Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File: 41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier: 0Atwahea6yPf3KX00haxEZPxQIEMUePweARzFxgiG/Q=
Subject key identifier: C4:BB:BE:74:59:19:9C:7E:F5:6A:23:FF:84:8D:47:0F:1E:30:78:A5
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial: 019D9C2D328BB981F33FB47D33AD0EB928D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number: 0CD2
Signing time: Fri 17 Apr 2026 16:01:40 +0000
Manifest this update: Fri 17 Apr 2026 16:01:40 +0000
Manifest next update: Sat 18 Apr 2026 16:01:40 +0000
Files and hashes: 1: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: OMTllKdZ3hnJ8jkxh9/Orb12uKftNP7lDeg+T5+AluQ=)
2: VrD_z9WUzqoxuEFUeLh8zCfscNM.roa (hash: RBMbhE4e93nDrWwDckaO3Ac6YKsGDngzavc4attXd7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:32:8b:b9:81:f3:3f:b4:7d:33:ad:0e:b9:28:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Validity
Not Before: Apr 17 16:01:40 2026 GMT
Not After : Apr 18 16:01:40 2026 GMT
Subject: CN=c4bbbe7459199c7ef56a23ff848d470f1e3078a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:68:3e:eb:39:64:61:e1:38:03:87:0e:06:
2a:f9:69:91:74:b9:a3:7e:71:32:7b:a3:74:79:3c:
e3:c4:04:50:62:0a:15:2f:af:75:3c:e3:13:83:a2:
e3:21:88:48:7e:0c:0c:b0:9a:51:ed:13:99:b4:bb:
69:b5:0b:41:93:e7:d5:0c:4c:51:a6:80:69:ee:88:
90:8c:86:37:00:52:b7:44:2c:38:98:2c:3f:d5:0d:
11:e6:3e:29:bc:b1:1b:06:ff:32:ce:b4:31:49:08:
fb:82:f6:a6:6a:cd:40:0b:42:fc:ab:b7:a6:54:30:
57:58:72:09:4e:81:77:d5:20:23:15:87:c1:73:2d:
cd:fa:8b:8b:65:2d:82:0c:f1:2e:22:0f:06:63:9d:
7c:16:d9:79:14:34:7e:7e:6f:f8:2f:01:7a:7c:eb:
24:4e:dd:10:2a:fb:3a:3a:7d:85:e2:ad:ce:ab:aa:
4e:38:fe:29:78:a0:43:b1:6a:1f:e6:9d:6b:45:38:
7b:a3:71:89:09:5c:36:35:e3:d0:87:fe:8b:60:fd:
1d:1a:ff:96:ce:3a:b9:05:5d:c8:b1:a3:9e:25:b7:
42:e5:b0:00:52:82:0c:74:ab:f9:db:26:cc:b7:c9:
7c:b5:53:8f:50:96:28:fb:9b:96:48:2d:05:12:84:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BB:BE:74:59:19:9C:7E:F5:6A:23:FF:84:8D:47:0F:1E:30:78:A5
X509v3 Authority Key Identifier:
keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:80:4c:3f:23:f2:15:7b:64:f6:0f:16:88:53:88:40:0d:db:
dd:fb:9b:c2:82:b1:3b:45:fd:63:aa:3c:40:e1:68:32:73:36:
1d:7c:bd:eb:19:ef:62:e7:9c:15:03:04:3e:58:b4:81:c0:47:
1d:32:c0:fd:92:17:c8:af:c1:25:3a:31:86:d1:6f:81:6c:e8:
c0:8e:19:08:dc:d8:9c:31:4d:d5:fc:fd:1a:e9:0b:56:a2:77:
09:96:00:99:64:7e:ea:b9:48:43:3b:58:43:05:9c:5d:c0:7a:
89:de:70:3e:0a:80:4d:40:9d:e0:ca:66:50:c9:64:80:bc:e8:
4d:69:79:f2:9e:f5:44:66:65:e1:90:d5:ef:37:40:a5:10:20:
4f:0e:5f:77:3a:2a:74:55:e9:e5:dd:ae:96:00:15:17:89:a3:
6e:dc:81:f6:0c:2a:bf:ca:55:37:1f:0f:a2:64:99:a7:07:72:
02:c4:ee:bf:36:b5:2e:2e:8a:75:8d:95:13:f9:2f:f1:a1:8a:
8e:f0:2d:7d:2d:00:99:ba:dd:cb:ae:81:d0:0f:a7:68:d7:0a:
26:24:47:63:ee:30:cc:24:20:4d:10:7b:70:37:56:dc:91:0e:
97:4e:86:d7:ed:07:8d:0a:81:13:36:f3:55:14:eb:f9:9d:aa:
34:16:ee:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:33:46 2026 by rpki-client