Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
File: mFW4DEXftep6qn3R2O2LFPnB3EU.mft (raw, json)
Hash identifier: yDg5vCBUYKbhuIh3SJjiyVgcZDSR7nlTLbgB4LBeDUI=
Subject key identifier: B4:A6:05:47:06:F0:2E:A6:B4:66:83:C2:54:10:15:5E:DE:5D:1C:13
Authority key identifier: 98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
Certificate issuer: /CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Certificate serial: 019D9D0852A6B9627BC56B18FB9597F421B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
Manifest number: 03AD
Signing time: Fri 17 Apr 2026 20:01:01 +0000
Manifest this update: Fri 17 Apr 2026 20:01:01 +0000
Manifest next update: Sat 18 Apr 2026 20:01:01 +0000
Files and hashes: 1: JdrrzB7a1qH9AHo1hI78HQ9vZMk.roa (hash: GTd8cCkoiW0FGNR73NG1lnLnp97HhBUrrNAzm3q5ilE=)
2: mFW4DEXftep6qn3R2O2LFPnB3EU.crl (hash: BuZXe5sNda4Gmch+M9+eeXJENrTT0DBQ+M3vqVpuqto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:52:a6:b9:62:7b:c5:6b:18:fb:95:97:f4:21:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Validity
Not Before: Apr 17 20:01:01 2026 GMT
Not After : Apr 18 20:01:01 2026 GMT
Subject: CN=b4a6054706f02ea6b46683c25410155ede5d1c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:24:23:62:7a:ac:a4:40:d3:61:5f:77:a8:
61:d7:7c:63:d1:54:a0:5b:dc:a7:1b:a1:e9:16:1e:
97:d7:a0:9a:58:05:63:91:50:57:de:88:6f:be:b2:
9b:45:63:da:e8:34:56:ef:92:ac:50:61:f6:6b:06:
c4:89:48:5b:9c:07:f5:84:31:0a:a8:20:82:34:96:
7c:5c:65:ed:c6:87:dc:3f:7a:43:25:da:85:9f:c8:
14:78:0f:51:c4:9f:a9:38:0a:15:4c:ca:e8:7d:d6:
29:f4:aa:95:eb:0b:b0:fe:0c:2a:2b:7b:6b:19:dd:
73:02:5a:fa:3a:9a:32:29:fb:cd:97:29:f9:37:32:
40:0f:42:3d:b4:5d:a4:bb:62:82:46:97:37:5e:42:
90:d5:69:80:2c:0c:b6:d5:74:a1:bb:fd:66:63:64:
0c:0a:54:20:d9:f3:3f:76:9e:b3:07:ac:f2:2f:5d:
72:74:48:ae:fc:3c:87:43:72:89:51:ae:c8:88:a0:
a4:9f:5c:94:53:70:4a:2f:0c:d3:c9:c4:cd:1b:4f:
31:9f:57:02:c1:39:88:6d:ad:60:d0:f4:54:a7:82:
b1:51:1a:8b:5e:94:d1:d9:f6:c1:dd:00:60:c3:74:
2a:82:5e:2f:12:69:ec:57:c9:15:4c:9f:9e:57:f5:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A6:05:47:06:F0:2E:A6:B4:66:83:C2:54:10:15:5E:DE:5D:1C:13
X509v3 Authority Key Identifier:
keyid:98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bd:94:ab:3e:e6:67:3e:e7:4f:91:e4:e0:3a:74:72:fa:8b:
4c:00:1a:03:ac:21:a3:5a:40:e2:16:3a:c3:ca:97:3d:16:3d:
75:da:e8:16:57:ab:5f:de:a1:2b:1e:87:b3:f2:89:97:4f:38:
42:dd:4c:00:ef:23:89:a0:4d:6d:5a:9d:35:fd:06:d4:2f:e0:
21:2e:44:98:b3:d4:cb:ba:ec:55:21:8e:69:d2:e1:95:7b:9f:
95:df:f8:a8:0c:59:83:a5:ef:b3:d4:b7:df:a4:f1:f4:1e:11:
e5:01:b9:f3:6e:1a:76:7c:1f:30:02:8c:43:e7:9e:18:b1:8b:
d4:d0:43:ad:ef:a3:e2:4f:58:cf:70:9f:85:41:a2:d0:ae:2f:
9c:e6:22:d1:97:a7:cc:5c:02:b5:97:b5:f3:77:5d:29:d9:e1:
e6:90:e6:2e:16:0e:e1:e8:49:42:30:f6:26:cb:ac:f0:2c:08:
47:5a:48:4e:58:e0:a3:ef:48:b8:33:68:c1:13:b4:fa:83:3f:
f7:0a:37:2e:5e:f7:dd:6e:53:5c:1e:35:36:d9:8b:c0:f5:12:
58:a0:d5:c3:49:08:81:62:aa:10:38:c3:47:c7:43:3b:3a:c1:
56:c2:1f:a4:09:37:b1:1d:cc:ad:f6:83:77:9a:e3:86:69:80:
c8:61:79:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:40:10 2026 by rpki-client