Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
File: 4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json)
Hash identifier: QOdGKV46J0UBwspTzqUpVf+ZhVcIiYQVQNhVjIX57yU=
Subject key identifier: AB:40:15:27:F2:A1:EE:36:A6:3F:84:A9:DD:B8:E8:8E:AD:D6:60:0A
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial: 019D988687B5CD9B28F680BDA8F8B7EEB3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
Manifest number: 0661
Signing time: Thu 16 Apr 2026 23:00:46 +0000
Manifest this update: Thu 16 Apr 2026 23:00:46 +0000
Manifest next update: Fri 17 Apr 2026 23:00:46 +0000
Files and hashes: 1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: FH3Y7qj8vXleFXVvdOpNpO64Gx/OqQyP+/t7TOOwvnQ=)
2: z585MlMo7mSSr9Hk1ivV-63iY4Q.roa (hash: DZmssWKd0chIvnTRvKAN4jdqih24+ZhEvPT2Hj5FZkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:87:b5:cd:9b:28:f6:80:bd:a8:f8:b7:ee:b3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e109e278c7862254c88755e4717398a552a49040
Validity
Not Before: Apr 16 23:00:46 2026 GMT
Not After : Apr 17 23:00:46 2026 GMT
Subject: CN=ab401527f2a1ee36a63f84a9ddb8e88eadd6600a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:9f:14:58:3e:1d:3b:95:e3:3d:72:d7:9b:
10:40:c6:80:2c:1d:a9:23:b2:61:c2:8d:e9:58:30:
25:82:37:59:a7:a9:9b:1e:d4:5e:c8:ea:c4:e5:b0:
2d:ee:49:e6:53:b3:4a:9f:4b:69:7d:b6:9b:f1:32:
f1:be:a0:31:b4:43:93:51:01:19:3b:45:8f:86:c2:
d9:ea:f7:00:76:fd:e4:99:07:f1:e7:8f:09:94:96:
ff:e7:eb:7d:a1:d2:c7:90:f1:1b:6e:ef:84:b2:71:
65:04:dd:3e:87:13:b2:37:ea:54:ca:be:e8:50:08:
35:99:23:e6:4c:4f:3a:ad:51:40:e4:08:a4:0c:5e:
42:e2:82:48:5a:0d:c2:9a:1c:c2:5d:e5:3b:41:94:
0a:52:77:27:9d:78:58:46:dd:30:f7:14:3e:fa:1d:
45:ee:b6:f5:7d:62:89:8d:d1:ef:65:28:14:11:90:
29:fc:03:f8:41:c2:2e:10:c9:73:35:04:2e:c2:e6:
de:54:29:b6:2a:95:1c:bb:81:d1:4c:e9:e3:d4:bd:
87:c5:de:94:93:54:04:ec:af:6a:fd:5b:80:bd:04:
6d:78:08:eb:03:eb:9d:bf:3b:ab:a5:53:91:53:59:
ee:81:9e:22:73:2a:b7:04:45:63:54:8c:3b:f9:0d:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:40:15:27:F2:A1:EE:36:A6:3F:84:A9:DD:B8:E8:8E:AD:D6:60:0A
X509v3 Authority Key Identifier:
keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:46:52:ab:d6:aa:b2:99:82:1a:c3:20:97:08:66:26:12:c8:
aa:8e:3b:0a:e7:a2:5c:58:d3:8e:37:25:18:2a:e8:be:54:6c:
fe:ec:6e:70:ba:2a:67:4c:e2:3d:0a:a8:5f:89:b9:95:52:2f:
fc:c2:76:24:66:c0:36:09:8a:7b:29:2e:03:4c:aa:7e:c1:52:
2f:a3:6d:92:f8:20:3f:03:38:20:0c:9a:23:1b:db:ca:25:ef:
51:e0:b8:5e:d0:ad:77:42:4b:a4:07:a2:07:e8:f6:06:9d:e4:
55:d5:9d:7a:eb:b3:9a:a7:71:82:96:88:d5:64:37:1c:09:93:
80:0a:31:2b:8b:17:94:97:a1:ce:83:9f:0b:f2:60:5e:e3:59:
3e:99:ca:a7:20:32:3c:27:ea:d8:4a:ef:0b:98:ff:d3:c4:9f:
59:6b:0b:5d:d0:ac:99:e5:40:ab:9d:1c:86:00:f9:05:87:ab:
ab:29:6d:44:e8:5a:60:94:9d:dc:96:a6:04:92:13:b1:20:eb:
d3:bf:11:c2:bf:7a:8f:99:e7:35:09:78:89:14:ae:3d:5b:62:
93:3c:21:da:8d:02:19:7a:a7:23:3c:66:9a:fd:b1:d9:ed:76:
dc:25:4d:9a:10:d0:2e:6a:57:a5:b4:b9:fd:4b:60:aa:37:fb:
f7:3e:5f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:10 2026 by rpki-client