Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: nNYYr899R8WhVcO74RLZCirWDygcbl+F0Qu8WTqKizw=
Subject key identifier: 16:93:4F:3C:45:B9:0D:0B:3D:F5:24:5E:38:F7:39:2E:89:0E:71:42
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 019D9C63675408A7856B81ACE490FC6EDADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 16D3
Signing time: Fri 17 Apr 2026 17:00:53 +0000
Manifest this update: Fri 17 Apr 2026 17:00:53 +0000
Manifest next update: Sat 18 Apr 2026 17:00:53 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: 27OXn/+r2vUj+4ghhfC+VdMtGwVgwkVGcGeme2tzimM=)
2: E582u3b_wirr6G_w4u9uogz74z8.roa (hash: 81B6PrtCWAN/tZ4dAD4doQginsu0czWU20EU6ygqMqw=)
3: XzHwdc8CnV6b37aUuwbB9K5aCVg.roa (hash: Ajp8GTPxK9A3C7R9uHBAngG8he1JSPPWTWmru9BuMHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:67:54:08:a7:85:6b:81:ac:e4:90:fc:6e:da:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Apr 17 17:00:53 2026 GMT
Not After : Apr 18 17:00:53 2026 GMT
Subject: CN=16934f3c45b90d0b3df5245e38f7392e890e7142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:25:e9:e6:82:e6:25:fe:dd:0b:f7:a3:01:75:
ce:a0:8f:bd:59:08:35:ed:b7:d9:0f:1e:b2:65:a8:
99:05:35:48:a5:d9:fb:45:f7:25:dd:bb:88:51:ed:
8a:2d:bb:c0:15:d5:66:b9:31:eb:4f:85:4d:34:13:
87:58:e0:ad:cd:a3:61:ba:43:66:cf:29:63:78:40:
96:4f:c9:89:b6:16:d8:52:4c:bf:29:d9:99:34:28:
63:dd:51:4b:0b:53:a1:34:51:16:81:ea:a1:90:a4:
a3:26:6e:68:3e:e8:24:a4:c2:a4:c3:cf:22:12:54:
df:24:0a:8c:cf:59:a7:97:dd:fc:12:c4:a6:80:19:
d8:93:ee:01:05:ad:65:20:ec:75:0b:37:fc:eb:fb:
00:f4:6d:07:f5:8c:57:3c:14:66:2c:bf:d4:50:89:
2c:8b:be:8f:0a:1b:a6:68:dc:2c:d1:7f:30:05:1f:
0b:76:c0:9e:20:e4:11:84:ec:f7:08:83:84:91:6d:
3b:a9:9a:40:6c:80:59:6d:72:32:3f:89:46:49:8b:
a4:fc:1f:79:79:66:de:b9:a5:29:c8:66:47:1d:39:
ff:cf:02:bd:fe:f1:90:ec:3c:58:da:7b:0b:d4:de:
7b:38:5e:9d:53:cf:04:70:75:3e:f5:9a:45:fc:6b:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:93:4F:3C:45:B9:0D:0B:3D:F5:24:5E:38:F7:39:2E:89:0E:71:42
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:aa:ba:c2:00:8e:c4:29:af:d5:9f:0c:91:84:c7:77:0b:0e:
12:5f:3e:f2:ee:e5:b1:27:92:1c:0e:3b:c2:18:d1:bc:9f:c2:
00:87:31:a1:49:ce:aa:32:a2:40:4d:6c:d8:fa:6b:db:39:d0:
62:0c:a3:31:15:28:c0:30:f4:8b:37:15:03:78:1d:d5:fa:d2:
2b:5c:43:f5:4b:a4:40:28:01:1f:bb:e9:fe:1e:57:9a:68:ef:
ab:20:ca:ef:1e:cf:d9:21:72:17:42:97:a6:5a:22:37:60:70:
26:30:3c:89:e4:14:ae:71:e6:63:63:bc:2d:5d:7a:a4:2d:ef:
52:ea:3b:dd:df:24:50:50:86:8e:84:f9:cf:9d:e8:9c:16:3a:
f2:b1:e5:56:b8:d3:46:27:cc:61:29:ec:26:a2:66:5b:88:b8:
af:6f:33:33:19:b6:bb:34:e5:c0:98:49:12:1f:fc:ca:29:a9:
b8:27:74:ca:8c:94:11:75:ee:6a:0a:f4:3c:7a:2e:17:23:4c:
19:1e:02:f0:f2:9f:29:fb:ae:2f:ff:e2:e0:ef:2f:1e:4f:f5:
6b:c8:6b:77:e3:31:63:74:3b:24:06:0a:33:f8:c8:57:20:35:
88:72:05:3b:a9:81:60:d2:02:47:17:c8:b3:52:0f:57:95:90:
e9:f8:95:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:10 2026 by rpki-client