Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: iEm0uQ/W4d0GCz91kc/i5O+qmMu3dEyGc6zTYJVbsaw=
Subject key identifier: 61:DD:4A:C5:26:53:F3:B1:09:48:C8:7A:A0:16:22:63:34:7E:50:BD
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 019DA41D1401477B7E9AFC263302071FDD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 1182
Signing time: Sun 19 Apr 2026 05:01:02 +0000
Manifest this update: Sun 19 Apr 2026 05:01:02 +0000
Manifest next update: Mon 20 Apr 2026 05:01:02 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: gird8jLT29M4akakH5MnS2UrKe0fMfXyuv9Q+jh0dO0=)
2: uTD6khWcd31ZzRZAtfj7o4AtIHw.roa (hash: 69oOJR8ncC7sjtYVQ8SZHCT4Cq2KZtCn6uWehRleXPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:14:01:47:7b:7e:9a:fc:26:33:02:07:1f:dd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Apr 19 05:01:02 2026 GMT
Not After : Apr 20 05:01:02 2026 GMT
Subject: CN=61dd4ac52653f3b10948c87aa0162263347e50bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:42:b1:e5:30:ee:30:7a:10:80:0c:5d:5d:fe:
8e:95:28:0e:e8:f1:5d:61:f1:7c:8f:c1:04:b5:ed:
f8:28:ee:35:65:a4:11:07:ad:c0:c2:ef:d2:14:40:
a1:d9:6c:06:dc:1f:ac:91:86:ef:68:c9:fc:4f:7e:
da:af:63:55:52:78:4d:4e:6d:5e:0f:28:96:d5:fb:
2b:95:f9:6b:8f:35:fe:4d:f4:40:66:2a:3b:16:ed:
f5:a5:9b:7e:8c:21:d1:43:5c:b6:ab:bd:a9:ab:13:
44:fe:71:49:53:81:b5:95:0a:f0:5a:f7:f8:d8:8d:
40:12:9c:2f:41:52:de:07:74:ed:af:e5:6b:68:62:
6a:0f:0a:77:99:91:0d:68:53:c9:e3:b8:42:fb:4c:
ee:9c:6e:62:25:a4:d4:f8:2e:9e:36:56:e3:3e:e4:
5a:9e:de:ba:63:76:e9:8b:0f:4f:44:f8:91:ed:f8:
ce:1f:f7:4c:48:21:ad:74:0b:56:15:21:59:d7:2d:
6b:d7:d6:bb:92:b0:50:95:91:97:77:d4:dc:25:07:
c5:5a:6b:b4:80:a4:52:49:2f:79:8a:aa:a8:84:d3:
1b:57:e3:e8:67:30:87:02:ff:dd:5f:9b:07:51:5e:
f2:3f:00:2b:f3:7c:af:09:80:e7:85:27:69:cd:48:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DD:4A:C5:26:53:F3:B1:09:48:C8:7A:A0:16:22:63:34:7E:50:BD
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:14:40:a5:c9:c0:9d:21:04:1d:6a:21:9e:90:33:9a:dd:70:
1d:79:a9:91:9e:4a:f5:f3:dd:9a:c5:93:94:21:8f:66:79:4b:
d3:ab:74:64:c9:00:b8:3f:ee:75:f5:45:79:09:ae:13:67:63:
9c:a7:03:19:98:04:6b:d0:ca:6d:a9:81:04:45:f3:74:a8:bc:
7d:94:6b:6f:a0:5a:ed:84:18:d9:c3:b2:a0:31:84:12:61:db:
3d:9a:83:34:7c:3e:59:90:67:6e:a6:6c:9c:29:c9:e1:e5:99:
1c:df:59:6a:46:25:06:68:a5:02:28:5e:c7:3b:b8:27:1a:da:
a0:3d:b0:38:ca:08:2e:f8:5c:2d:2f:e6:56:6a:4c:ce:52:c2:
56:d9:d9:d2:cb:1f:31:39:30:6e:59:80:97:c8:84:c2:18:97:
42:c4:fb:ff:58:aa:bd:a4:bd:a8:be:5d:5d:21:75:2e:3a:ce:
15:7b:48:1e:04:25:83:c9:42:b0:2c:6f:b2:17:de:a8:5f:64:
f2:c1:91:3a:7e:1a:d4:a7:8f:26:cb:46:ab:46:9e:d9:fa:d6:
6c:ad:f4:a0:97:ff:88:61:27:fc:97:83:7d:c9:87:0d:6c:45:
5c:a3:1a:46:bc:c6:54:54:99:32:1e:f8:25:10:21:96:ff:e0:
0e:dd:6e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:38:50 2026 by rpki-client