Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
File: 4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json)
Hash identifier: qE8Gmsg1nbzLpOc/rP87+H4FU1WAvsOQRXzgg/NILmI=
Subject key identifier: C6:FC:A9:F4:AC:9E:D6:61:DB:76:EF:8E:D5:1D:D8:AF:C9:40:2B:2F
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Certificate issuer: /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial: 019E28F00AEB9A1B96061B2FCE5F051D8A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
Manifest number: 07FF
Signing time: Fri 15 May 2026 00:01:20 +0000
Manifest this update: Fri 15 May 2026 00:01:20 +0000
Manifest next update: Sat 16 May 2026 00:01:20 +0000
Files and hashes: 1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: N0hUb5uYwlA42X5hfOdsi7Nv2XYTWcYBzxrjhpEYmDE=)
2: kJBFWcdH75SmtIn8uA9jCwfUX4o.roa (hash: ysJ0LU5rMa1kB1xrN2ppHOMAzf664V0YwglsAj8KzHs=)
3: wqXxgKLtEKW7BSlepVMRDTpNWM0.asa (hash: hQjKffOZktpgqNZU9Z705S9+cY/2MAGq57iVWSoX52s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:f0:0a:eb:9a:1b:96:06:1b:2f:ce:5f:05:1d:8a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Validity
Not Before: May 15 00:01:20 2026 GMT
Not After : May 16 00:01:20 2026 GMT
Subject: CN=c6fca9f4ac9ed661db76ef8ed51dd8afc9402b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:76:60:3f:a3:8d:16:9c:b9:6e:1e:43:91:
30:b7:eb:fe:dc:18:ad:c1:c5:8b:34:00:c6:9b:1e:
9f:8a:d3:c0:0e:b0:af:02:e1:32:7b:e0:b6:7f:d1:
31:68:5d:c4:4b:5c:1c:62:cf:71:ca:51:a4:1c:2d:
90:8d:d2:5f:e7:ee:61:55:dd:7b:d0:e7:83:19:51:
1b:40:75:22:e0:33:ba:9c:91:6b:2c:a7:4c:2d:e6:
1c:73:b2:8b:aa:88:c3:ff:15:e4:0e:86:5b:40:15:
16:4c:69:1c:62:0d:59:60:ae:10:e5:38:03:fd:bf:
ba:d9:8a:b4:da:96:77:6c:a8:ed:42:a4:da:c7:11:
10:18:d0:ae:c9:e6:f7:e6:24:71:01:59:30:76:4b:
e5:14:49:f0:19:84:7b:8c:0c:36:2f:1d:72:c1:4c:
8a:5c:40:f7:3f:c6:fe:e1:74:92:ac:b3:5e:24:2f:
a8:d8:ab:ba:ff:15:b3:1d:41:2f:12:cc:20:6e:47:
12:a2:8c:cf:cc:34:9c:d7:bf:9f:d2:dd:72:35:59:
3d:0c:7a:e2:a0:36:a9:1c:dc:f1:5b:0f:24:9e:3f:
6b:70:45:79:6d:13:e1:f2:87:fc:67:99:83:ec:09:
42:a2:da:7f:fc:87:2a:da:96:b7:6e:d2:fa:04:60:
9a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FC:A9:F4:AC:9E:D6:61:DB:76:EF:8E:D5:1D:D8:AF:C9:40:2B:2F
X509v3 Authority Key Identifier:
keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d2:e2:e4:e1:84:aa:02:6d:15:ec:81:a2:d5:8e:04:38:70:
