Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: JCUDZE2M5PUOIJ+jEEt7M+Dz3yEp4AsuowXdH974J38=
Subject key identifier: 15:4D:9E:13:BC:2E:38:24:CB:35:36:04:4D:2C:91:B8:A1:24:8E:0F
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 019DA41C843BCC1012802F7DE095783C5D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 05:00:25 +0000
Manifest this update: Sun 19 Apr 2026 05:00:25 +0000
Manifest next update: Mon 20 Apr 2026 05:00:25 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: m8iJhmRO5yjbnpI67dbfrY5NOeY8vqwMm/Qsq7iscV4=)
2: KUodnXGsFwyNehqN551Z9d54ZJM.roa (hash: 6vmbRe0Gw7jdU6fIKbRaOK9xmSJJHl1pGRS+mY2Td7Y=)
3: RxQknk-i6X3uYtHklAq4xTvLElU.roa (hash: e3Fk8UZszFvxL51DyoJ+zqnCymh1Yk5n+ob0FV7BX9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:84:3b:cc:10:12:80:2f:7d:e0:95:78:3c:5d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Apr 19 05:00:25 2026 GMT
Not After : Apr 20 05:00:25 2026 GMT
Subject: CN=154d9e13bc2e3824cb3536044d2c91b8a1248e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:29:9f:f2:12:1a:f0:10:04:92:9f:14:d2:
45:33:30:c4:53:26:e0:46:70:a4:eb:97:0a:be:c3:
f8:cf:91:76:52:5d:ca:b5:40:dc:74:c1:3b:43:68:
6e:98:33:18:d1:59:ab:01:2d:b1:27:03:1e:4b:36:
f2:f7:00:05:bf:f2:e4:e0:ac:25:0d:04:eb:1a:73:
4e:b2:f5:7a:29:76:16:b0:2e:81:1a:23:04:c0:5e:
e6:ea:e5:53:73:de:87:4d:04:9c:91:d4:30:4e:9c:
88:2d:c3:ce:2b:cd:8d:90:a3:93:ac:ed:1c:5d:8c:
23:66:ba:ee:29:e7:42:00:ec:1f:da:48:3c:78:91:
ee:05:dc:85:12:a0:1d:79:7b:ec:7a:e0:97:c2:19:
da:c9:60:1e:81:ee:b6:8a:36:28:c1:65:60:14:4a:
84:59:a7:53:a3:2f:9b:db:54:39:59:c5:ad:a7:1e:
5e:fd:d3:12:76:0e:a0:8e:0f:5d:52:9c:92:08:10:
6f:6c:eb:8e:d2:c3:9d:04:2f:8e:d4:df:33:15:4f:
ad:a1:3f:a9:e0:98:da:69:89:7c:e2:ba:44:e5:24:
a8:a5:86:97:1d:3d:90:cb:2d:6b:56:7b:77:6a:99:
b8:ee:ea:35:0f:4b:54:84:ae:72:72:b0:76:92:b4:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4D:9E:13:BC:2E:38:24:CB:35:36:04:4D:2C:91:B8:A1:24:8E:0F
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:61:d5:5f:b8:82:f9:c0:63:cd:42:bf:4c:e6:5e:f4:92:66:
3b:8c:c1:f1:e6:45:b1:93:62:17:80:d4:f1:26:2e:79:fa:d2:
3e:37:72:4d:63:ed:1a:00:63:2f:c9:eb:71:64:43:57:1a:80:
48:a8:d1:49:fb:ee:41:b0:dd:15:58:eb:5e:f4:55:ba:65:83:
04:53:f4:1c:46:77:d7:d0:b8:aa:ff:be:ba:c0:a3:45:5b:bc:
31:7b:b1:b1:c6:8e:0b:2e:c2:1f:52:37:25:da:43:a3:ab:fa:
24:cf:3d:d6:3a:80:4b:b2:71:c3:9d:6c:d1:af:18:7a:be:5b:
9e:a4:6d:d7:36:dc:23:6a:54:a0:76:a1:21:50:3c:d9:00:08:
de:d0:a2:99:04:c6:07:a8:d3:a9:4d:3c:b5:39:de:74:6e:d1:
31:49:79:f2:9c:8e:70:3a:50:f5:75:af:8d:d4:62:e3:44:e3:
4d:f1:dc:23:7d:97:41:81:0c:2c:a7:af:0d:c7:0b:37:8b:15:
43:20:0a:5c:c1:21:fb:e3:0a:64:0b:ae:a5:0c:1c:bd:d9:1b:
2b:a5:a0:22:1f:ee:02:c5:a7:44:fb:d4:8e:99:33:ef:a5:23:
58:63:c0:1d:bf:29:96:0a:0b:b9:33:2e:8f:64:e7:19:8e:41:
ed:2b:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:11:19 2026 by rpki-client