Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
File: 4qv2099Tm7fBaE-09GF50NoGsIM.mft (raw, json)
Hash identifier: 2zUtMLOwk1Tjp9Fuj+VfqHz/iQioYmXfUueg+ONQR0M=
Subject key identifier: 27:9B:B1:46:D0:FA:65:88:32:EC:84:18:A3:4E:73:35:18:FF:BF:26
Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
Certificate issuer: /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Certificate serial: 019D992BA10FABB9A0ABAA16C645DD3DB783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
Manifest number: 0FA2
Signing time: Fri 17 Apr 2026 02:01:06 +0000
Manifest this update: Fri 17 Apr 2026 02:01:06 +0000
Manifest next update: Sat 18 Apr 2026 02:01:06 +0000
Files and hashes: 1: 4qv2099Tm7fBaE-09GF50NoGsIM.crl (hash: Ej98bAjen03adMuF10QSZey5dPK4aUMm/rIfCOaHS3A=)
2: GBj2xnkuHNgnAUINodxwL8rUWI8.roa (hash: Hvt6O7hlsMwc4JJYGSfH5m3V5DBbM1bLZ9uAWK2548s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:a1:0f:ab:b9:a0:ab:aa:16:c6:45:dd:3d:b7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Validity
Not Before: Apr 17 02:01:06 2026 GMT
Not After : Apr 18 02:01:06 2026 GMT
Subject: CN=279bb146d0fa658832ec8418a34e733518ffbf26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:02:33:f8:ef:1d:4d:6f:e7:7d:04:af:d7:cd:
fc:f7:13:ab:13:f6:76:0d:91:66:28:a4:f5:b9:72:
f4:15:2a:37:c6:68:46:a0:f2:5b:e8:f2:41:3b:ab:
3c:6f:98:25:a7:d1:af:6d:69:6c:aa:85:fd:a2:d0:
79:01:3d:8a:33:33:30:d2:b6:a2:f1:23:a7:ba:8d:
a3:19:13:69:70:55:9b:6e:5e:e1:56:fa:94:9d:a9:
20:37:1d:7e:72:d5:95:22:df:fc:8e:86:39:ee:ad:
1c:a5:0c:43:c2:ad:cd:98:63:fc:49:29:28:f9:85:
40:c3:44:cc:f4:28:a6:13:98:06:59:38:35:c1:26:
b7:c6:2e:b0:5e:b3:a2:5e:63:eb:dd:c1:18:85:81:
82:e1:dc:c1:8a:a5:f2:e7:a9:cf:ec:8f:e0:ae:01:
b2:a5:f3:4c:fa:4e:1b:f8:5f:6d:b4:12:21:77:c4:
3a:f0:0c:99:75:b6:43:d3:cb:df:35:4e:34:fa:6a:
13:c2:d0:6e:da:9d:91:6c:5c:09:48:c9:ff:fa:69:
d5:2b:da:60:e6:77:65:b2:16:9f:c7:62:76:ca:f1:
99:d9:4a:05:9d:e8:bb:c0:9c:5e:2f:61:15:ce:b8:
6e:6b:8c:62:d6:25:79:b2:6c:df:b1:6e:9a:ac:7a:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9B:B1:46:D0:FA:65:88:32:EC:84:18:A3:4E:73:35:18:FF:BF:26
X509v3 Authority Key Identifier:
keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8e:ca:b8:29:fe:f5:19:ef:c8:8f:2f:4b:ee:44:78:53:e6:
06:03:82:af:08:7c:82:a6:3b:63:a1:85:80:30:7a:28:73:d8:
da:78:2c:8e:10:2b:62:90:bb:64:ae:cd:8c:f0:34:86:bf:72:
10:25:6b:f3:03:dd:59:64:0a:09:fd:dd:55:8d:49:b5:5f:8b:
ad:c5:78:5c:e2:fb:87:2f:f0:ac:60:53:db:19:51:1f:8a:33:
37:0f:b6:85:d1:1d:de:56:6d:94:dc:0f:c9:58:a7:4b:ac:37:
17:a9:c1:c5:a0:cc:81:b6:c0:5f:26:42:f3:fe:43:ca:7b:79:
a9:ab:33:df:58:00:5d:fa:07:3a:19:98:7e:f3:65:bc:91:1a:
a0:d3:9d:4e:cb:76:0d:6c:98:f4:13:2f:6b:88:90:ee:bc:36:
45:e5:e5:df:ac:d4:f2:e1:62:3d:fd:81:a9:6f:f1:89:c0:0e:
3e:97:13:db:3e:cb:fb:37:b4:a5:42:91:8f:13:d6:6c:35:51:
7e:1b:bf:44:bf:f8:2e:95:dc:c3:ac:dc:f8:e3:ae:51:47:f6:
08:ab:26:1b:cc:9f:3d:45:8e:a9:fa:22:ff:52:ca:b5:03:c7:
cc:f3:23:ba:d6:7b:57:94:03:69:9d:7e:46:eb:a9:80:41:d5:
c0:84:81:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:17 2026 by rpki-client