Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: loLcHqtsy8HtGxLuI5uHl89DPsGlu5Kynro20pFE1Vw=
Subject key identifier: E0:DF:D7:2A:1C:C7:B6:21:BB:88:6B:87:D8:EA:BE:C5:CA:5A:EA:AE
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 019E2091C6687FCF7CB28FB14D6EA07A0FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 1912
Signing time: Wed 13 May 2026 09:01:24 +0000
Manifest this update: Wed 13 May 2026 09:01:24 +0000
Manifest next update: Thu 14 May 2026 09:01:24 +0000
Files and hashes: 1: 1-5V3M6zE3wKBEweDO-7_cCen51c.roa (hash: LwMI3fPGMvfyxbI/YBNs8zyBRZxgnVuUyiN/3FDRb40=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: kBLD76Ao1RP8rb0TknJeXQ527PuzjlWs9u48ZXJAQpo=)
3: tJXMZewUy_qQorxapIfDeK0TRA4.roa (hash: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:c6:68:7f:cf:7c:b2:8f:b1:4d:6e:a0:7a:0f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: May 13 09:01:24 2026 GMT
Not After : May 14 09:01:24 2026 GMT
Subject: CN=e0dfd72a1cc7b621bb886b87d8eabec5ca5aeaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:e7:2c:a0:3a:b0:2a:c6:0d:77:8e:1d:bd:
20:a2:d3:11:e7:64:ca:6e:ab:fb:d8:93:5c:b7:30:
c5:5e:11:1a:e6:f6:08:51:20:43:41:02:82:6a:37:
f1:39:5f:dc:7a:8f:29:76:03:90:89:7f:d7:31:16:
75:dc:37:af:f6:3b:56:94:3e:72:72:08:65:05:f7:
c0:b3:69:a9:26:5c:7e:c3:51:bd:8b:d5:b1:ad:6e:
05:bb:68:f6:51:e7:18:cc:bd:7a:29:51:46:8f:d7:
b7:26:36:c7:b1:65:86:0d:93:7d:b9:41:ab:70:75:
be:c1:41:92:01:b7:d0:51:08:83:4b:62:09:de:23:
c3:d1:25:46:8f:4c:56:0b:b8:98:7f:4a:1f:27:46:
8a:e4:0a:5b:13:ea:05:d5:7c:89:7f:64:2f:26:39:
45:2d:32:02:97:6e:a0:7b:3a:61:ae:68:62:ae:6b:
8a:01:90:8c:0f:85:6b:56:29:27:59:3b:57:85:f1:
dd:cd:4b:f7:15:ab:7e:bf:16:12:3d:70:7a:24:35:
d2:02:ec:7d:33:58:2b:f9:ca:fe:d4:c1:f2:31:03:
4c:83:69:31:70:e2:2f:59:8a:bb:6f:5d:b8:a1:37:
0e:ab:68:28:48:2c:6a:58:37:ef:6c:40:3c:e2:99:
ac:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DF:D7:2A:1C:C7:B6:21:BB:88:6B:87:D8:EA:BE:C5:CA:5A:EA:AE
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e5:d2:75:03:26:ca:b0:4c:c7:d8:4a:78:2e:83:1b:fc:31:
6e:22:61:22:6f:c7:a0:d6:3a:ae:78:12:9d:50:cd:f6:c3:67:
e4:f2:1f:9b:46:5a:d2:a3:b2:41:a4:99:3d:ad:e9:8c:ff:44:
62:eb:85:30:5a:a9:0d:ab:0a:28:ab:78:30:45:31:37:fc:4b:
8f:21:47:9b:94:9d:c6:3f:af:01:71:ec:5a:c3:77:7f:31:9f:
4c:07:b1:8c:89:52:89:e0:35:4f:cd:ac:e9:a7:6a:ee:1c:68:
e0:c7:2b:6e:1c:ee:4d:5e:f1:b4:01:03:38:2d:e7:3a:88:f8:
06:42:7a:a0:3e:00:ac:2c:03:97:db:88:8d:30:03:99:7b:c3:
61:94:4b:08:61:6e:bb:fb:ec:73:55:8b:92:e2:fb:74:c0:48:
89:27:6e:ce:83:b2:04:41:04:d7:00:69:14:3e:da:80:a9:cc:
4f:23:69:cd:c5:d5:fa:8b:83:95:9d:fd:c2:6e:1b:47:01:46:
72:72:0c:1b:e2:74:96:80:44:19:d1:20:82:26:45:41:41:31:
81:92:cd:3a:9a:b6:f0:b6:09:55:9f:a0:b3:32:98:65:d2:6f:
14:7b:c2:80:e8:64:e8:3b:d7:04:6b:7f:3d:2c:f4:74:bd:fa:
28:a8:f3:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkcZof898so+xTW6geg+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODBlYmJiY2EwZjg5MGRlMzUzODkxNDIxYTgzZGQ1YjY1
M2Q5NDAwHhcNMjYwNTEzMDkwMTI0WhcNMjYwNTE0MDkwMTI0WjAzMTEwLwYDVQQD
EyhlMGRmZDcyYTFjYzdiNjIxYmI4ODZiODdkOGVhYmVjNWNhNWFlYWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8nnLKA6sCrGDXeOHb0gotMR52TK
bqv72JNctzDFXhEa5vYIUSBDQQKCajfxOV/ceo8pdgOQiX/XMRZ13Dev9jtWlD5y
cghlBffAs2mpJlx+w1G9i9WxrW4Fu2j2UecYzL16KVFGj9e3JjbHsWWGDZN9uUGr
cHW+wUGSAbfQUQiDS2IJ3iPD0SVGj0xWC7iYf0ofJ0aK5ApbE+oF1XyJf2QvJjlF
LTICl26gezphrmhirmuKAZCMD4VrViknWTtXhfHdzUv3Fat+vxYSPXB6JDXSAux9
M1gr+cr+1MHyMQNMg2kxcOIvWYq7b124oTcOq2goSCxqWDfvbEA84pmsrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODf1yocx7Yhu4hrh9jqvsXKWuquMB8GA1UdIwQY
MBaAFOGA67vKD4kN41OJFCGoPdW2U9lAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEt
MDU1NTY5NTljNDU1LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEtMDU1NTY5NTljNDU1
LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+XSdQMm
yrBMx9hKeC6DG/wxbiJhIm/HoNY6rngSnVDN9sNn5PIfm0Za0qOyQaSZPa3pjP9E
YuuFMFqpDasKKKt4MEUxN/xLjyFHm5Sdxj+vAXHsWsN3fzGfTAexjIlSieA1T82s
6adq7hxo4McrbhzuTV7xtAEDOC3nOoj4BkJ6oD4ArCwDl9uIjTADmXvDYZRLCGFu
u/vsc1WLkuL7dMBIiSduzoOyBEEE1wBpFD7agKnMTyNpzcXV+ouDlZ39wm4bRwFG
cnIMG+J0loBEGdEggiZFQUExgZLNOpq28LYJVZ+gszKYZdJvFHvCgOhk6DvXBGt/
PSz0dL36KKjzkQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:49:34 2026 by rpki-client