Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
File: _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json)
Hash identifier: 2PkqHuRF3O8elG8W7n5ZmUDrnENsft+f+IUzDChG6sk=
Subject key identifier: A4:0C:07:90:D2:ED:D9:8B:D0:E7:A2:F1:D0:7E:C6:D2:B4:33:6A:25
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial: 019D9961DD187529C57A4E5D4FECAA8C36B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
Manifest number: 097E
Signing time: Fri 17 Apr 2026 03:00:20 +0000
Manifest this update: Fri 17 Apr 2026 03:00:20 +0000
Manifest next update: Sat 18 Apr 2026 03:00:20 +0000
Files and hashes: 1: 3DdHsX6it2ap4y_VnsjWCiY07Yo.roa (hash: x9mgWA78JqU1sZIpmaNa31HOdxWPBMoH6TxC+AtVICA=)
2: E1CobbzuSopIQ25v8bXg7-wkG08.roa (hash: IoeE+7y8I3rHs6C9VTnXoHgwAPKPkZzWiNKhUaIZbC0=)
3: LyZiTz1VH8kyF5AmjQaEjp0W6sE.roa (hash: AelnLJhdvd0PiZ/B/iw8zmXPaSYCUu42XLVsyGcWPKo=)
4: WeKOa0H0czOL8IIE6VOIs9H9HXM.roa (hash: HnR5cSodno/i5GR28495C4j2bGZUas8Sx3TSjsOhefE=)
5: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: ylSwwuImjX39UzDjzyx3ClIFLnhEKORVrJVk4lrpZ8g=)
6: lR8if6ppIPbhohYi1ZftYsaVivM.roa (hash: tWsT29WceBlnruoO07mkklZjKl8F3YK8Bj14J12SHEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:dd:18:75:29:c5:7a:4e:5d:4f:ec:aa:8c:36:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Validity
Not Before: Apr 17 03:00:20 2026 GMT
Not After : Apr 18 03:00:20 2026 GMT
Subject: CN=a40c0790d2edd98bd0e7a2f1d07ec6d2b4336a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:8f:fa:11:8d:5c:91:78:c7:23:e4:95:3c:
1a:3d:bf:d1:60:c4:21:48:ec:52:71:78:27:9c:6b:
47:3b:b6:41:14:93:e0:56:cc:33:0c:05:df:7a:b9:
26:4f:da:93:3e:7c:e9:74:24:72:b0:46:03:2c:75:
39:05:26:6e:24:4a:d9:b0:0a:64:75:47:0b:96:56:
54:a0:3a:dd:7e:be:5a:7f:34:3f:b5:39:03:a8:43:
ed:4f:0f:cd:0f:7b:50:e6:26:81:12:8b:dd:2d:5a:
4c:2b:c0:11:ed:91:8a:04:bc:da:5e:89:74:c5:9a:
02:1c:af:be:49:50:4f:79:17:8c:ab:1b:74:2e:8e:
83:96:cd:59:7c:bc:e8:be:61:7e:5f:1a:2d:22:7c:
fe:11:80:03:b7:b2:ff:b7:d5:72:1e:b5:c4:7a:10:
dd:a2:b0:e5:d4:3d:8a:3a:9a:ec:db:d1:62:16:9a:
5b:32:67:53:98:f9:6b:cf:de:f0:f9:0d:ba:38:e8:
7c:9a:98:42:d9:e5:b1:23:5c:2f:2b:ea:f3:c9:0c:
14:a0:d0:33:3c:d1:87:0e:72:ea:11:91:eb:34:3b:
60:d5:7f:e2:a5:ed:0e:f4:79:97:37:fa:1c:7e:67:
90:a5:fa:a3:ee:8d:14:3b:cb:0f:f8:d9:c3:f2:47:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0C:07:90:D2:ED:D9:8B:D0:E7:A2:F1:D0:7E:C6:D2:B4:33:6A:25
X509v3 Authority Key Identifier:
keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9a:67:9e:78:9b:89:fa:af:ec:9a:2f:4b:f0:56:22:f6:70:
c3:12:9e:d5:98:10:16:68:cb:ef:43:f0:3f:b4:a2:6e:24:13:
95:c3:1f:d9:23:29:cd:c9:fe:56:3e:98:2e:6a:c8:ee:a1:45:
38:49:3a:57:53:c3:ed:7f:be:b3:01:38:46:b5:e8:5b:66:7a:
a6:c4:bf:f8:e5:72:11:1f:19:a9:f3:2e:7a:ea:47:3e:44:f0:
a2:7a:87:3c:02:ca:0e:5c:c6:0c:ae:97:45:a8:83:10:eb:8c:
a8:06:7c:91:3f:a2:b4:37:d8:57:03:7c:0b:a1:6a:8a:62:8c:
12:e4:d8:45:23:9f:a6:20:c2:1d:5a:27:9e:ff:08:97:93:34:
5c:b4:e9:d5:af:8f:20:62:7f:ff:ec:67:fa:62:28:ee:fb:94:
b0:2c:ae:1b:ff:a1:8e:26:76:85:c9:6c:61:58:8e:f5:7d:36:
7a:61:3f:d8:4c:5a:78:1c:a4:b5:31:a3:d2:21:0c:10:1d:26:
fc:5d:db:6c:f5:00:f1:8c:7a:a3:cf:e4:81:2e:53:96:bb:9b:
ad:a3:17:51:a7:d1:0d:3b:36:f0:b1:9a:53:cd:0d:59:71:6d:
ee:64:12:84:25:1e:76:e0:c3:4c:99:b3:dd:75:3b:27:e0:2d:
09:ab:3e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:35 2026 by rpki-client