Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json)
Hash identifier: XNyjua7NiI+ykQBohCKL5hDDyEp+1XaVTaN7Q6gUfyg=
Subject key identifier: 7F:E0:48:4D:9B:4E:76:C8:B8:F5:B4:88:6C:E5:2F:80:40:67:42:64
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial: 019D99994650BFFAAE1E488FDF471A0B6698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
Manifest number: 0B77
Signing time: Fri 17 Apr 2026 04:00:52 +0000
Manifest this update: Fri 17 Apr 2026 04:00:52 +0000
Manifest next update: Sat 18 Apr 2026 04:00:52 +0000
Files and hashes: 1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: iaRLtKucPOuR2BMjEYbP2/YtIjg31mj9RTlpLn2saCI=)
2: YTHqy1jXNV7dNzrAO_RbGYRTCcA.roa (hash: zJ9iDYD1yuxkbyK8khRTA4UqxwT49qevZssCV62H0OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:46:50:bf:fa:ae:1e:48:8f:df:47:1a:0b:66:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Validity
Not Before: Apr 17 04:00:52 2026 GMT
Not After : Apr 18 04:00:52 2026 GMT
Subject: CN=7fe0484d9b4e76c8b8f5b4886ce52f8040674264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:46:87:57:af:93:94:98:19:fa:d9:d4:f8:
56:54:88:44:73:b5:42:a0:d9:80:99:ad:d3:e5:87:
69:f8:e1:b8:88:4b:ce:67:5c:fd:78:29:9d:60:4b:
9e:9e:51:ee:1a:fb:4d:0f:28:d0:e3:c1:25:0f:2f:
aa:b7:b1:37:ed:bc:5f:9a:bc:5c:d4:42:02:5a:21:
c6:a3:4c:24:83:ef:29:35:05:7d:9f:60:12:b0:30:
03:3f:ad:8f:12:49:26:07:6e:2f:51:a1:79:7b:05:
cd:88:1f:38:6f:de:71:e5:fa:7f:9c:69:94:ec:58:
73:0f:38:8b:25:37:4d:19:56:47:08:f3:08:46:7c:
c0:80:ce:f0:62:f0:c7:8a:8b:ae:6b:47:b0:70:da:
67:50:4c:7b:7b:49:80:b7:43:fc:fb:aa:d1:64:68:
9f:16:cc:4f:8f:ad:b9:34:35:b9:98:4b:07:7d:54:
31:67:5b:03:6f:cf:d7:4e:2c:32:11:72:f9:85:57:
fd:48:e7:e2:11:7e:37:ab:f3:f2:c4:c5:19:99:a7:
97:a5:a5:c1:90:61:14:00:3a:8b:1f:35:01:4d:e5:
33:9a:43:3f:6f:8f:c1:4c:c4:56:fa:29:e0:b3:f2:
c1:c0:ec:a6:95:69:77:70:ec:41:ee:c4:d8:5f:4c:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E0:48:4D:9B:4E:76:C8:B8:F5:B4:88:6C:E5:2F:80:40:67:42:64
X509v3 Authority Key Identifier:
keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:22:c9:10:10:ef:92:1a:68:c8:87:8e:a5:3a:2d:e1:51:67:
02:35:19:b0:e0:e3:12:34:15:c6:53:71:5a:a0:fb:d6:c6:a6:
92:a0:10:3d:d9:a8:bd:7d:3d:49:40:1a:a3:27:d2:b5:f3:33:
e7:b4:50:a3:af:35:06:38:3d:d6:3f:b3:63:d9:48:1d:fd:c2:
95:7a:5d:68:07:f1:fa:c6:91:85:37:20:f6:c4:25:53:a4:da:
22:ba:d9:c7:a3:5a:48:d0:66:47:b7:22:41:82:8f:a3:af:54:
4e:5f:05:7e:fb:6e:40:52:6a:4d:27:28:30:fc:c8:3a:99:14:
5b:68:c4:cc:73:05:23:9a:38:d3:bf:36:0c:f8:b9:f9:74:bd:
59:77:1b:69:ae:bc:f0:3b:e8:dc:ab:c5:77:e3:c3:4c:3f:08:
92:95:fe:2e:5b:6f:7d:b6:23:2c:d4:51:f0:0f:b8:76:d3:5c:
0c:4f:a5:44:88:e2:6e:7e:0e:a9:a3:b2:3b:5a:a0:b0:1f:63:
35:2a:34:c6:93:0d:57:80:50:c6:4b:05:f3:0f:cd:0d:25:a5:
14:ca:dd:cb:5e:8f:cd:1e:48:0a:2c:dc:f3:1b:43:c2:3b:10:
0f:73:f1:cd:34:5e:87:4e:96:69:a1:62:56:6b:2c:36:3e:f2:
e9:fb:e4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:28 2026 by rpki-client