Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
File: 4njEqqAhvti5JuNZH99QyN9rwXI.mft (raw, json)
Hash identifier: zkD5j73WTrnYwbRzA2j4yzu5KPFn1HmIYF7pc81jT+M=
Subject key identifier: A4:1D:C4:AC:30:FF:34:E7:77:D0:6F:0E:16:D1:00:4F:55:39:9E:C1
Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
Certificate issuer: /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Certificate serial: 019D9D3ED5203184AB329A550A531AADB029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
Manifest number: 0B39
Signing time: Fri 17 Apr 2026 21:00:33 +0000
Manifest this update: Fri 17 Apr 2026 21:00:33 +0000
Manifest next update: Sat 18 Apr 2026 21:00:33 +0000
Files and hashes: 1: 1-8kJiWXbzYyQn9Z_qYA1FhOH3SQ.roa (hash: sbcGPB93z3YNWrVB4YHHakteB4jeVAtpbXTGFYuXZTU=)
2: 4njEqqAhvti5JuNZH99QyN9rwXI.crl (hash: iaUNa9bI9MxiUM8yuWc0JA+oqcppqDzxqvPdMs90oOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:d5:20:31:84:ab:32:9a:55:0a:53:1a:ad:b0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Validity
Not Before: Apr 17 21:00:33 2026 GMT
Not After : Apr 18 21:00:33 2026 GMT
Subject: CN=a41dc4ac30ff34e777d06f0e16d1004f55399ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:58:46:ce:a5:6b:6c:3f:2b:9f:7f:76:b3:
12:22:ff:c9:f9:9f:21:52:43:66:8d:59:b9:75:ba:
8f:fd:45:e2:e9:73:a4:97:34:87:01:cf:da:8e:bb:
cf:ac:fb:26:4d:48:14:db:ea:93:3a:62:73:88:f6:
ad:fc:97:36:fb:aa:d3:85:c2:4d:b6:f8:38:ea:03:
ad:f8:b5:d5:2d:6b:df:e4:16:f4:5e:f9:ac:9e:9f:
f2:a1:4d:af:62:fa:13:63:1f:b2:7d:da:22:fc:95:
f1:cd:a3:4e:c0:84:49:51:64:15:c7:83:f5:14:1e:
36:fe:9b:f6:e3:27:34:e3:0a:30:5b:74:f6:4f:b4:
27:27:e3:f3:c8:a6:84:94:60:bd:0a:2e:3a:1a:0d:
c9:5f:cb:85:ea:33:9f:55:12:aa:9f:39:ec:ba:fe:
66:e3:29:79:c3:9a:c3:38:56:d1:98:7e:99:0a:eb:
aa:d5:cc:ff:18:66:1e:75:2b:bf:c9:c0:54:b6:de:
47:3f:c0:d3:17:fd:92:fb:05:73:5d:39:ac:6c:22:
ea:87:df:7d:73:a6:2c:f9:8d:c1:1c:03:e4:74:b4:
bd:07:78:2a:34:77:9d:02:62:f1:b6:ce:ae:9f:ee:
87:a4:da:9b:07:ce:00:80:01:fe:87:89:99:ff:36:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1D:C4:AC:30:FF:34:E7:77:D0:6F:0E:16:D1:00:4F:55:39:9E:C1
X509v3 Authority Key Identifier:
keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:56:71:73:a6:1b:27:50:b2:36:6b:a4:eb:f0:59:8c:68:0b:
54:fb:8c:26:87:e1:47:ba:d3:35:88:f3:fa:26:f6:c6:24:10:
20:85:73:d9:36:aa:c3:73:60:a0:3f:b8:df:3c:80:65:b5:d9:
e1:95:96:24:7a:9f:97:d0:8a:d6:e3:27:72:22:98:0d:c2:d1:
5e:06:88:7b:29:bc:9b:aa:b0:51:0f:a9:1c:92:b1:49:cd:8d:
ed:aa:be:88:31:90:ca:2c:9c:71:51:52:d2:78:80:0e:7d:f0:
a9:c4:1b:3f:0b:c4:d8:ab:84:86:82:6a:52:c2:c1:73:6b:70:
79:d1:d9:ae:52:fd:74:d2:db:2d:ab:50:2a:ad:fb:55:0d:ef:
a3:2a:f0:3c:a4:d3:c7:e6:df:b7:a5:dc:43:0c:06:70:64:8f:
bd:1a:2e:85:e3:81:fb:ee:15:13:f2:f9:ef:9d:29:c9:20:45:
3d:ee:5c:47:1e:f3:85:12:49:76:9a:f8:6e:a7:1e:92:3d:46:
c0:c2:db:f2:7e:2a:98:59:4f:23:55:79:da:0f:4e:17:f7:85:
18:52:e9:9d:d2:7c:fb:b4:f9:e7:9e:84:e2:fa:99:5c:9a:90:
5c:23:a0:05:84:40:14:2f:26:87:79:64:63:8c:58:fe:b3:01:
39:9a:ad:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:45:27 2026 by rpki-client