Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
File: 4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json)
Hash identifier: jyK87o/Tcpg7YTwjiAQzH7uNCPhqBHRud3FlJIvActk=
Subject key identifier: 33:E8:AE:AD:74:B9:6B:9D:22:2F:BE:8D:25:04:1F:E0:AC:E4:4C:D5
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial: 019D99628CB4BC799AED4F61B0C40EBD2325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
Manifest number: 09EE
Signing time: Fri 17 Apr 2026 03:01:05 +0000
Manifest this update: Fri 17 Apr 2026 03:01:05 +0000
Manifest next update: Sat 18 Apr 2026 03:01:05 +0000
Files and hashes: 1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: RQRkq4rlcACNOKIZ/AN4inBx85Lz+ZFlKogBJ6X6/kg=)
2: MPWn9lYh7Ig78eg1IuFu_hQVgcY.roa (hash: iyM+MzYg4hUTkqmFv32rNevlyEv/xOwD98IypdwiHXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:8c:b4:bc:79:9a:ed:4f:61:b0:c4:0e:bd:23:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Validity
Not Before: Apr 17 03:01:05 2026 GMT
Not After : Apr 18 03:01:05 2026 GMT
Subject: CN=33e8aead74b96b9d222fbe8d25041fe0ace44cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:a1:77:29:44:b1:99:9f:15:1e:d7:18:a6:
4a:46:ae:ab:56:37:bd:fa:5e:ee:ef:84:ba:90:f1:
3c:b8:5c:39:bd:68:6e:18:95:44:1b:b0:4d:aa:81:
4e:b1:9b:d7:ac:b8:bb:5f:57:7c:f7:1e:e0:b2:23:
d2:4f:74:5c:aa:83:24:2e:22:d3:21:3e:21:3c:0a:
eb:89:77:b6:9a:3b:10:af:79:fe:a4:e3:47:70:1c:
82:12:0f:85:bb:1a:66:99:6c:9b:21:cf:8b:76:35:
b5:c0:29:a5:dd:c2:1a:48:20:a2:ce:fe:cc:71:c4:
f2:71:7c:ab:85:e4:d6:65:5f:25:aa:c7:65:b1:b8:
08:87:d3:13:86:a4:22:07:5d:f0:d8:bf:f7:fc:ae:
5d:5d:49:33:96:d2:76:35:b3:8c:22:d1:ad:a1:e9:
4d:cf:f5:87:31:45:3c:18:e7:6b:d4:e1:44:1d:b6:
2c:74:9e:ba:91:dd:8f:5e:c0:c4:c8:b3:5c:78:bd:
7b:7c:24:8c:cd:a7:53:e3:ad:ef:0e:0c:95:2d:4a:
12:b5:e7:86:30:56:d2:73:da:84:83:9d:54:81:3b:
8c:32:c3:ad:4c:86:93:69:59:f6:a7:6b:3f:0f:c8:
44:fe:01:8a:50:ff:d0:08:4a:ce:42:b5:4a:cf:74:
c9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E8:AE:AD:74:B9:6B:9D:22:2F:BE:8D:25:04:1F:E0:AC:E4:4C:D5
X509v3 Authority Key Identifier:
keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:75:66:9e:3f:26:73:a8:af:94:73:13:a5:ff:e3:ab:fd:6c:
d8:9d:93:34:1c:25:14:b8:3f:a6:5f:4b:02:33:25:97:fd:09:
79:cd:c2:11:53:e4:93:c7:75:cd:32:e7:d0:ad:cd:24:bf:1d:
42:22:f5:ec:19:2d:b3:af:ab:20:ef:cc:8d:c2:cb:93:4a:b1:
9b:a7:a5:27:52:e4:59:ee:4a:70:08:00:83:f6:7c:72:7d:8a:
67:cf:a5:2b:6c:d2:27:e8:82:71:11:ae:0a:f0:92:12:da:bb:
d9:33:a8:c0:b7:45:80:4b:12:33:b8:fd:38:b8:1d:7e:ca:74:
4f:44:bc:2f:a8:68:c2:f2:dd:4b:bb:2d:8f:01:f7:b9:96:cc:
be:1e:4a:98:98:ba:e2:21:ab:c2:a5:df:e2:c0:dd:92:ae:1b:
4e:73:65:03:24:22:d5:6c:ee:cd:ab:de:cb:3b:21:1a:b0:d9:
a7:66:e5:76:fb:10:70:c8:5a:9c:ef:e0:0e:a8:c5:2f:56:39:
78:ed:23:dc:eb:64:11:98:40:9d:98:3c:a2:ea:25:c0:2b:f7:
3a:d6:49:6d:21:bb:fb:01:32:19:57:8c:a5:d4:df:e5:8c:2c:
81:1b:ce:25:2b:59:92:01:e2:e5:35:78:84:12:2d:6d:0c:0a:
d2:95:83:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:27 2026 by rpki-client