Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier: 8rOgmy6jdwzkd1mJLa3q60wtWfHiUX9vEeo5NJJors8=
Subject key identifier: 74:49:9B:AB:3E:0F:CA:4D:2B:A9:4E:81:3C:1C:43:39:79:6B:F3:DF
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 019D98BDA681C9939DDEED87C256C89EA813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number: 06C3
Signing time: Fri 17 Apr 2026 00:00:58 +0000
Manifest this update: Fri 17 Apr 2026 00:00:58 +0000
Manifest next update: Sat 18 Apr 2026 00:00:58 +0000
Files and hashes: 1: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: BY3NwcBcL651KXSax2BwqsUO3ubYYSIE0DJOY0kjKek=)
2: Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa (hash: imyx+MqhErllzPgURUbLOjPqBlQ0hxwFitun79GI6bQ=)
3: pIH-PyJ-S7KYRBMhx3HzyVyBgpM.roa (hash: 1cLs+Wdw+wnP8h4XUUBLHG3PCH085TENzzZDNYgitoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:a6:81:c9:93:9d:de:ed:87:c2:56:c8:9e:a8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: Apr 17 00:00:58 2026 GMT
Not After : Apr 18 00:00:58 2026 GMT
Subject: CN=74499bab3e0fca4d2ba94e813c1c4339796bf3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:e0:a1:8f:c7:ac:a2:6d:10:24:9a:40:5f:
99:32:43:b0:df:ae:c2:1d:20:03:92:6c:dd:7a:ca:
f6:7a:bc:32:9b:19:5c:f2:16:7c:cd:96:68:15:2f:
b2:d1:7a:82:09:c3:a9:e5:e2:93:04:0e:c6:2d:e2:
21:7f:d8:27:e0:18:2a:a8:c2:f4:07:ce:b1:e4:94:
ff:8c:94:4f:3a:50:2a:cd:85:2a:03:b0:7c:b1:57:
53:62:c9:f5:7b:9f:30:42:78:6b:e6:c8:5b:8c:49:
6d:da:eb:12:dd:ab:8c:47:31:21:b8:a2:f5:0d:68:
a5:66:29:c6:65:ce:cd:96:dd:84:35:aa:ef:12:3a:
e8:ce:84:92:15:d1:09:4b:b8:ef:24:46:75:d0:f6:
b0:ad:d3:d8:37:19:12:d5:0b:f1:0c:84:b5:13:b8:
d9:b8:92:50:65:1f:2d:2a:54:bb:7a:a5:98:7d:ca:
67:94:3f:ac:6c:f4:00:d3:d3:2c:0d:de:79:44:30:
65:68:57:95:80:4b:a3:41:d7:f9:42:20:7f:f9:77:
71:bb:ed:64:bb:12:64:4d:d6:04:37:d4:c9:2f:9c:
12:7f:38:de:46:7b:da:0f:0e:1b:7a:ae:5b:74:2c:
4f:ee:6a:0e:57:28:b9:b6:23:eb:a3:78:8c:79:14:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:49:9B:AB:3E:0F:CA:4D:2B:A9:4E:81:3C:1C:43:39:79:6B:F3:DF
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:54:7c:db:ac:2c:8c:e4:9f:45:0d:75:0f:d7:7c:95:33:35:
23:73:05:fa:2d:5c:18:5d:4b:ae:55:0f:5b:a1:b9:7f:8a:66:
9f:79:fe:71:b1:bb:b3:13:bc:fe:71:c2:1a:5b:8e:1e:7e:33:
87:e1:9a:70:a5:54:1e:df:9f:6e:da:17:c8:2d:c7:78:b3:ae:
69:b4:60:14:ab:e7:86:81:94:dc:21:a7:d3:53:b5:c9:94:a8:
5b:a8:af:70:6b:65:e9:6b:34:e1:9d:1a:10:2a:d7:e2:04:61:
41:c1:55:36:a8:d5:1d:91:0a:9c:84:01:3b:4a:37:23:56:d3:
ab:00:e5:3e:fe:37:2f:8d:87:bc:0b:8d:58:a6:d6:d1:c0:5d:
a9:21:84:39:13:d5:7e:3c:9b:4b:5f:43:41:93:76:be:70:a7:
86:ab:61:c2:f5:24:f0:6b:cd:28:34:ac:d5:58:92:53:04:7d:
c1:f0:92:3d:e1:81:c6:68:1b:59:d3:42:5d:a6:68:80:0c:e6:
26:ab:c5:d0:d1:25:12:2a:ec:e6:48:7a:97:de:b9:4c:93:3a:
b7:ee:3c:de:c1:4c:c7:ed:d1:73:d6:b3:4d:40:e7:99:89:83:
43:89:18:de:20:6b:4f:84:bf:d3:32:b0:47:98:94:6d:99:11:
fa:f5:b9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:12:16 2026 by rpki-client