Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
File: p4kEQNrxw6w4dz6FIVES90twYjI.mft (raw, json)
Hash identifier: icdJkmPAlADFNXgzYmU9He34IM4+Sy6L8MWJLTKNyyg=
Subject key identifier: 68:53:21:F9:F8:28:62:E4:89:AD:09:44:70:D6:71:54:2D:02:C7:DE
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 019D9A3EEFFAEBF608F59EB26D7BD165DA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
Manifest number: 79
Signing time: Fri 17 Apr 2026 07:01:49 +0000
Manifest this update: Fri 17 Apr 2026 07:01:49 +0000
Manifest next update: Sat 18 Apr 2026 07:01:49 +0000
Files and hashes: 1: U3lhosWDCWkOpFdsH0InZo3L2So.roa (hash: cA9YSxfYf8puSlmrAh+xgnlh5hfoxYmLxjTNe6lxvv0=)
2: p4kEQNrxw6w4dz6FIVES90twYjI.crl (hash: AdrFD8NCmbqSvLPCi0GhQYCGlhcQ569cziUc2Cq8iKs=)
3: rbySto4bwasyCSyfLG3tTaOVj_s.roa (hash: wd1Ap/uduw/P7yoJlzMsKGRJqc4D/dsTIBcvCHP1qZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ef:fa:eb:f6:08:f5:9e:b2:6d:7b:d1:65:da:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: Apr 17 07:01:49 2026 GMT
Not After : Apr 18 07:01:49 2026 GMT
Subject: CN=685321f9f82862e489ad094470d671542d02c7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:72:69:a8:c5:91:ca:18:87:5c:71:6a:85:
a1:03:2f:40:8d:c7:63:38:78:8a:d5:0f:6f:af:bb:
84:1e:38:74:d9:c2:40:88:18:c8:83:f0:82:5f:16:
e5:f6:ea:3c:64:c4:e1:3d:19:dd:a9:95:4c:c7:6b:
bc:cb:33:94:d5:59:65:b3:05:89:5e:cc:c9:8a:fc:
a3:f6:d8:81:79:67:b5:d7:8d:1d:80:9c:ee:67:cb:
50:2c:99:67:0e:2c:4c:73:a2:08:9d:00:ff:c7:7a:
c4:31:fc:44:ae:7b:3e:35:b6:58:05:a8:0a:f5:c2:
3c:da:8c:df:99:d8:f9:20:69:7e:c1:92:22:ed:20:
ad:c6:ce:ae:e5:f7:9b:97:a1:1a:99:7b:f2:34:25:
ec:96:b1:67:b8:27:ac:cd:f4:f6:c1:b4:af:e6:d0:
4b:9c:d3:b6:d2:49:0d:5c:43:d1:82:ca:08:54:0b:
5c:82:1f:8d:f0:75:b3:ab:0a:fc:b0:3f:87:8f:16:
bb:c2:82:8e:5a:1e:ae:38:a7:70:fc:df:45:5b:c9:
6b:96:ea:4e:74:71:20:0d:22:3f:64:9d:25:ea:75:
33:a8:c3:6a:05:bf:4e:4a:67:a3:8b:e8:93:a7:4c:
b6:20:50:1c:3d:25:45:a2:56:93:13:b5:ec:c9:96:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:53:21:F9:F8:28:62:E4:89:AD:09:44:70:D6:71:54:2D:02:C7:DE
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ac:cb:50:a9:43:d7:30:26:93:38:ac:d8:67:b5:0b:29:71:
37:7c:ec:26:cc:4f:b9:63:13:7f:f8:0c:e1:54:d8:ae:f7:33:
c8:27:be:a6:8e:a1:a3:0c:13:89:5c:5a:0e:ed:32:fe:e9:30:
09:02:47:06:90:79:9e:7b:f0:7d:35:3b:93:60:d6:28:d8:72:
1d:a5:fe:3a:55:5e:13:fd:a9:d1:c7:a9:be:4a:45:7e:25:5f:
18:a4:d4:8c:ea:3f:e4:2b:ad:40:72:81:09:2b:9f:8e:3e:e2:
ba:bb:56:54:42:8c:d1:ef:6d:af:25:26:79:20:54:c5:29:a8:
7d:76:b3:f5:ec:e2:56:1e:fa:a7:f5:8e:08:f1:70:18:43:c2:
8d:5d:bc:ca:59:1e:cb:68:9b:f0:27:9f:1f:90:c7:ba:ce:95:
2f:fb:54:1c:9d:83:fb:a8:e6:78:8a:a0:87:f9:df:df:c3:50:
fd:fd:d5:99:d8:37:c8:70:9b:95:08:5d:a0:43:8e:83:c1:ca:
ab:5d:a1:fb:c4:ea:dc:19:54:38:4f:e4:f8:82:56:64:ba:3a:
ee:de:32:52:9f:28:3c:4b:4b:54:72:a8:ce:7f:29:ef:bb:e8:
d1:1a:a6:d6:e8:e6:d2:b3:37:7d:d4:81:eb:5c:fe:cf:ea:ff:
a7:d6:aa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:31 2026 by rpki-client