5f:41:5f:f6:98:7d:0d:59:c5:c4:af:7b:bc:e1:37:eb:b9:f8:
07:d2:3d:de:f9:83:4b:c6:4b:76:ec:c2:c6:f6:4a:db:41:92:
d2:ab:1c:ec:3c:98:f9:28:71:75:33:63:fa:73:8c:19:17:f4:
0b:aa:49:39:f9:61:fb:ae:00:0a:89:4e:65:47:f2:7d:1b:4a:
fa:a5:8e:80:8f:45:90:cd:78:c2:65:ee:a0:a0:d4:88:d6:76:
7e:81:f7:3b:07:d0:e4:02:d7:fa:38:3d:e5:12:28:74:25:fa:
19:20:4f:59:74:db:fc:0f:14:25:c5:c0:a9:e7:a3:f2:92:6d:
71:b0:02:aa:d0:b7:37:41:38:8a:b8:2f:61:65:e1:d8:21:bc:
e0:eb:1f:11:8b:c0:f7:37:bd:ea:ef:e1:eb:04:7b:6f:b2:70:
4e:40:a9:11:46:5a:51:40:0e:bc:5f:7e:80:86:5a:20:59:c0:
4b:5c:a4:0f:dc:e1:8b:2f:03:0a:a1:0a:5b:a4:e4:3b:1c:ee:
45:cc:3b:cf:48:22:76:6d:5a:bc:03:63:12:00:1a:e2:d0:9e:
6a:52:e2:6e:29:51:b5:d0:07:13:58:a1:70:0d:d7:c0:36:73:
30:cb:86:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4o8ArrmhuWBhsvzl8FHYpAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjM1Mjk2YmQyNjUyZDc1NmI5YzRhMmYwYWNkMmZkZGE3
OTA5N2MwHhcNMjYwNTE1MDAwMTIwWhcNMjYwNTE2MDAwMTIwWjAzMTEwLwYDVQQD
EyhjNmZjYTlmNGFjOWVkNjYxZGI3NmVmOGVkNTFkZDhhZmM5NDAyYjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/x2YD+jjRacuW4eQ5Ewt+v+3Bit
wcWLNADGmx6fitPADrCvAuEye+C2f9ExaF3ES1wcYs9xylGkHC2QjdJf5+5hVd17
0OeDGVEbQHUi4DO6nJFrLKdMLeYcc7KLqojD/xXkDoZbQBUWTGkcYg1ZYK4Q5TgD
/b+62Yq02pZ3bKjtQqTaxxEQGNCuyeb35iRxAVkwdkvlFEnwGYR7jAw2Lx1ywUyK
XED3P8b+4XSSrLNeJC+o2Ku6/xWzHUEvEswgbkcSoozPzDSc17+f0t1yNVk9DHri
oDapHNzxWw8knj9rcEV5bRPh8of8Z5mD7AlCotp//Icq2pa3btL6BGCaZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMb8qfSsntZh23bvjtUd2K/JQCsvMB8GA1UdIwQY
MBaAFOPzUpa9JlLXVrnEovCs0v3aeQl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQt
MDU5MDhjNjNiNDVhLzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81NzQ5NjAtZDY4ZC00MDY5LTk1NmQtMDU5MDhjNjNiNDVh
LzEvNF9OU2xyMG1VdGRXdWNTaThLelNfZHA1Q1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdLi5OGE
qgJtFeyBotWOBDhwX0Ff9ph9DVnFxK97vOE367n4B9I93vmDS8ZLduzCxvZK20GS
0qsc7DyY+ShxdTNj+nOMGRf0C6pJOflh+64AColOZUfyfRtK+qWOgI9FkM14wmXu
oKDUiNZ2foH3OwfQ5ALX+jg95RIodCX6GSBPWXTb/A8UJcXAqeej8pJtcbACqtC3
N0E4irgvYWXh2CG84OsfEYvA9ze96u/h6wR7b7JwTkCpEUZaUUAOvF9+gIZaIFnA
S1ykD9zhiy8DCqEKW6TkOxzuRcw7z0gidm1avANjEgAa4tCealLibilRtdAHE1ih
cA3XwDZzMMuGxQ==
-----END CERTIFICATE-----
Generated at Fri May 15 06:19:33 2026 by rpki-client