Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier: ngHUHnODRbIQFwB+f+Qb0xcSkE4kKLuydktCukzZZME=
Subject key identifier: 9C:3F:45:F1:89:64:09:EC:C5:EC:3F:D9:29:43:6D:E8:76:A9:62:76
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial: 019D9850BBE294F8DF22FDA15023F075F31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number: 1755
Signing time: Thu 16 Apr 2026 22:02:00 +0000
Manifest this update: Thu 16 Apr 2026 22:02:00 +0000
Manifest next update: Fri 17 Apr 2026 22:02:00 +0000
Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: gglgiJ2ICsDhYJTHW2w4hF5Ac21qywVaf7lTbr1xudA=)
2: r2j9KB_d9qlo6DM4VIzlnk-FGnA.roa (hash: EzpW7vs8EG39ibzlPvK/9rhPpBxeklGzxbYhWxFufes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:bb:e2:94:f8:df:22:fd:a1:50:23:f0:75:f3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Validity
Not Before: Apr 16 22:02:00 2026 GMT
Not After : Apr 17 22:02:00 2026 GMT
Subject: CN=9c3f45f1896409ecc5ec3fd929436de876a96276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:86:13:06:4c:1c:37:8e:e4:69:db:79:3e:
e6:09:45:69:39:08:7b:fc:6a:f7:d4:d7:ce:7d:15:
8e:01:bb:ef:85:e4:2f:54:72:22:43:01:4b:7b:ab:
11:6b:e8:68:ec:3c:fb:ff:6d:d6:cf:49:1d:41:14:
ad:e1:8c:9b:50:88:ac:20:36:50:47:e3:4b:2d:48:
9d:70:35:f5:89:8e:bc:fc:60:79:1c:0b:e6:2f:8a:
97:2d:f0:cb:2a:c6:db:01:a6:e4:8a:9a:36:f4:d1:
18:0a:45:90:7c:1c:7c:ed:f3:1d:de:ef:4c:5b:c5:
3f:2d:e2:e7:49:0c:ff:6e:7b:78:fa:1b:37:c6:1a:
f6:a6:a2:cc:7b:3c:0d:0e:86:6a:72:06:f2:f7:e3:
a4:f1:77:dc:ea:1e:2f:ad:8b:69:11:0b:21:4b:81:
65:e1:82:a0:fa:df:fc:23:cf:48:39:86:37:2d:17:
a7:22:3a:e7:67:09:fe:8f:ee:0e:38:3b:15:30:6f:
a4:90:18:44:86:6d:85:68:79:05:8d:a2:de:72:c4:
67:cb:f0:1f:d4:0b:09:f9:32:a9:ee:e0:22:26:68:
c2:5f:ab:70:19:ac:c2:10:40:9b:a5:a2:6c:17:f4:
a2:53:8c:39:4c:d5:2b:52:82:d0:32:9b:07:ef:69:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3F:45:F1:89:64:09:EC:C5:EC:3F:D9:29:43:6D:E8:76:A9:62:76
X509v3 Authority Key Identifier:
keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:12:63:24:3e:ac:ca:bf:06:50:25:96:53:f6:c7:73:ea:a3:
26:ac:ae:f2:c3:fe:a7:27:f0:b1:1b:ca:48:ab:44:c5:04:e0:
9f:a8:19:5d:d0:ec:92:5e:02:ec:11:e9:66:51:a7:4d:77:59:
4c:f0:99:e9:e9:e1:53:39:b1:54:66:58:6a:c9:d9:ed:5a:79:
57:3c:fd:1b:cc:be:96:bc:b9:f0:80:61:be:39:8c:66:a8:f5:
a5:38:db:3b:68:a9:c4:7a:f0:b8:38:be:dc:9b:ab:36:54:76:
28:bd:f7:87:87:a0:72:c3:43:ef:e3:ea:b3:bd:10:6f:b8:d3:
0e:ad:b6:25:f2:83:bf:ae:8e:7e:8d:8e:75:bf:7f:e5:05:92:
c7:28:52:86:86:cc:4c:51:fc:5d:a0:c7:68:db:22:71:bb:dc:
42:e5:15:eb:10:1b:5c:ef:fd:f9:f3:19:b7:f0:b3:92:a1:4e:
1a:13:e2:1a:b7:00:79:8c:49:b1:d4:c6:6e:c6:74:50:8e:94:
ec:09:0e:8d:f3:2b:e4:6e:2f:d5:06:5e:8e:71:9c:4f:26:71:
c1:29:7c:7a:cc:4f:a8:9d:95:fb:0f:5b:e8:51:f9:1b:61:7b:
ef:50:bb:a2:c9:a5:ae:86:9f:2b:d7:39:94:a7:39:5b:a9:ad:
22:43:df:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:23 2026 by rpki-client