Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
File: 04G3AXBRkLnOnRsYRTU4TnHKMWU.mft (raw, json)
Hash identifier: M8HREAy4BcBujcwIyLdRipQ4eo4VGQsz1VbTFUsHy3Q=
Subject key identifier: EE:3C:8A:C8:6C:3E:25:8F:08:90:E9:5C:96:80:39:A4:BF:37:CD:6E
Authority key identifier: D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
Certificate issuer: /CN=d381b701705190b9ce9d1b184535384e71ca3165
Certificate serial: 019D98F529DC401895C6670284885A5B2A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 01:01:37 +0000
Manifest this update: Fri 17 Apr 2026 01:01:37 +0000
Manifest next update: Sat 18 Apr 2026 01:01:37 +0000
Files and hashes: 1: 04G3AXBRkLnOnRsYRTU4TnHKMWU.crl (hash: 2hEKvU3dtmEisdSkyoxCP9z/vPsAX2bMYWgpVcydx9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:29:dc:40:18:95:c6:67:02:84:88:5a:5b:2a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d381b701705190b9ce9d1b184535384e71ca3165
Validity
Not Before: Apr 17 01:01:37 2026 GMT
Not After : Apr 18 01:01:37 2026 GMT
Subject: CN=ee3c8ac86c3e258f0890e95c968039a4bf37cd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1a:24:b9:e2:21:15:d4:22:35:9d:47:66:11:
e2:4c:06:bb:2e:db:20:bd:73:13:e0:a0:56:69:6b:
db:aa:9c:30:5a:af:e9:83:cc:69:c7:24:0d:cd:9a:
77:b4:72:6c:bb:61:74:26:c1:ad:70:ce:9d:71:51:
40:d4:49:73:be:a5:63:c0:2c:73:45:0e:ff:4b:24:
1e:61:9f:01:57:90:09:33:c0:4c:5d:ec:0f:db:32:
ef:41:30:2a:db:94:70:5a:00:b1:e8:21:b0:6e:e6:
55:3c:a2:70:a6:25:6c:f7:41:07:11:c4:da:d5:93:
34:a3:69:82:cc:14:ab:a3:8e:7a:d5:aa:5d:45:86:
0c:9b:4b:b8:48:c5:f3:74:4b:47:d5:51:61:58:e9:
3e:c0:39:a8:1b:4e:eb:5d:55:df:f7:25:8c:3e:58:
03:0d:52:18:b1:31:e8:4c:ff:b7:d2:25:64:72:90:
80:6c:21:f6:17:6c:2f:c2:ab:c0:4d:0b:71:26:ef:
5e:9a:4d:2c:ef:ee:ea:1d:4b:49:32:e2:03:73:9d:
ce:43:8f:3e:d8:ab:99:34:61:e6:7a:cf:60:3f:93:
f6:9c:47:5b:07:1c:ce:8d:f8:dd:e3:6d:b7:e3:17:
bc:a6:09:8f:1a:a1:8b:ea:e0:b7:92:87:ac:b7:64:
9d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3C:8A:C8:6C:3E:25:8F:08:90:E9:5C:96:80:39:A4:BF:37:CD:6E
X509v3 Authority Key Identifier:
keyid:D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e6:7d:27:1b:a4:af:6b:49:4b:3a:8e:2f:60:da:8f:09:82:
17:c2:1e:ce:b8:4c:3a:bf:d8:af:ae:e8:23:fb:64:10:a5:5c:
dc:ac:9d:d7:04:03:a2:14:63:5d:81:c3:54:64:bf:b3:c8:f9:
df:4b:0a:e7:e5:76:71:38:96:fa:82:ee:42:74:4f:75:56:50:
fa:6c:64:cf:a8:0f:e5:43:b9:d1:96:0d:2d:02:a4:a5:04:1a:
9d:4a:ac:b0:c1:cb:3e:64:79:62:ef:41:c9:06:76:5b:c8:9c:
99:0a:21:04:c7:ec:be:56:4c:48:26:c0:f9:22:20:39:0b:25:
47:6c:83:14:0b:b5:d1:b5:57:76:5a:d0:a3:70:dc:db:a9:ee:
08:cc:aa:d9:32:23:da:d8:05:c8:5b:d4:cd:0b:6f:79:1c:49:
72:0a:37:79:a2:46:7d:4d:0d:ab:e2:72:c1:da:82:4a:f2:60:
18:df:e8:ae:26:9b:ca:34:6e:48:a6:9e:fe:92:f7:d6:fc:6f:
a8:8f:26:a8:28:89:2a:43:66:85:36:e0:7e:7d:b8:79:02:04:
72:69:af:a9:44:95:66:7b:03:9d:33:3b:40:2e:49:f3:c1:f7:
0f:a4:bb:a1:e8:38:20:11:a7:d4:bb:4a:a7:a7:7d:df:2e:d4:
5f:48:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:33:55 2026 by rpki-client