Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier: gN3rOk/WVPi6k3DhNjaZ6eW2DL6OIpsrZb6vR6MI0nc=
Subject key identifier: C6:09:76:5E:EE:00:32:A4:1E:81:2D:B0:EA:D2:EC:B8:CE:3B:9B:4F
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 019D9BBEC1F547D3B994C5897553D87C6CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number: 1133
Signing time: Fri 17 Apr 2026 14:01:03 +0000
Manifest this update: Fri 17 Apr 2026 14:01:03 +0000
Manifest next update: Sat 18 Apr 2026 14:01:03 +0000
Files and hashes: 1: KaaC6M28k9adFlDm0sQNkvGUIIw.roa (hash: 2H0fCcqXWjgAUaS5LPxTPaJ+kJQB9vSGvCYiGO5pfEU=)
2: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: Uj0w2nqLFovNeufMy38s83OkbCpA/oMCR0f4ePon9/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:c1:f5:47:d3:b9:94:c5:89:75:53:d8:7c:6c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: Apr 17 14:01:03 2026 GMT
Not After : Apr 18 14:01:03 2026 GMT
Subject: CN=c609765eee0032a41e812db0ead2ecb8ce3b9b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:38:70:8a:e4:e0:a0:26:79:dc:45:ad:6c:
53:e7:36:81:d3:a0:08:12:e0:d3:59:77:72:5f:4a:
95:97:ba:7f:b3:c3:62:e1:b8:d3:31:0b:79:7e:f2:
1c:65:27:59:ce:b6:35:46:b2:c2:26:8e:41:56:7a:
3a:5e:7f:a5:62:6a:60:8d:78:f3:de:1a:3b:1f:a9:
ed:c0:30:91:58:93:91:d7:ed:4d:fe:8d:e7:13:7b:
9d:89:8e:b9:5c:28:cf:e2:6a:5e:cf:af:2f:4a:76:
63:73:b5:d1:53:55:37:e9:2e:2c:7b:a1:67:c2:96:
88:71:5b:38:20:f8:c0:1b:9b:5e:e4:48:ed:56:08:
74:99:cb:d1:4f:cd:d6:c2:7f:a8:89:88:8d:8d:a2:
8e:c3:11:3c:55:78:83:86:62:06:45:4f:5e:50:e2:
6f:09:09:7d:51:12:62:35:99:27:5f:9c:a0:00:47:
ab:e5:53:60:d3:c1:10:5f:f4:92:84:ea:d5:b9:73:
22:76:bd:18:6e:49:38:2c:15:29:20:8f:87:94:dc:
01:9e:fb:3d:c3:f0:a2:17:4e:8a:4e:9b:40:48:03:
22:00:ed:9b:c2:c4:f9:11:b1:4a:cf:3a:55:44:df:
35:3c:e4:59:62:bb:33:a5:f2:fa:d9:63:40:bc:45:
ba:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:09:76:5E:EE:00:32:A4:1E:81:2D:B0:EA:D2:EC:B8:CE:3B:9B:4F
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:79:bc:b3:7e:cf:14:d5:6c:83:07:e2:01:35:09:d3:8f:55:
04:ac:8b:89:cd:ec:88:ac:d8:04:82:04:31:4a:3d:4e:4b:2f:
c9:87:bd:ff:4d:88:82:9e:7b:1c:be:42:52:7f:b8:7b:20:3c:
85:93:37:d5:ba:cc:d3:b2:bc:bc:77:ec:40:b7:1e:64:20:80:
5e:ec:13:ac:ea:9f:50:2b:3e:22:7e:7f:a8:c1:fa:85:48:fe:
0e:2f:cd:ed:62:21:65:77:a9:68:f4:a9:11:53:f9:61:97:14:
27:4b:97:1c:02:23:8f:67:26:15:f4:40:84:fd:cc:15:f6:06:
fd:f7:99:0f:af:88:19:cf:71:b4:ce:d1:8e:7c:13:f4:a1:ce:
24:94:c3:df:2e:dc:c0:00:90:0c:5b:a8:86:1f:d3:c8:0c:8c:
5c:83:a3:4c:37:81:c4:49:ec:91:ab:f4:e1:02:d4:4c:d0:98:
16:a6:6e:09:cc:95:0c:17:12:f8:57:9a:e6:0f:4f:1b:13:57:
95:5b:ad:84:bb:68:bd:6d:02:23:6f:67:0f:1f:6e:dc:bb:e5:
b5:14:88:85:ee:a7:15:0b:a6:2c:c0:df:c2:fc:62:b5:0a:7f:
2f:52:6a:dc:9d:24:91:40:7b:52:60:fc:2e:86:8f:29:20:19:
9e:24:9a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:40:58 2026 by rpki-client