
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
File: 4qEN5v-uWQQnJEoDND22asVkJ1o.mft (raw, json)
Hash identifier: OgaWuagGnd6IGCorp4Mtd865r7P2dSdMBGJ+dBrAfQI=
Subject key identifier: 82:BE:4F:55:DE:73:A9:05:09:70:F4:1F:A4:0F:1C:B0:EF:12:07:D2
Authority key identifier: E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
Certificate issuer: /CN=e2a10de6ffae590427244a03343db66ac564275a
Certificate serial: 019DA4542C951EC1B11228BD69E3A9CB3006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
Manifest number: 160F
Signing time: Sun 19 Apr 2026 06:01:13 +0000
Manifest this update: Sun 19 Apr 2026 06:01:13 +0000
Manifest next update: Mon 20 Apr 2026 06:01:13 +0000
Files and hashes: 1: 0gIiALe6pz1IQicIRlap9JpEjvk.roa (hash: a8WIdauJpV7mniv+m0G3DWtScZS35ac1cb7lSAK0pD4=)
2: 4qEN5v-uWQQnJEoDND22asVkJ1o.crl (hash: i/ppSSZ42zdBwRndzjbo60B3hNfLywzbqWlF/mjObMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:2c:95:1e:c1:b1:12:28:bd:69:e3:a9:cb:30:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a10de6ffae590427244a03343db66ac564275a
Validity
Not Before: Apr 19 06:01:13 2026 GMT
Not After : Apr 20 06:01:13 2026 GMT
Subject: CN=82be4f55de73a9050970f41fa40f1cb0ef1207d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:41:f0:fb:95:12:5c:3f:61:1c:c0:39:f5:
45:c5:0e:37:7d:a5:31:db:12:36:02:bd:4f:a3:a1:
6e:d2:f1:96:e6:a9:6a:75:2c:82:86:b7:80:07:f8:
95:c4:bb:4c:34:f4:fe:fc:db:f3:15:cf:f9:03:2e:
6f:8c:19:8a:4d:d2:3a:ae:1c:fb:09:83:76:34:c5:
51:22:3c:ca:81:7d:0c:18:4e:aa:7f:0f:64:70:7b:
71:c9:08:2a:9b:41:aa:ed:0b:03:1c:e3:96:4c:92:
63:ac:83:0c:a0:66:d7:17:6f:67:5b:6d:21:1f:3a:
06:8d:d8:69:88:1b:f5:de:ad:9b:4f:ad:c8:85:a8:
39:48:38:d7:2f:b7:ae:cf:92:12:a8:e7:0a:fe:f4:
c8:71:c0:5e:43:40:7f:d7:7c:c9:3c:ed:d5:c6:95:
47:b7:e8:2f:4c:76:28:51:8e:73:89:34:a3:3c:74:
d6:40:35:d9:1f:87:83:5e:fe:4f:b4:f9:4a:13:f7:
21:32:58:dd:bc:6e:c8:85:f1:8c:2d:95:8f:f0:71:
84:3d:51:d1:f3:7f:27:a2:25:35:6a:ca:06:58:7b:
27:61:09:4a:f9:a5:8e:b8:5f:34:55:77:a8:59:e6:
19:df:cb:74:f1:ee:74:fa:40:7a:5a:07:25:63:a0:
8e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BE:4F:55:DE:73:A9:05:09:70:F4:1F:A4:0F:1C:B0:EF:12:07:D2
X509v3 Authority Key Identifier:
keyid:E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:82:d5:94:2b:44:4f:50:a6:fd:ab:03:0e:44:22:c6:6e:8e:
68:f4:5c:6b:78:77:eb:dd:51:f7:2f:80:9a:d4:94:d4:47:31:
f0:11:a2:3c:f9:a5:dd:51:04:74:94:16:ad:56:68:65:c4:a7:
d2:81:19:f9:f2:1d:0a:d8:05:e2:f3:5b:0f:d4:d4:24:bf:73:
c7:51:25:bc:a1:17:e9:37:de:98:ac:82:c4:72:11:99:dc:31:
5b:62:6c:fe:8a:70:b0:89:b5:6e:de:23:4c:a0:8e:6b:bf:22:
fb:19:8b:d8:68:c0:c4:5f:bc:a5:4c:31:8b:de:73:a0:63:6b:
c9:3f:d7:72:5b:9c:cc:d1:03:8b:00:f9:cf:5f:fc:ab:05:9f:
bd:fc:a3:69:ea:a7:f0:89:03:7b:56:c1:52:8f:61:59:65:27:
55:f0:89:46:27:58:b3:c6:f0:5e:6b:96:f5:7b:1a:b4:a0:20:
8f:b7:5c:7e:f6:ba:ce:38:a7:9f:f1:40:0d:86:aa:4a:bb:12:
80:df:c3:19:6e:9f:04:9a:0e:d5:16:10:d9:25:d9:2f:70:a4:
12:9c:7b:d2:25:c1:93:67:79:e1:f8:30:21:b0:fd:eb:18:4c:
74:57:f9:d5:b5:b0:21:3c:64:37:f3:a4:23:e9:8c:0b:a9:a0:
89:f9:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:24:32 2026 by rpki-client