Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json)
Hash identifier: 703dLwHPTelwkMJ/qNFN4Rw93z2xgT8hJ+ztcwSGdf8=
Subject key identifier: 26:3F:1B:AF:C6:3D:1C:0B:7C:6D:EA:0E:57:25:A9:B6:AF:08:25:A2
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial: 019D9A3E3C4AD1D2AF5C80B7EC4190AF942A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
Manifest number: 0DD4
Signing time: Fri 17 Apr 2026 07:01:03 +0000
Manifest this update: Fri 17 Apr 2026 07:01:03 +0000
Manifest next update: Sat 18 Apr 2026 07:01:03 +0000
Files and hashes: 1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: 5uvQYgacYDCozCwsO+HNYe4jk+3YT1iFV6t6tWHmZqI=)
2: 9WoXYCC1VJqnbGFNUpMF4rAgukA.asa (hash: 4Zq19YZTaukYMmJEdYX0CF4BWbwlExA/FZSk3vxkg/k=)
3: C9aXP0xnVks0GG--bUI7lSn9Og4.roa (hash: 7iquRG4sj7MdDkAUl6cu4d537zzGxzoS3U6EkDKWErY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:3c:4a:d1:d2:af:5c:80:b7:ec:41:90:af:94:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e229b37eb630686b1328338471b52da95d204911
Validity
Not Before: Apr 17 07:01:03 2026 GMT
Not After : Apr 18 07:01:03 2026 GMT
Subject: CN=263f1bafc63d1c0b7c6dea0e5725a9b6af0825a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b3:6c:ce:ef:29:09:60:f2:50:19:4b:39:06:
24:f1:e2:4a:2e:5b:0f:7b:2a:16:8c:7a:a4:ea:a7:
96:1a:28:f7:6a:5d:79:9f:49:69:68:ce:a4:44:59:
b8:78:13:1d:37:d9:8c:b7:49:a1:8a:7d:f3:fa:c2:
59:b1:b3:d2:ce:c4:39:0b:42:64:73:9d:08:69:1b:
76:fd:27:ec:82:77:74:b0:a0:4f:13:44:6a:c6:b0:
d8:1b:62:fc:a8:dd:48:4b:c6:d5:ce:32:9a:30:25:
19:93:87:e6:5f:69:b8:c0:e9:31:87:bd:82:54:15:
cd:24:37:d8:46:04:a4:c5:84:70:ab:d2:a3:3e:28:
fb:ae:09:14:16:59:94:6e:fa:43:2d:db:f3:09:f3:
f5:8e:59:8d:da:14:29:19:2d:4a:2f:5b:f0:18:b5:
77:26:21:6d:91:6f:f0:db:b2:fb:1b:0f:08:56:d9:
17:3c:d0:af:12:92:32:e4:c2:9e:6f:45:37:c4:d1:
84:bb:82:8a:b7:4b:bc:fb:b7:1e:d1:a7:8a:2d:f1:
22:13:44:59:af:10:db:82:d2:f0:cf:3f:3e:86:a8:
8c:9b:20:1d:74:12:22:69:51:2b:82:d3:ab:8b:09:
86:2b:7b:14:46:80:8c:e7:37:bc:33:cd:ef:17:7e:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3F:1B:AF:C6:3D:1C:0B:7C:6D:EA:0E:57:25:A9:B6:AF:08:25:A2
X509v3 Authority Key Identifier:
keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a3:43:41:69:5e:77:8d:56:c6:80:36:f6:5c:60:7a:b4:49:
b2:38:ba:60:cf:46:3f:e6:08:ec:84:5b:68:6e:8f:6d:88:fb:
6d:2d:07:19:42:0a:af:57:1b:ee:03:f9:a2:3d:9a:cf:b3:7e:
a2:43:56:3e:f1:c5:5f:66:d6:fe:7a:f5:59:ea:fb:41:16:2a:
33:7b:14:cf:01:9c:b0:80:28:19:d8:14:f2:92:a1:8a:e1:c9:
ec:dd:31:fa:a5:d4:97:d8:93:ee:e4:0a:4e:20:a5:9b:e4:9c:
ea:c4:49:83:dc:8f:71:3e:e4:c0:f7:32:3b:37:df:4b:82:fc:
24:9a:c4:5f:15:52:36:d9:53:ce:e6:74:8b:9e:8d:b0:fc:85:
0b:cb:87:18:c7:43:f9:a6:db:64:9d:fd:c1:c2:84:8a:bc:76:
2c:37:cb:e7:33:dc:c9:93:4f:de:8a:03:53:e5:b7:43:5e:94:
b8:e3:06:94:ed:1d:49:b7:09:84:46:bf:a6:8d:57:da:7b:dd:
94:16:8b:de:01:6d:66:31:14:46:e1:b5:34:8f:36:84:51:99:
c2:32:7b:a4:72:82:3b:52:75:2b:35:56:8b:a1:84:9d:8a:98:
c9:bb:6b:0d:01:63:38:bb:90:6c:e6:f5:5a:c8:41:57:07:6d:
b3:7c:fe:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:27 2026 by rpki-client