Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier: VauG4OvF0Ye67ijqsBKRpDoTw5rQeYWKQUktipMRvFU=
Subject key identifier: B3:5B:9C:0B:C8:C8:CC:31:E6:25:A4:C7:05:26:E4:82:0F:FB:37:A7
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial: 019D98F414E478BA27926E85F259A679E008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number: 078D
Signing time: Fri 17 Apr 2026 01:00:26 +0000
Manifest this update: Fri 17 Apr 2026 01:00:26 +0000
Manifest next update: Sat 18 Apr 2026 01:00:26 +0000
Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: AfxCj4JLdgyAu7HbxGt7NkKfGqMFRV1xiUJjrai4qro=)
2: AHfZCvtyXR1N7LVfRri-RiC1E6I.roa (hash: Rc0GVzYrZ//kqYZ3Jv1c6BblzqpktiqTIXdTmceeo7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:14:e4:78:ba:27:92:6e:85:f2:59:a6:79:e0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Validity
Not Before: Apr 17 01:00:26 2026 GMT
Not After : Apr 18 01:00:26 2026 GMT
Subject: CN=b35b9c0bc8c8cc31e625a4c70526e4820ffb37a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:61:ea:f5:71:80:ce:ae:2c:fd:31:91:53:df:
7e:85:a6:cc:b3:75:ad:1d:d3:51:93:09:fd:86:13:
12:58:10:fb:29:eb:2f:2a:a5:5e:d2:98:70:7d:da:
34:3e:9a:30:1f:93:54:d5:26:2a:0b:35:d9:a4:67:
a7:3f:8d:ef:28:2c:4b:cc:db:e7:79:48:34:05:d3:
3a:6e:25:bd:d8:52:ad:a5:2f:a8:6f:da:de:09:2f:
2c:a5:a6:ff:1a:31:68:fc:e8:44:5d:4d:fc:3a:ee:
15:6d:6f:06:e1:17:15:2c:2b:4c:36:cc:79:78:c1:
fe:93:ab:ce:0c:05:e5:9c:e0:9d:ea:a6:49:8b:8c:
aa:b8:01:59:52:26:7c:a6:f0:1b:c5:7f:00:85:51:
03:cc:37:7f:9f:ca:27:f8:fa:61:83:bd:dc:a1:21:
d7:4d:10:0b:80:be:01:28:73:d7:2e:b1:18:ff:cb:
48:e4:4e:e1:7b:b6:b6:ec:70:8c:86:58:1a:4f:e3:
1e:f3:88:29:7b:cd:fd:21:f3:b0:6b:39:38:d8:7b:
66:b8:09:63:0d:6e:ac:32:1e:6a:78:e2:ff:1a:4f:
75:08:ee:67:8f:6d:a8:50:88:5f:db:6a:c2:85:56:
a8:48:59:08:03:b3:cf:d2:e7:fa:b3:3f:65:b0:8c:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5B:9C:0B:C8:C8:CC:31:E6:25:A4:C7:05:26:E4:82:0F:FB:37:A7
X509v3 Authority Key Identifier:
keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:89:f3:a9:c4:9b:eb:ac:de:0c:4c:22:ca:ee:c0:c3:d8:1d:
d5:82:e6:ed:a9:e9:5f:0f:ca:fa:36:05:b5:df:9a:70:55:5c:
ce:e7:d6:01:ba:35:5d:e8:ab:b7:6b:c6:a8:cb:73:4d:b9:ad:
f0:20:38:c8:9a:cb:9c:1f:2d:5f:a9:89:55:c7:21:94:02:c3:
f6:8f:80:38:e7:ee:0a:32:e8:35:38:2d:43:30:26:4c:2a:f7:
c7:1b:e0:f3:17:cd:1a:34:59:a4:ce:25:cd:24:8a:54:31:a2:
fb:19:7f:3e:a0:16:67:06:67:7f:05:03:5e:fe:1f:a6:da:32:
59:ce:cb:43:58:3b:88:ef:19:9c:8d:a4:3d:86:49:47:96:0e:
3b:e5:e4:65:fe:6d:25:fc:f3:98:41:8f:c9:9f:d2:d4:25:13:
c8:31:bc:b4:50:84:72:04:14:1d:86:43:01:a9:93:db:10:25:
02:66:73:5a:cf:85:c2:12:60:b3:8a:6a:30:7b:47:be:2f:9e:
0e:f5:a1:d8:bb:d0:8d:65:8d:d4:28:67:1e:06:6b:a0:95:b9:
9c:5f:24:a8:c2:c2:b5:7c:c2:ed:8e:a0:7c:5b:cb:95:62:64:
14:d2:21:ea:f6:a6:6f:f2:71:3a:c9:86:bc:bc:ef:b2:64:fe:
55:11:0d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:18 2026 by rpki-client