Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier: VmTLPosi1Ro6x2xnrqn1SZfIercOlqN3VfWhlPXGVZM=
Subject key identifier: 11:78:52:3A:B3:9C:82:1B:24:43:45:9F:73:38:24:9F:79:5D:DA:2C
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial: 019D99630ED877B88CE4C8F3F9857FC1461C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 03:01:38 +0000
Manifest this update: Fri 17 Apr 2026 03:01:38 +0000
Manifest next update: Sat 18 Apr 2026 03:01:38 +0000
Files and hashes: 1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: zIc86B++e6IKkWoT9vUbqwkPJsd9Fr+LO35pk0xnSZY=)
2: Ut_nk45-PrVxes0DMrlE6POGcXc.roa (hash: oo94Gr3/o7iKPPOqsqmwUWcuIt1lQW+gn6zRbGd06vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:0e:d8:77:b8:8c:e4:c8:f3:f9:85:7f:c1:46:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Validity
Not Before: Apr 17 03:01:38 2026 GMT
Not After : Apr 18 03:01:38 2026 GMT
Subject: CN=1178523ab39c821b2443459f7338249f795dda2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:8d:ce:6f:11:33:cf:1d:65:83:48:8c:a3:
98:7b:4e:97:04:3b:74:63:9e:3f:e2:d2:9a:2e:f2:
c6:b3:0e:2e:6e:0b:1a:24:e5:a3:2a:64:28:06:00:
f2:f3:b3:7d:95:ae:1e:01:3b:8a:c7:88:ba:11:02:
a5:4b:24:8b:8e:3a:ee:bf:bf:fd:b2:7e:d2:ff:f1:
38:bb:15:ba:2d:c3:52:47:57:50:52:0e:b8:ea:ea:
a2:23:93:ae:89:30:49:fc:3e:4e:67:a8:f1:e6:89:
c0:ef:fa:14:4f:ca:f3:26:87:47:60:31:f1:2c:e9:
4b:8d:67:8a:7f:93:3d:0e:ad:e8:05:37:54:00:b8:
06:11:4b:6e:e5:b4:fb:15:5b:50:8a:2f:de:d0:0e:
7d:6f:49:37:b0:2d:85:f3:55:f1:26:4c:af:dd:59:
56:24:2a:8b:fd:8c:4c:f8:8b:95:94:cb:5a:c5:1b:
3d:63:41:d0:0a:5f:11:1b:0f:28:b2:ac:84:b3:38:
3a:44:61:73:85:c8:28:d0:4c:c6:b2:95:12:4d:27:
e2:18:22:c6:1b:aa:fb:1b:88:94:29:d6:03:3e:23:
cf:40:b5:02:bd:ca:5e:2f:79:ea:26:af:b0:fc:43:
50:68:6e:c2:27:55:a9:43:fa:8d:39:de:8f:a3:d9:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:78:52:3A:B3:9C:82:1B:24:43:45:9F:73:38:24:9F:79:5D:DA:2C
X509v3 Authority Key Identifier:
keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:78:5a:1e:5d:aa:a0:1c:6a:76:2c:f6:0e:b5:94:58:f5:12:
f0:b4:5d:e8:ef:5d:a4:7f:5d:66:ed:a2:fb:f0:f7:d2:96:43:
8d:02:01:8e:5f:2b:cd:8b:80:8a:3b:f8:45:cb:ec:e2:18:e7:
e2:50:4f:fa:5e:c2:fc:7a:70:40:ce:15:fe:85:3f:d4:ce:1c:
25:db:f8:d5:c7:61:fe:1f:32:f2:32:c9:81:d0:63:ba:ea:19:
93:4a:a8:2b:5c:bd:c7:3e:27:6f:3a:55:42:9a:ca:19:d5:9d:
59:a5:8e:49:ae:79:f6:94:3a:b6:7a:19:76:e9:1d:16:a3:ac:
8f:bf:e1:94:6d:a3:a0:4d:78:e1:a9:24:bd:2c:0c:ef:85:8e:
a7:91:51:47:be:92:39:75:59:7f:ca:14:e3:f3:8d:8e:5e:97:
c1:ac:45:8e:1d:4c:6a:35:01:3c:09:0a:87:6d:7d:84:0a:2a:
c8:f3:3c:47:16:cf:37:8e:4e:71:91:ed:d9:33:93:59:4d:d3:
53:5b:74:c8:20:29:3f:f2:6c:b9:b4:76:5b:54:91:73:16:02:
f7:98:11:20:78:be:56:94:26:79:a4:b1:75:f8:c0:a2:9d:54:
e7:07:c6:0e:c6:1f:30:c6:8e:11:c5:e1:e9:19:bb:12:93:80:
15:c1:8a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:05 2026 by rpki-client