Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft (raw, json)
Hash identifier: 5I0uPbFDkCdO7l9lXkjamxyek5j/RAtxcawKVrKEqi8=
Subject key identifier: 5F:C2:E5:3F:F8:24:11:2A:F8:03:26:6A:B8:B4:BF:23:62:E1:D5:3B
Authority key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
Certificate issuer: /CN=e31c010e95015c2123641d33120a7e9c9008002d
Certificate serial: 019E28B9789787079096DEA986E06A21119B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
Manifest number: 0237
Signing time: Thu 14 May 2026 23:01:44 +0000
Manifest this update: Thu 14 May 2026 23:01:44 +0000
Manifest next update: Fri 15 May 2026 23:01:44 +0000
Files and hashes: 1: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl (hash: OBxExg/YrrcNMnUMMIAuR44bSxsqX7zomv1DcL/2sOc=)
2: EVP8JZC4veSxdxX6T8tUKYQ-OAA.roa (hash: bYUAbwTN22M9GXhG7TnoyYrgAEb8pmrS9QwXIchXrAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b9:78:97:87:07:90:96:de:a9:86:e0:6a:21:11:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31c010e95015c2123641d33120a7e9c9008002d
Validity
Not Before: May 14 23:01:44 2026 GMT
Not After : May 15 23:01:44 2026 GMT
Subject: CN=5fc2e53ff824112af803266ab8b4bf2362e1d53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:90:2d:fe:da:b0:2e:fe:53:d4:05:2a:f0:
5e:34:6d:fc:0e:85:d9:e7:f2:9d:09:16:dc:bd:10:
26:43:2f:80:62:4a:6b:63:11:4a:ff:4d:04:34:ed:
78:b7:2a:2b:d8:24:51:d3:18:a3:58:ec:35:e7:db:
69:3f:2c:3a:72:2b:fd:79:6f:40:7e:11:4c:f8:b6:
2a:8f:1a:e0:cc:46:24:53:4c:a7:35:0e:e4:d2:ac:
26:1c:5e:0a:ff:f1:fe:97:a7:68:a4:e4:03:3f:5f:
3b:83:22:91:b8:c9:73:e3:07:06:1e:78:38:c5:51:
e0:f1:5f:3e:2e:d8:d1:30:4d:aa:d4:34:84:4b:bf:
36:7e:56:44:ed:c2:15:e9:f7:18:27:06:ff:4b:c7:
f4:d1:34:de:62:8d:8c:8f:95:66:45:35:74:ad:bb:
18:d9:ae:66:a4:d7:e8:4e:96:81:f4:56:bc:5e:a9:
c6:44:6d:4d:c6:d3:92:2d:5a:0f:83:e0:af:f4:88:
0b:ac:af:7b:aa:cc:c4:89:7d:ae:5e:1a:ee:52:50:
41:d7:d3:81:d6:4b:50:74:a5:1b:f8:c3:8d:50:d0:
d2:43:a9:d9:87:f4:78:37:0a:b8:97:f5:c7:d6:df:
7d:f2:a5:b6:55:2e:48:e5:4c:70:70:81:52:cd:46:
82:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C2:E5:3F:F8:24:11:2A:F8:03:26:6A:B8:B4:BF:23:62:E1:D5:3B
X509v3 Authority Key Identifier:
keyid:E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:29:6f:c8:31:b4:21:d8:a0:db:b3:dc:73:82:50:39:f7:18:
