Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json)
Hash identifier: lIBcQUgUUASbQzaAXOXtnRhFMtKywAme/Gkim5fMJSM=
Subject key identifier: 61:C2:72:63:1F:BC:38:C5:89:B6:D4:A9:67:6C:6A:DD:D5:10:00:46
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 019D99627C96D91D72855D983B5E3B1820E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 03:01:01 +0000
Manifest this update: Fri 17 Apr 2026 03:01:01 +0000
Manifest next update: Sat 18 Apr 2026 03:01:01 +0000
Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: UASahQi+mrcCiqoH0jHMPWUtBustuU5N3hiC3XvZlvU=)
2: CTp1GS2fYaQIruu9tWpwYU6UL5U.roa (hash: 1woVFgn9dNEGbuwWBJn4MG4ChUl6MAOmb6s5dU16yL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:7c:96:d9:1d:72:85:5d:98:3b:5e:3b:18:20:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Apr 17 03:01:01 2026 GMT
Not After : Apr 18 03:01:01 2026 GMT
Subject: CN=61c272631fbc38c589b6d4a9676c6addd5100046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ed:36:05:8c:59:e4:06:4f:6d:78:8c:42:6a:
78:6c:57:01:20:e6:5b:b5:39:c1:cf:a7:b6:73:3d:
cb:7b:07:65:a9:e9:ad:40:5c:1e:45:0c:d5:a2:1e:
0a:9b:a1:c9:39:d1:62:90:67:6e:80:54:81:17:e4:
a1:66:01:b0:39:89:de:82:26:1d:c3:79:28:9e:36:
93:9d:a6:7e:4b:8b:31:9a:5f:a4:84:d6:65:6c:a6:
5d:72:6e:34:16:04:7b:8d:2c:b4:d8:21:63:07:5e:
c1:11:9a:7c:2f:b4:dc:19:a9:17:15:fb:80:9d:f7:
ab:04:69:2e:de:90:0a:9c:d7:93:18:c5:e4:0a:72:
d5:91:81:df:8a:df:a9:12:c4:a3:e2:8a:23:8e:2a:
62:8a:c9:9c:2e:1c:e2:5e:a9:b7:4c:f1:70:0a:86:
8f:a1:33:66:c6:6f:55:e9:0c:25:1f:d2:d4:90:9c:
89:ba:b5:05:c2:13:e5:c1:a2:40:5b:b1:9a:fd:89:
b4:1d:86:fe:1d:46:87:a3:35:23:c0:c2:10:a9:eb:
1e:c0:f2:4c:a0:61:50:dd:87:08:ea:35:2c:24:5c:
6c:66:d0:e4:0c:ca:82:d9:eb:a7:17:8b:0f:0e:e3:
36:ca:be:77:fb:1a:89:bb:d5:b3:c5:81:a7:8f:ba:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C2:72:63:1F:BC:38:C5:89:B6:D4:A9:67:6C:6A:DD:D5:10:00:46
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:da:fa:a5:66:99:60:be:96:2f:27:77:f0:bd:00:d6:fb:c6:
fd:26:33:2e:c4:49:54:19:81:5d:2e:73:98:65:81:22:28:70:
bf:0c:ce:f9:39:bd:f8:f0:db:56:72:c6:45:36:40:88:6f:8f:
c9:ab:d9:f5:f1:45:69:3f:91:aa:c0:97:ec:aa:ed:9f:78:da:
4f:9b:29:ec:8e:f9:d8:d9:1b:20:45:5c:3e:79:9a:6a:9e:38:
98:5c:41:7e:71:ff:7d:26:ae:6a:df:cb:66:73:99:b8:24:f2:
3f:4b:4a:01:37:bd:03:8c:28:cf:97:d0:70:0a:8b:3a:5d:36:
b2:18:b1:30:65:9c:10:9f:b8:1d:79:b6:19:b4:8e:ba:89:df:
f2:aa:33:fb:22:14:8d:2c:9a:88:79:53:6d:d0:c5:8c:37:a1:
10:6d:f5:b3:77:a8:56:b9:03:0e:07:15:a6:f8:44:1f:0f:24:
c5:2a:ae:b6:fc:20:97:02:cb:06:66:b2:0f:b0:57:44:b2:c0:
cc:bc:6c:52:ef:80:1d:73:00:a8:f1:19:6c:1d:95:90:d7:90:
7e:49:98:c5:bf:83:f4:e4:1a:41:fd:66:5a:ab:d2:4d:d3:e7:
58:00:4c:c9:05:d2:74:a2:56:35:7a:c5:4d:4d:80:ad:b8:07:
f9:bc:89:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:04 2026 by rpki-client