Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
File: 1N33M6X21zWr8n6JKuDlANVyffM.mft (raw, json)
Hash identifier: NOm4skNtBDVqDp+i8rNkRRTrWHtIOpp0nEBGDvYlCmE=
Subject key identifier: 7B:28:50:EE:A6:25:9E:E3:6D:2B:14:7A:5B:68:71:80:4F:2A:87:7C
Authority key identifier: D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
Certificate issuer: /CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Certificate serial: 019DCCAAAFDB5096712706E0F98A911D623F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
Manifest number: F4
Signing time: Mon 27 Apr 2026 02:00:31 +0000
Manifest this update: Mon 27 Apr 2026 02:00:31 +0000
Manifest next update: Tue 28 Apr 2026 02:00:31 +0000
Files and hashes: 1: 1N33M6X21zWr8n6JKuDlANVyffM.crl (hash: mBAMeY3sRvM3BVo3jZf3BE4bO3mU1L1hMVVES8yl26o=)
2: iKbr2LK5J82gYuXSxnRiW9ytVSU.roa (hash: SB/v/t0GxNGoad1gEDHjAA4/1IulHpKzS+RYj669lVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:aa:af:db:50:96:71:27:06:e0:f9:8a:91:1d:62:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Validity
Not Before: Apr 27 02:00:31 2026 GMT
Not After : Apr 28 02:00:31 2026 GMT
Subject: CN=7b2850eea6259ee36d2b147a5b6871804f2a877c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:58:b5:55:80:3d:ca:e9:e7:a9:96:be:3a:79:
b7:66:59:2d:32:db:36:a8:c3:02:14:4d:e1:e5:69:
ba:33:55:b3:e3:c1:1a:ff:96:d3:d4:30:eb:4a:9a:
15:d8:fe:06:42:f7:3c:a1:66:15:00:50:89:b4:7e:
ea:97:09:94:27:e2:9e:e8:2a:b6:9e:ab:8a:ec:2c:
53:75:21:90:b6:19:0f:db:88:44:74:84:aa:0a:71:
3b:de:cf:55:6e:f7:31:68:62:7e:23:26:3b:ba:dc:
63:91:90:70:28:d5:17:7b:40:08:b4:db:01:9d:84:
e3:38:85:fc:2c:ec:9a:b6:00:b3:f6:95:0e:11:f7:
7a:2a:6c:75:9a:5f:a7:53:66:9f:df:23:52:e4:f5:
b1:fd:41:69:9b:d7:7f:e9:4c:6c:09:30:e5:85:5e:
99:44:bf:8f:70:99:34:27:0d:29:92:86:51:a4:e4:
01:1a:46:50:09:ea:f0:49:91:bd:7f:80:5b:1f:1d:
bd:0f:a2:4b:15:3f:f8:60:0c:77:66:fc:42:2e:88:
73:3b:08:cf:0d:6f:05:48:a7:fb:aa:62:d4:0f:c2:
94:0c:54:ed:a1:de:f8:2b:ae:4d:c2:6f:ee:c5:8d:
ec:07:5b:33:11:50:60:e4:7a:4a:83:4d:6f:d0:80:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:28:50:EE:A6:25:9E:E3:6D:2B:14:7A:5B:68:71:80:4F:2A:87:7C
X509v3 Authority Key Identifier:
keyid:D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0e:67:1f:51:b0:96:59:93:15:79:a6:6e:fb:81:0c:92:a4:
b2:62:82:db:d5:8c:85:fb:3b:19:2a:a1:bc:52:70:14:22:5b:
