Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier: tO2NlPI49rmYMlF6yQ/lTCPiNEWoSBkrkz1DLzeG8vE=
Subject key identifier: A6:AA:8D:F3:90:AA:A4:AE:75:84:40:5E:A3:73:91:DA:ED:C5:E8:9B
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial: 019D9A3ED851A190F7DA822BE5395BC86CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 07:01:42 +0000
Manifest this update: Fri 17 Apr 2026 07:01:42 +0000
Manifest next update: Sat 18 Apr 2026 07:01:42 +0000
Files and hashes: 1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: jGW1z+FbZ7Q/GfT+ew6vDtRjkM2qlGkXiev/l7IJoDg=)
2: oxOUpQ0FwseclzcVvtlkSLjr_aM.roa (hash: 39PmeADT0B2o6dhGdHc5CXRqYkD6fuj6z5G5c2KqgVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:d8:51:a1:90:f7:da:82:2b:e5:39:5b:c8:6c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
Validity
Not Before: Apr 17 07:01:42 2026 GMT
Not After : Apr 18 07:01:42 2026 GMT
Subject: CN=a6aa8df390aaa4ae7584405ea37391daedc5e89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:12:c8:6a:c5:0c:72:eb:ec:65:1f:22:b6:
07:c4:07:a0:f1:49:dc:a5:ab:ad:00:79:43:c2:02:
17:b1:a1:0d:29:cc:97:b6:ab:5d:43:c1:22:6a:e9:
55:fe:ba:b7:44:ce:20:64:ee:4b:b0:b9:37:4e:0e:
12:52:0a:96:06:c8:14:25:21:c9:5f:72:74:fe:63:
67:14:1a:e7:17:6d:af:8b:2e:57:bb:d2:53:40:39:
63:8c:b8:02:75:7e:30:e5:51:cf:fa:36:bb:2c:3d:
0f:50:d8:a9:b5:71:ec:c0:27:d7:5f:ab:41:10:e9:
b1:59:5b:38:50:41:72:6f:5b:a7:51:dd:08:5d:8c:
8c:ff:3b:34:61:45:65:b3:6f:07:fd:a3:99:be:12:
37:6a:40:1c:4e:14:45:28:4e:06:7c:7d:d1:ac:32:
15:dd:8e:cc:e7:9d:4c:bd:dd:d4:4c:67:c3:d6:74:
a1:c4:5a:cb:14:6d:f5:ae:5a:6d:1b:50:7f:6d:5a:
d3:1f:4c:e3:8e:c8:c1:53:0c:58:71:6c:40:a7:6b:
5e:60:c4:02:05:9f:54:1d:f8:63:73:f0:09:c1:e4:
88:28:1e:90:14:74:25:27:ba:d5:f7:77:db:b2:30:
97:91:ca:00:ea:5c:4f:0e:b6:d3:10:a8:3c:b8:46:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AA:8D:F3:90:AA:A4:AE:75:84:40:5E:A3:73:91:DA:ED:C5:E8:9B
X509v3 Authority Key Identifier:
keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1c:fc:6d:20:1f:a2:2e:03:b4:39:81:3b:fd:bc:33:3e:1e:
d9:17:33:86:8d:2f:38:f9:d7:d9:d9:84:2b:4a:8b:75:e1:13:
f2:7e:f2:eb:97:a5:66:23:63:87:e7:ee:71:44:a6:65:1c:e7:
32:cf:ff:84:bf:ff:7c:0f:cf:63:53:8a:73:d1:91:f0:c9:ec:
d8:85:37:d7:5a:af:29:5b:d5:2b:15:95:7d:30:37:19:a5:6f:
33:79:3d:9c:0a:21:3e:74:61:1b:a7:18:c1:3b:a6:c8:60:9f:
38:ab:86:d5:29:ff:27:4e:e6:7b:e7:66:5d:b5:6b:11:0f:a7:
51:25:0b:19:60:a8:23:01:8e:a3:bc:cb:d7:ab:f9:4d:37:6d:
ee:f6:ba:07:92:61:88:19:d8:17:08:69:81:db:17:81:90:98:
6a:30:40:5c:5a:73:bd:87:d1:a7:34:8c:a0:66:15:42:58:89:
3b:8d:60:e0:ec:f7:99:c2:9d:b2:89:dc:b0:c3:40:b6:38:fc:
1a:3f:f6:ab:7d:d7:5b:a4:c4:ae:ae:41:71:8a:81:99:6f:d0:
d9:94:01:1c:7d:a1:21:7c:ea:87:d4:e3:9b:64:c1:28:87:ba:
2a:b9:8b:8e:7f:d3:e6:e9:49:47:40:33:a3:c4:2c:2b:97:41:
f8:45:6e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:45 2026 by rpki-client