Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json)
Hash identifier: F5rs0PtzvXLJ/UOG9QK0O7dfFlN78z+wk81dZAJ4JlE=
Subject key identifier: 6D:3F:91:55:DE:C8:F0:57:84:3E:1E:E1:89:B6:8B:E2:5E:DF:A2:CD
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 019D984F84EA71290C81BCC6EF9B88000B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 22:00:41 +0000
Manifest this update: Thu 16 Apr 2026 22:00:41 +0000
Manifest next update: Fri 17 Apr 2026 22:00:41 +0000
Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: STAi56wziEohSElc1NItQWqlCXRlJ0mJQxdz5RBefOM=)
2: PpggW4Z2oygN7a5ac0zakE7Pnfo.roa (hash: 22hm4c5Osenfb32qhznGQLzeTvo39sm+f1ynIhOO3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:84:ea:71:29:0c:81:bc:c6:ef:9b:88:00:0b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Apr 16 22:00:41 2026 GMT
Not After : Apr 17 22:00:41 2026 GMT
Subject: CN=6d3f9155dec8f057843e1ee189b68be25edfa2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:4a:aa:4f:86:8c:34:6b:02:89:6c:7d:80:
04:4f:cd:b0:c6:8c:90:91:26:c0:72:78:b7:1d:a1:
80:29:fd:cc:0a:26:8d:81:6a:af:69:6a:b8:24:5a:
f5:03:d5:dd:33:13:3f:43:df:d4:f3:a1:b4:f9:9d:
78:57:49:f7:12:4f:f0:da:e3:2b:b1:61:20:d8:ad:
b0:05:2f:28:18:e2:e0:e5:73:8a:3a:42:a5:74:56:
78:52:f0:12:db:3d:a8:1f:d6:aa:40:6f:ec:b3:75:
4a:a5:65:50:a4:76:db:59:26:bf:49:c9:da:5a:37:
94:19:81:08:4b:38:f9:69:f9:cc:2f:58:69:2a:53:
6b:28:05:0b:c8:af:a1:58:42:4f:6b:89:e4:81:48:
b9:25:19:2f:90:1f:ef:1c:aa:d5:12:f3:3a:5f:6e:
14:e5:17:20:14:98:62:d4:3e:25:b4:92:cb:bd:c1:
cf:4f:2a:f4:8c:c5:5e:66:96:a3:d7:66:ac:bf:64:
6c:07:ee:66:fc:8b:c3:c1:f1:b2:0d:80:f3:f5:6b:
65:e8:a5:d8:0b:b5:d9:57:e8:96:5e:d5:ba:bf:10:
2c:47:b0:eb:0e:79:0d:a8:c6:29:2a:ce:04:3d:16:
2b:66:ea:ac:a3:ca:d4:d4:e0:89:88:e5:30:40:9c:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3F:91:55:DE:C8:F0:57:84:3E:1E:E1:89:B6:8B:E2:5E:DF:A2:CD
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:42:c4:0d:b7:fc:85:d5:2d:a3:0a:9d:dd:94:50:5c:44:44:
57:91:97:a3:ed:31:36:1b:ed:e4:50:07:f6:bd:3d:8a:22:e9:
51:b1:f9:a5:3f:6a:d7:b4:03:02:b7:ae:6c:11:03:7d:ef:c4:
26:c0:d3:46:8b:f0:10:41:94:e5:cc:a1:b4:9a:30:0c:26:07:
98:ba:fe:e2:82:dc:44:85:e5:c2:a2:68:1b:a3:98:cc:51:eb:
32:eb:b6:36:88:9f:e9:b0:bf:02:a0:66:e9:16:e2:23:c1:6a:
f0:02:f1:ab:f5:a5:ac:60:d4:7a:c9:f6:48:ec:72:80:24:87:
34:df:ec:05:ea:a0:a8:ff:9a:4e:03:44:a9:af:83:93:30:10:
c8:c0:27:fb:71:4f:97:b0:af:6c:0a:73:c1:21:90:cc:0b:4c:
b4:e3:a2:88:94:11:d9:c5:b4:90:6c:51:55:10:85:22:fb:b9:
b4:fc:1e:30:36:60:c1:ac:4b:cf:74:7b:03:50:8f:ae:31:f0:
9e:4f:ee:e0:d0:66:3a:d8:0c:f4:07:ec:ba:73:44:47:d4:33:
79:0e:70:c3:1e:8e:c0:d8:7a:5a:dc:ec:2b:b8:2b:c0:da:22:
c2:1d:7d:af:c1:1c:97:90:b2:65:46:72:67:79:26:2a:5a:d2:
17:19:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:36 2026 by rpki-client