37:23:d4:53:9a:b6:d5:55:87:f8:c8:9a:bc:93:b3:c6:a4:1a:
43:36:49:e9:1a:35:6b:7f:5a:b8:dc:f9:1a:ea:4e:33:66:74:
ac:e6:42:50:56:c0:31:ba:80:fc:4c:4a:d4:a2:47:7a:19:91:
a3:ab:00:97:b6:01:d2:f9:57:34:9b:90:ba:0e:db:3b:2f:81:
84:6d:4f:b0:36:8b:42:fc:59:1e:2b:54:ac:a8:c1:fd:16:95:
79:8f:1d:28:79:96:52:fe:20:ec:af:8e:16:bb:dc:6d:79:cd:
ab:83:af:0b:2c:11:6b:2d:83:67:24:33:0e:64:08:f7:ab:51:
2c:38:b2:a1:d0:c4:00:08:40:39:10:ca:5e:78:7e:39:34:a2:
9d:e3:84:55:dd:14:1e:65:76:07:2e:43:b4:ae:c8:7d:ec:78:
37:bb:d0:64:d8:cc:b3:e2:66:68:70:b2:58:63:1b:c5:71:df:
67:62:85:26:90:eb:0e:f5:0c:a2:a5:45:46:5f:05:86:b7:72:
25:23:30:12:07:3c:dc:96:55:52:02:03:e0:4e:8f:0f:48:83:
6e:21:9f:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Mqq/bUJZxJwbg+YqRHWI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZGRmNzMzYTVmNmQ3MzVhYmYyN2U4OTJhZTBlNTAwZDU3
MjdkZjMwHhcNMjYwNDI3MDIwMDMxWhcNMjYwNDI4MDIwMDMxWjAzMTEwLwYDVQQD
Eyg3YjI4NTBlZWE2MjU5ZWUzNmQyYjE0N2E1YjY4NzE4MDRmMmE4NzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3li1VYA9yunnqZa+Onm3ZlktMts2
qMMCFE3h5Wm6M1Wz48Ea/5bT1DDrSpoV2P4GQvc8oWYVAFCJtH7qlwmUJ+Ke6Cq2
nquK7CxTdSGQthkP24hEdISqCnE73s9VbvcxaGJ+IyY7utxjkZBwKNUXe0AItNsB
nYTjOIX8LOyatgCz9pUOEfd6Kmx1ml+nU2af3yNS5PWx/UFpm9d/6UxsCTDlhV6Z
RL+PcJk0Jw0pkoZRpOQBGkZQCerwSZG9f4BbHx29D6JLFT/4YAx3ZvxCLohzOwjP
DW8FSKf7qmLUD8KUDFTtod74K65Nwm/uxY3sB1szEVBg5HpKg01v0IDHYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsoUO6mJZ7jbSsUeltocYBPKod8MB8GA1UdIwQY
MBaAFNTd9zOl9tc1q/J+iSrg5QDVcn3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU4zM002WDIxeldyOG42Skt1RGxBTlZ5ZmZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9kODQ2NmUtMjRiZS00YTZkLWI1NWYt
ZWZlNTk5YmY1ZDg3LzEvMU4zM002WDIxeldyOG42Skt1RGxBTlZ5ZmZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9kODQ2NmUtMjRiZS00YTZkLWI1NWYtZWZlNTk5YmY1ZDg3
LzEvMU4zM002WDIxeldyOG42Skt1RGxBTlZ5ZmZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQ5nH1Gw
llmTFXmmbvuBDJKksmKC29WMhfs7GSqhvFJwFCJbNyPUU5q21VWH+MiavJOzxqQa
QzZJ6Ro1a39auNz5GupOM2Z0rOZCUFbAMbqA/ExK1KJHehmRo6sAl7YB0vlXNJuQ
ug7bOy+BhG1PsDaLQvxZHitUrKjB/RaVeY8dKHmWUv4g7K+OFrvcbXnNq4OvCywR
ay2DZyQzDmQI96tRLDiyodDEAAhAORDKXnh+OTSineOEVd0UHmV2By5DtK7Ifex4
N7vQZNjMs+JmaHCyWGMbxXHfZ2KFJpDrDvUMoqVFRl8FhrdyJSMwEgc83JZVUgID
4E6PD0iDbiGfNA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 10:45:42 2026 by rpki-client