Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
File: 4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json)
Hash identifier: zq9VParh6TEfzrS1Rl+ed87O26kkZsQINSABFhTSxQ4=
Subject key identifier: 02:C9:E4:E1:7F:EB:A4:0E:98:11:70:05:5B:34:33:B4:5F:8E:D2:19
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Certificate issuer: /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial: 019D9B1A181F07A5E3E8364450A0866A5EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 11:01:11 +0000
Manifest this update: Fri 17 Apr 2026 11:01:11 +0000
Manifest next update: Sat 18 Apr 2026 11:01:11 +0000
Files and hashes: 1: 1-ZObGXZbr8QMqAx61fUCBd3oEIk.roa (hash: mNfBmy+QZavj44C/mg50P1ETt/knXxq4fEIaA8TAW1A=)
2: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: V5y8XimaIUqbXxWCTT1AFLjBpjhkkZASn1gdCdvn27I=)
3: 5aSu5rDgohcAcFRBlVeL4KQf-Bc.roa (hash: TBrAPV4bOwpXI3ikK/+R0NLpPd2CyHMsQiSsoHb0Hng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:18:1f:07:a5:e3:e8:36:44:50:a0:86:6a:5e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Validity
Not Before: Apr 17 11:01:11 2026 GMT
Not After : Apr 18 11:01:11 2026 GMT
Subject: CN=02c9e4e17feba40e981170055b3433b45f8ed219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:f1:64:6e:4d:53:c5:ee:2c:98:31:1a:2a:
c6:39:47:2b:dc:f2:d8:93:41:48:79:36:6e:0c:fd:
e9:9f:ad:7b:da:f3:65:c9:ff:e2:c7:c2:c4:8b:3e:
76:64:30:fe:5e:23:87:02:ad:1c:69:76:35:02:30:
20:53:70:89:f2:a0:fd:b9:ed:27:fa:5b:59:94:e1:
80:34:e3:81:88:5c:05:03:d1:8e:ca:e0:0b:27:58:
0a:6d:03:2f:00:5c:74:de:f2:f0:cb:d6:86:32:45:
a4:e5:df:d1:6b:98:f1:b0:d2:b7:bf:e2:9c:27:d3:
19:29:b5:a5:96:96:8c:ac:d3:95:d7:44:b5:25:14:
d5:af:64:18:10:0d:57:18:48:0b:5b:e0:e0:83:23:
18:68:53:d1:ae:ce:d5:04:5d:6a:1b:d2:1b:f9:0c:
dd:cb:5c:23:41:65:e5:ee:53:8e:d3:e9:5b:5a:3b:
41:32:c5:b5:0f:16:4e:64:d7:b9:c4:5b:eb:76:96:
ea:b5:71:28:d0:f8:9e:db:66:6d:b9:c4:d9:c3:a2:
4e:19:9a:a3:09:70:50:1c:c4:7d:f3:1d:ca:15:d1:
82:75:6d:6c:02:a7:4d:12:19:c7:bf:92:59:25:d0:
0e:b7:a5:0c:af:1d:2c:42:59:ef:f3:89:94:31:41:
72:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C9:E4:E1:7F:EB:A4:0E:98:11:70:05:5B:34:33:B4:5F:8E:D2:19
X509v3 Authority Key Identifier:
keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:56:12:4d:f6:b6:40:1a:c2:89:50:cc:3b:f4:0e:41:bb:76:
2c:d5:bb:d9:37:d2:be:8e:3e:8f:cd:f0:b6:1c:57:85:16:e6:
35:71:f2:f8:1b:8f:cb:e1:e4:38:24:19:e4:84:95:28:f7:90:
fe:19:ba:86:20:f8:7c:89:6b:04:14:3c:9a:8c:cc:e7:c0:36:
85:52:b0:f1:1f:c5:e7:10:41:e1:2b:34:5b:93:3d:dc:f8:36:
b1:b9:40:97:03:f4:b3:62:1a:53:01:9f:5f:be:ef:89:64:9d:
01:89:3f:f7:9f:13:c5:de:87:09:d5:0a:b8:f2:b5:9b:77:21:
12:ad:ac:c1:de:01:d3:7e:7d:45:a2:cd:4b:07:ff:a0:46:a5:
6b:25:10:71:46:3e:02:19:6c:31:a1:1e:17:fa:06:5b:41:59:
dd:ba:3d:8b:34:48:c3:f7:72:63:18:b4:f4:2e:a4:f0:6c:df:
75:c3:a9:1c:cf:1a:e1:f5:a5:81:49:9a:ef:d8:3e:48:e4:23:
fd:33:33:a3:9b:ab:36:51:7b:60:ad:79:99:34:ac:01:35:3c:
ed:20:0c:49:89:f9:d8:48:cc:b7:3f:b9:3e:12:ea:7f:e9:cb:
95:e6:d7:b1:4c:44:0c:80:09:4c:46:96:3c:ec:c5:e8:0b:51:
20:8e:7d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:03 2026 by rpki-client