76:61:0f:0c:24:31:5f:88:51:28:a0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Validity
Not Before: Apr 27 04:00:39 2026 GMT
Not After : Apr 28 04:00:39 2026 GMT
Subject: CN=c4e3ca72c07670004655ed7eb0361173abc39bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:dd:ee:60:5a:ba:5f:9e:1a:cd:a3:8a:db:
a4:92:43:95:8b:60:e9:c8:55:8e:df:ed:da:e7:33:
2d:51:05:34:e8:64:4b:7d:62:51:9f:81:e5:64:d2:
37:a2:13:2e:c3:6d:4c:56:b7:c6:51:6b:ef:c8:6e:
89:c7:9a:09:83:af:80:ee:93:c3:76:50:41:ba:b1:
7b:24:82:45:7a:39:c9:7c:fc:95:4b:f7:63:9a:4d:
a1:e1:8f:04:ff:38:98:86:6a:bb:15:94:f4:a1:6f:
bc:7c:3e:18:56:34:01:5d:f0:38:de:bc:ca:49:4a:
7d:4d:27:b5:0e:dd:26:8c:4b:bb:bc:b4:20:5a:d5:
0f:9c:ee:a9:b3:98:10:bc:38:18:fd:f8:a8:ce:77:
14:e1:e5:f9:9e:4e:b1:31:dd:98:8b:40:8b:78:86:
0b:e2:c1:29:a6:ed:74:b4:24:e6:6e:b0:94:60:aa:
b2:4a:f0:03:1e:7f:ee:09:16:c5:d7:e9:77:49:c1:
a6:1b:44:3f:18:ed:60:2c:70:9b:f7:47:03:64:25:
90:8a:73:c1:ae:76:f9:13:3c:d5:b0:c3:c9:5f:a8:
5d:10:6f:ca:01:63:20:96:75:81:08:a2:f5:b2:03:
23:d9:60:08:6b:e6:e6:f6:3b:8c:fa:a7:a2:8c:e5:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E3:CA:72:C0:76:70:00:46:55:ED:7E:B0:36:11:73:AB:C3:9B:FF
X509v3 Authority Key Identifier:
keyid:D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3a:09:09:c9:b2:1d:ec:77:27:85:9e:9c:13:d6:75:00:30:
e9:39:49:ae:27:7d:e8:6a:d4:ad:52:c2:64:10:3f:62:89:2a:
9b:6d:08:97:9e:98:90:98:1b:ba:3d:71:b6:68:f7:5e:40:7d:
de:33:7f:85:13:95:3a:36:ff:ec:b1:c0:45:c0:ae:b5:0e:e1:
99:0e:0f:c7:63:ce:ea:d5:b3:00:a4:07:4d:88:5c:48:24:02:
11:2e:67:98:8a:ba:9c:1a:57:8b:22:7a:51:02:e6:2e:11:ac:
bb:ac:a5:3e:0b:ec:63:4f:4e:1f:1d:b4:cb:2f:45:b0:c1:c9:
c1:31:53:d1:5d:8a:e7:78:4d:81:1e:9e:af:49:af:05:0c:56:
3a:54:e3:c2:97:ea:65:f4:ce:01:0b:08:f8:8f:f0:6e:8a:e3:
3f:3a:3b:24:e6:9d:57:87:0d:fd:11:a3:c3:02:69:6b:01:dd:
27:19:c5:4b:c3:ba:42:a7:fb:c5:4e:75:b8:89:6b:42:36:03:
2f:e4:30:ba:65:fa:16:47:18:50:57:bb:b2:51:fb:2b:83:10:
af:de:fa:8f:15:33:03:58:cc:6f:e6:bb:13:96:2a:9c:4d:74:
1d:ce:73:3b:22:0e:e7:bc:76:71:60:03:6f:eb:63:30:50:dd:
16:1a:31:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NGK1udmEPDCQxX4hRKKCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NmE1OGRmOWFhNDdjY2QyMTAyMWViMmM2YmYwNmIzYjQ1
OTBjMDgwHhcNMjYwNDI3MDQwMDM5WhcNMjYwNDI4MDQwMDM5WjAzMTEwLwYDVQQD
EyhjNGUzY2E3MmMwNzY3MDAwNDY1NWVkN2ViMDM2MTE3M2FiYzM5YmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4vd7mBaul+eGs2jitukkkOVi2Dp
yFWO3+3a5zMtUQU06GRLfWJRn4HlZNI3ohMuw21MVrfGUWvvyG6Jx5oJg6+A7pPD
dlBBurF7JIJFejnJfPyVS/djmk2h4Y8E/ziYhmq7FZT0oW+8fD4YVjQBXfA43rzK
SUp9TSe1Dt0mjEu7vLQgWtUPnO6ps5gQvDgY/fiozncU4eX5nk6xMd2Yi0CLeIYL
4sEppu10tCTmbrCUYKqySvADHn/uCRbF1+l3ScGmG0Q/GO1gLHCb90cDZCWQinPB
rnb5EzzVsMPJX6hdEG/KAWMglnWBCKL1sgMj2WAIa+bm9juM+qeijOVnlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTjynLAdnAARlXtfrA2EXOrw5v/MB8GA1UdIwQY
MBaAFNlqWN+apHzNIQIessa/BrO0WQwIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMldwWTM1cWtmTTBoQWg2eXhyOEdzN1JaREFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9iZGVkZTgtNzM1ZC00YTA1LTgzOGMt
MmQ0OWM5YmM5ODJkLzEvMldwWTM1cWtmTTBoQWg2eXhyOEdzN1JaREFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9iZGVkZTgtNzM1ZC00YTA1LTgzOGMtMmQ0OWM5YmM5ODJk
LzEvMldwWTM1cWtmTTBoQWg2eXhyOEdzN1JaREFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlToJCcmy
Hex3J4WenBPWdQAw6TlJrid96GrUrVLCZBA/Yokqm20Il56YkJgbuj1xtmj3XkB9
3jN/hROVOjb/7LHARcCutQ7hmQ4Px2PO6tWzAKQHTYhcSCQCES5nmIq6nBpXiyJ6
UQLmLhGsu6ylPgvsY09OHx20yy9FsMHJwTFT0V2K53hNgR6er0mvBQxWOlTjwpfq
ZfTOAQsI+I/wborjPzo7JOadV4cN/RGjwwJpawHdJxnFS8O6Qqf7xU51uIlrQjYD
L+QwumX6FkcYUFe7slH7K4MQr976jxUzA1jMb+a7E5YqnE10Hc5zOyIO57x2cWAD
b+tjMFDdFhox1g==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:55:04 2026 by rpki-client