Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: BUh/+Sh+n/XCJdGh13lCLo7Un1w+bpRurMLQwhCJsog=
Subject key identifier: 17:20:5C:30:4B:78:72:8E:06:A7:C4:15:FD:45:6C:66:2D:68:46:D3
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 019D9A06A90D253DC77BE266BB506FDD0828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 141E
Signing time: Fri 17 Apr 2026 06:00:20 +0000
Manifest this update: Fri 17 Apr 2026 06:00:20 +0000
Manifest next update: Sat 18 Apr 2026 06:00:20 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: dzcLvGuDOuFC4ZXQgKtPMolgySyh9fWhWJbTX5bPEtQ=)
2: _2TjfVrCZo9B9qI9aJsIIj8RhAk.asa (hash: M/M1jD58xwzQOF/SAmLUskPi5EjlgSXMDxr/H80Jdlc=)
3: i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa (hash: w8gWgmF42nIarY6Emvf1fz/wNEfrJpHlyRzan9puCwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:a9:0d:25:3d:c7:7b:e2:66:bb:50:6f:dd:08:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Apr 17 06:00:20 2026 GMT
Not After : Apr 18 06:00:20 2026 GMT
Subject: CN=17205c304b78728e06a7c415fd456c662d6846d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:94:97:5d:e4:a6:e2:de:25:81:f0:9a:94:
f4:68:33:65:41:d6:40:3b:33:87:d2:cd:5b:f4:17:
17:84:21:3c:53:dd:2f:ba:0c:24:36:c5:06:71:01:
33:dc:5d:5f:72:83:95:ca:fe:38:3e:4d:b4:11:bd:
89:40:6f:76:dd:ce:46:b3:72:d8:27:11:89:d7:50:
8e:bf:7e:da:08:40:47:cd:dd:94:02:bd:80:ed:26:
8b:de:98:33:6a:ce:35:8b:0c:49:43:6a:a6:ca:67:
a9:9a:cc:c2:af:f1:0e:ca:80:0c:8a:c3:0b:44:e1:
a2:ea:c5:6d:8c:a2:1a:63:2e:85:90:98:8d:d8:c5:
71:6a:8e:ce:13:01:fd:04:2e:7f:9f:2b:d1:e3:93:
ca:51:38:d5:44:fa:b6:c4:f2:e4:b6:28:24:9e:85:
5e:97:93:14:3d:60:79:ef:91:f0:b6:95:e0:7f:d8:
af:97:1f:2b:0b:b9:8e:75:98:6d:1b:04:c4:23:7a:
13:87:9d:e1:f5:c5:0d:47:79:3e:ab:d1:12:88:9f:
e9:30:04:59:62:65:a6:94:eb:0b:c2:8e:e7:c5:09:
06:3f:41:02:32:a2:b9:91:dc:cb:9c:95:d2:6a:4c:
7d:b9:f9:25:23:5c:73:94:1b:bd:33:20:e4:c7:69:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:20:5C:30:4B:78:72:8E:06:A7:C4:15:FD:45:6C:66:2D:68:46:D3
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8e:cc:28:90:91:25:12:a7:df:f7:75:02:8f:1b:e8:28:99:
32:2d:40:51:d3:2d:b8:cc:c1:2e:a4:bc:5d:32:0d:45:12:c1:
b4:34:f4:17:0f:ef:1b:53:5d:4f:d7:84:ef:71:8a:23:c1:2f:
60:46:9a:5e:dc:f3:77:b0:b4:a4:de:2c:e0:a3:f9:e1:9c:a7:
82:da:da:3a:97:90:b9:95:22:09:fb:46:1e:3f:de:69:2d:16:
cf:3f:8a:72:cb:c2:88:1d:12:7e:db:bd:c7:de:49:34:a7:bd:
52:03:dd:7c:08:f4:87:8d:6d:1a:9b:28:ca:e2:72:cc:a0:08:
32:d8:97:e2:a1:39:1d:80:00:77:87:b4:56:0b:8f:0b:ec:43:
f0:d1:4d:3d:0b:a4:83:0b:60:81:a1:74:e8:4c:c0:23:fb:30:
cd:25:e4:72:2e:a2:8b:f8:de:be:13:cd:c2:24:cf:8a:3d:20:
47:36:ca:97:60:f9:ee:4a:3b:3a:64:25:4c:70:b0:b3:5e:6b:
88:89:d4:24:37:3a:25:c5:6e:01:ae:0a:23:6d:1a:4f:c7:1c:
b6:9e:0f:c0:80:bc:5f:85:e2:7e:d6:8b:b0:22:0c:d4:83:b0:
97:b2:7c:3a:f4:28:64:6f:1e:86:01:5c:1e:ee:b9:97:9a:fc:
79:01:97:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:47 2026 by rpki-client