
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
File: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft (raw, json)
Hash identifier: OOkm8rnDJirMpDUk8lnHq2oalj8W5nn4kQvXB47KVSY=
Subject key identifier: DC:A9:B2:CA:84:E6:BA:0A:42:FA:01:2D:87:33:4D:53:F9:AB:B9:02
Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Certificate serial: 019D97E17442555329C4F4994B68CCA79A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
Manifest number: 0F09
Signing time: Thu 16 Apr 2026 20:00:28 +0000
Manifest this update: Thu 16 Apr 2026 20:00:28 +0000
Manifest next update: Fri 17 Apr 2026 20:00:28 +0000
Files and hashes: 1: 0gBlJTwbURvMna08HGkpbxF3GuY.roa (hash: +AHpd/2s8j+dmg3ibj8zF8ms1DXXH4Z/pjBe0gUwZIo=)
2: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl (hash: +Y4cdIp3k/iOy6r1/Xuhf75u4eMJKWiht/oPvjzT9Ik=)
3: olTnJZOeBxSGSHdFIbwThqvRrwM.roa (hash: 7ZVXpb1BUMxPZ9Jc/FGOlyUwvnj11IZVQ1xQChFmpVk=)
4: v41zPODCDOKyhQh2VYGpMRTzGHg.roa (hash: 9WUhwKCjU+8D4DCY2CpCRa3hsSY6UWz+kGJAJ8Vl43I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:74:42:55:53:29:c4:f4:99:4b:68:cc:a7:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Validity
Not Before: Apr 16 20:00:28 2026 GMT
Not After : Apr 17 20:00:28 2026 GMT
Subject: CN=dca9b2ca84e6ba0a42fa012d87334d53f9abb902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:19:91:71:a9:7e:44:9d:b5:71:ea:09:14:b0:
a1:6e:67:1f:f5:67:ff:fc:9b:14:48:20:76:c3:2d:
6e:3e:69:3d:53:43:83:0c:a7:11:08:38:b2:a9:ea:
38:ee:2c:df:89:a4:25:84:a8:3c:dd:04:29:11:d0:
78:91:c1:d2:52:14:f0:eb:f6:38:72:0c:8f:aa:2f:
08:11:e5:25:7a:19:e8:38:14:3d:95:63:a0:4c:80:
33:de:9d:e2:fa:18:dd:aa:d5:40:ad:3d:51:a5:77:
89:1d:87:20:36:23:05:0f:01:7a:fc:f3:bc:12:2c:
12:3d:57:bc:a7:64:be:07:05:58:0b:c0:47:28:44:
18:91:12:51:ec:3f:1f:b9:71:11:2a:97:b6:cb:a4:
42:09:e4:56:16:45:1a:7a:fd:88:be:b9:72:5d:5c:
86:db:24:72:e4:5c:19:12:7f:48:cd:5a:80:4a:6e:
dd:a6:e4:cf:38:7e:76:74:1f:31:74:b9:3c:6b:3d:
36:f7:e8:20:2d:74:b1:9b:07:73:db:98:a7:67:54:
f7:14:7d:4a:c1:8f:38:cd:fe:5d:d1:0b:87:a3:3b:
ae:6d:20:ba:82:32:4b:c8:96:6a:d5:e6:e7:ff:3e:
73:32:79:82:0d:66:1f:d7:81:b6:84:33:b6:f5:7f:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A9:B2:CA:84:E6:BA:0A:42:FA:01:2D:87:33:4D:53:F9:AB:B9:02
X509v3 Authority Key Identifier:
keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2b:cf:b0:5d:b8:39:50:ff:c5:81:50:34:c8:d4:38:b8:f0:
d2:e1:36:6e:3b:4e:ea:37:04:ce:8a:6f:65:09:cd:07:95:06:
24:17:b6:3d:81:38:dc:ed:0b:47:7f:bc:76:7a:3b:eb:1c:ef:
cd:2e:4c:ae:e1:4f:be:3a:fa:f8:97:79:f4:30:85:b8:26:c3:
b0:e2:2d:63:6e:9e:98:08:4b:bf:64:7d:e5:12:00:91:d4:be:
31:d6:8b:2b:4e:61:43:7b:27:92:03:86:ef:e5:46:54:83:a6:
0d:d1:2a:6b:04:d0:4b:e5:6b:6b:78:94:0a:a6:5d:31:68:b0:
95:e8:0b:27:93:cb:82:f2:f1:0d:06:b7:94:f7:5a:66:44:83:
e2:79:6a:27:67:31:09:e9:fa:46:ad:ce:c0:10:38:31:44:32:
cb:3a:39:f3:ff:ee:7c:ed:ea:4f:47:12:77:ab:bf:d4:16:55:
b0:a9:0e:42:74:e4:bf:1a:2b:43:dc:61:f0:80:ff:9d:27:b0:
3b:83:39:11:a4:85:0f:1b:27:4a:15:f1:22:a5:7a:3c:5f:f8:
e7:9f:ef:0f:da:3a:69:35:aa:55:a2:87:32:86:1b:77:75:10:
65:41:ba:7a:f6:e4:95:8b:56:69:f8:11:46:8e:51:fd:0e:f1:
53:91:ee:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:27:15 2026 by rpki-client