Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
File: 4rWwjcQz-On3dyfLUfa6JL3V85o.mft (raw, json)
Hash identifier: 3mknhCOjRwG8dl8vna9lMdkEbB3AHKAxQh98UxM8ZHc=
Subject key identifier: 9A:48:1B:01:51:F7:65:C5:1E:1F:1A:0A:A9:9D:C9:8D:4A:52:00:4B
Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Certificate issuer: /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Certificate serial: 019D9A3E2D8A15D3A0D030DEDE1265664471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
Manifest number: 08DC
Signing time: Fri 17 Apr 2026 07:00:59 +0000
Manifest this update: Fri 17 Apr 2026 07:00:59 +0000
Manifest next update: Sat 18 Apr 2026 07:00:59 +0000
Files and hashes: 1: 4rWwjcQz-On3dyfLUfa6JL3V85o.crl (hash: z0ZA9n0UrTqpXjV7ui569Z9tyFqXKn8o/hhVv+x5xx4=)
2: BxZPTQDdLKKz_KzmvAmu63Br_30.roa (hash: RJzmMfXa1i3UOXt5apo9yzIAminXwO5ap7oBJzJBEJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:2d:8a:15:d3:a0:d0:30:de:de:12:65:66:44:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Validity
Not Before: Apr 17 07:00:59 2026 GMT
Not After : Apr 18 07:00:59 2026 GMT
Subject: CN=9a481b0151f765c51e1f1a0aa99dc98d4a52004b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:62:04:ed:2a:bc:c8:6f:3a:be:1e:a4:f6:
01:51:27:49:78:ad:cb:cc:cc:b9:0d:3a:2d:7b:32:
20:a9:66:78:fa:9c:d5:16:85:58:65:2b:44:a2:ac:
3c:1a:25:f4:dc:07:8a:e1:bb:31:39:95:9b:c8:a6:
c6:47:e8:91:5d:1f:7f:fc:41:71:bc:d9:60:15:27:
d2:17:5d:6d:5d:6b:6f:0d:58:da:5f:04:13:73:fb:
97:8b:37:7f:dc:6a:3b:74:66:ba:c2:b4:b3:8e:01:
c4:10:ba:d6:a4:5f:1c:7c:a9:69:0a:6f:51:d2:a3:
40:2f:18:fd:a7:7f:e0:c8:cd:2a:83:c4:51:9d:ca:
7d:e8:15:a5:8f:df:62:c0:34:ea:cb:6a:f0:be:48:
2b:93:fe:7d:69:4e:2e:aa:fd:4c:d9:02:18:4f:da:
a5:1a:46:9a:cb:43:90:1c:9e:34:3b:a3:aa:40:4c:
02:b1:65:e3:73:e5:64:64:ff:f5:5f:3b:e0:11:4a:
51:02:b3:57:ec:32:30:60:5e:a5:af:97:a5:49:71:
f1:76:fc:f3:19:88:f7:b8:ed:b9:9e:31:60:ff:1f:
a0:ef:0d:57:ae:5a:c0:ba:d4:41:a8:07:66:f9:9c:
bd:85:ac:d0:c5:89:4a:38:5b:f2:97:fa:49:cf:85:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:48:1B:01:51:F7:65:C5:1E:1F:1A:0A:A9:9D:C9:8D:4A:52:00:4B
X509v3 Authority Key Identifier:
keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b4:38:0a:7d:6a:35:79:74:80:7d:5e:e0:1f:d0:20:20:00:
e6:ef:b1:7e:6a:cd:01:6f:2d:3a:d1:24:70:84:5c:ba:27:43:
94:e5:62:59:54:0e:33:ec:ef:d0:4d:12:74:59:63:ff:28:df:
52:26:0c:a0:6c:e9:5d:45:35:db:a0:3a:f6:bd:68:4d:67:fd:
86:11:a0:fa:66:74:d2:c6:1a:33:c1:da:e7:39:82:e0:b2:ff:
d8:1b:f1:4e:17:4b:f0:23:8e:7f:10:41:5a:99:cb:40:5d:cf:
03:c7:2a:38:19:45:f4:75:e2:88:ef:3f:ec:ba:0a:ae:09:8f:
8c:8a:f4:b8:47:04:07:5a:ec:07:17:64:06:16:de:94:75:62:
66:5b:d5:3a:5c:4d:5e:d6:68:fe:39:04:e1:d0:cf:9b:3a:dc:
56:11:6f:36:fc:27:52:93:30:b1:3a:1d:c9:6e:c8:3d:0a:3b:
c8:39:ec:3a:fa:9f:27:a1:28:4f:88:8d:2a:ad:7d:99:c3:5c:
d1:13:b5:23:53:1e:4e:8c:fb:6d:76:7b:17:00:db:bc:20:1b:
1e:ec:9c:03:f3:f9:18:33:a0:f9:f6:19:5c:fd:d9:f6:88:7b:
a8:39:e0:c1:83:16:3d:4c:fe:8d:d5:ca:e8:ff:64:2b:3d:ed:
86:17:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:42 2026 by rpki-client