eb:e7:6c:09:b5:17:a5:89:73:36:65:d0:97:be:c7:7f:37:bf:
52:89:c1:11:29:4a:97:b0:a5:67:12:6a:91:97:1d:16:94:28:
6d:48:40:05:b3:98:2e:51:1e:33:ab:1b:77:e1:61:ec:8b:bb:
8a:f5:a5:3f:43:3f:32:4f:41:99:a6:c1:8b:13:e1:ee:73:39:
56:4a:03:81:0e:5a:db:8b:c4:c6:c8:f8:1a:69:ac:58:4c:d6:
f6:0d:70:e4:34:74:50:26:10:32:49:cb:28:11:86:b4:3e:c1:
36:52:7e:fd:f6:61:5e:03:dd:c1:95:e5:fa:31:00:46:2c:34:
ec:d4:4a:e7:c0:95:f5:f4:d4:91:be:2f:cb:bf:e0:79:78:cf:
ee:2c:d0:01:0b:59:50:ab:69:dd:18:c2:3a:4b:2e:ee:35:bb:
26:ef:a6:d8:98:fc:14:d5:48:ee:46:c0:f3:01:3f:ac:bd:f6:
4f:2b:57:8c:2c:fd:3b:4e:bc:63:2b:28:be:b6:1d:14:16:c2:
e0:fa:82:64:65:63:f0:c6:d7:85:88:d6:91:83:e6:f5:c2:a4:
d8:49:81:19:94:84:e4:4c:57:44:f8:84:ac:a9:52:05:28:30:
74:ce:c2:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ouXiXhweQlt6phuBqIRGbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWMwMTBlOTUwMTVjMjEyMzY0MWQzMzEyMGE3ZTljOTAw
ODAwMmQwHhcNMjYwNTE0MjMwMTQ0WhcNMjYwNTE1MjMwMTQ0WjAzMTEwLwYDVQQD
Eyg1ZmMyZTUzZmY4MjQxMTJhZjgwMzI2NmFiOGI0YmYyMzYyZTFkNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3mQLf7asC7+U9QFKvBeNG38DoXZ
5/KdCRbcvRAmQy+AYkprYxFK/00ENO14tyor2CRR0xijWOw159tpPyw6civ9eW9A
fhFM+LYqjxrgzEYkU0ynNQ7k0qwmHF4K//H+l6dopOQDP187gyKRuMlz4wcGHng4
xVHg8V8+LtjRME2q1DSES782flZE7cIV6fcYJwb/S8f00TTeYo2Mj5VmRTV0rbsY
2a5mpNfoTpaB9Fa8XqnGRG1NxtOSLVoPg+Cv9IgLrK97qszEiX2uXhruUlBB19OB
1ktQdKUb+MONUNDSQ6nZh/R4Nwq4l/XH1t998qW2VS5I5UxwcIFSzUaCoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/C5T/4JBEq+AMmari0vyNi4dU7MB8GA1UdIwQY
MBaAFOMcAQ6VAVwhI2QdMxIKfpyQCAAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80ODM4MDYtMDQ1ZC00ODU2LWI1Mjkt
YjQ3ZTc0ZWQ0ZTdlLzEvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80ODM4MDYtMDQ1ZC00ODU2LWI1MjktYjQ3ZTc0ZWQ0ZTdl
LzEvNHh3QkRwVUJYQ0VqWkIwekVncC1uSkFJQUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSlvyDG0
Idig27Pcc4JQOfcY6+dsCbUXpYlzNmXQl77Hfze/UonBESlKl7ClZxJqkZcdFpQo
bUhABbOYLlEeM6sbd+Fh7Iu7ivWlP0M/Mk9BmabBixPh7nM5VkoDgQ5a24vExsj4
GmmsWEzW9g1w5DR0UCYQMknLKBGGtD7BNlJ+/fZhXgPdwZXl+jEARiw07NRK58CV
9fTUkb4vy7/geXjP7izQAQtZUKtp3RjCOksu7jW7Ju+m2Jj8FNVI7kbA8wE/rL32
TytXjCz9O068YysovrYdFBbC4PqCZGVj8MbXhYjWkYPm9cKk2EmBGZSE5ExXRPiE
rKlSBSgwdM7CTw==
-----END CERTIFICATE-----
Generated at Fri May 15 10:15:51 2026 by rpki-client