Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
File: tRidnqgtX7tm1sEfGHYzR2A04N4.mft (raw, json)
Hash identifier: NMPBy70xydpNp4DwL+XCN1a7zgnEGxsgNxnfTWTXMms=
Subject key identifier: B3:A5:8B:0F:CA:85:80:AB:42:66:A8:3D:04:BD:40:9E:88:B8:D3:84
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Certificate issuer: /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial: 019D9AE29EEFE3760844476C12E28210ECFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
Manifest number: A4
Signing time: Fri 17 Apr 2026 10:00:36 +0000
Manifest this update: Fri 17 Apr 2026 10:00:36 +0000
Manifest next update: Sat 18 Apr 2026 10:00:36 +0000
Files and hashes: 1: 7GwQxSlC6XgRoIpTEwZKgVnWS-4.roa (hash: xTOxR17JVwPWxSBMYNixvTz0OcXATfB8jZao2sdgwZ8=)
2: PoRIN0dVSAqaAWKn9ELbCUPN7Jg.roa (hash: LsqKFis/T/54SQiHP5UPnUKT29GNEt5RyIpD8UjP9yM=)
3: TeVnupeK_YGYnRPsXm4BzJfTjS8.roa (hash: +to8DEmlcRGaEadfSEWc6hlZ2GarI7KNFF5xKs1DZR0=)
4: a73ilWUc_Nrs3Jl6BZxzTzmJLZs.roa (hash: WvDo87B2C+QVONEixLsbWJGXRyfPQL9c6V0kT+6W0SI=)
5: cwmNk6bauKUzUIBHxMYj4Ucw8iM.roa (hash: h5yQVWC+XIfRSSbHYLwBKmXd6G/qYJCUqPZaJnYQNT8=)
6: gCEAfeGtC7sCDWjwRgdE41W_tBw.roa (hash: shPX6M61gEwMPP1QY1pi1KXBEKTnDFJ7aoQzTSjSFHw=)
7: p3wpRRs-f7GQUm8KtIUlma6wjSs.roa (hash: 90E81RrURGxHLOrJQ2EQ5/Y8TtYWMesX5r41cRtv1NA=)
8: tRidnqgtX7tm1sEfGHYzR2A04N4.crl (hash: C7xHcUda1y0Egw1Pq3snA2S2FR32fSYkBwD9+DbcHj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:9e:ef:e3:76:08:44:47:6c:12:e2:82:10:ec:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Validity
Not Before: Apr 17 10:00:36 2026 GMT
Not After : Apr 18 10:00:36 2026 GMT
Subject: CN=b3a58b0fca8580ab4266a83d04bd409e88b8d384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:71:89:27:62:6c:5a:39:86:62:be:2e:67:
75:3b:d5:25:22:8c:c1:60:3a:fe:32:68:c0:97:26:
13:76:f3:4c:5a:35:1f:c8:c5:0f:6e:c6:16:c7:0f:
ad:fe:8e:38:0f:91:04:25:d7:ce:cf:6f:0c:6d:01:
39:be:51:8d:a9:bb:78:de:dc:f7:27:04:68:3b:a3:
11:9b:de:8c:af:e4:4c:9a:b3:03:c6:6d:de:3e:47:
90:24:6c:46:21:e8:64:92:45:7f:40:59:65:71:0a:
a0:e0:14:63:1b:8e:36:f7:a8:e5:89:69:8c:e0:75:
1c:a6:5a:d8:22:d6:0a:5e:1b:7b:c8:d2:d9:16:5c:
eb:ce:9c:7f:cc:6a:56:fb:a0:67:50:d2:81:32:be:
fb:f0:61:4c:3b:a6:e1:45:7e:e8:d0:a6:7e:1c:ce:
90:08:63:5d:c2:6a:e6:6c:01:1a:6c:dd:56:31:b9:
46:0e:df:3d:1e:d7:c8:3e:82:b7:7a:82:ae:34:84:
ca:8e:f8:10:a8:af:8f:0d:ac:e6:f8:5e:1d:fd:4c:
ee:49:e5:74:48:9e:86:f7:93:7b:79:f9:9f:7b:84:
aa:a6:38:4e:f5:57:48:0f:85:d6:de:d5:6b:ee:d4:
df:03:dd:c8:5a:b0:c5:77:9f:79:90:33:68:43:14:
b3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A5:8B:0F:CA:85:80:AB:42:66:A8:3D:04:BD:40:9E:88:B8:D3:84
X509v3 Authority Key Identifier:
keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:84:3f:df:57:43:ad:a8:39:22:d3:57:2d:e5:e1:f5:02:b3:
ae:e4:28:a8:c5:cc:aa:01:1a:be:95:56:3d:c6:2e:2f:3e:ae:
c0:e7:f9:3c:6c:26:10:fd:43:36:bc:44:db:df:19:6e:ed:b6:
90:e6:18:4c:12:b9:da:47:26:24:e6:ce:7a:f4:f9:aa:1f:79:
d9:bd:05:4f:69:bf:60:53:ac:b3:29:b6:c6:ff:d3:cd:c8:88:
28:c0:e5:69:34:d7:d3:78:85:9b:8b:69:28:73:a7:18:ea:34:
f9:c6:df:e5:10:63:5f:2e:17:12:12:23:00:76:3f:0e:1b:94:
a6:01:e4:6c:18:42:14:7d:9a:7e:48:a0:38:8e:ba:d1:02:6f:
56:3b:86:95:83:2f:4d:57:d6:84:54:fc:a2:ce:b0:d7:80:29:
b4:45:9f:c2:cc:70:0b:58:16:98:f9:7e:2a:7a:97:b9:a4:a6:
51:c0:78:86:e6:f6:60:99:c9:11:d8:f0:71:c1:98:e2:75:5f:
be:b7:b5:77:c9:d5:6c:87:fd:24:1e:c9:0f:85:e3:c8:80:0f:
bc:63:96:27:31:69:bb:b8:fd:21:4b:ca:ff:6c:23:ef:7b:18:
eb:11:38:42:6b:b2:c1:c4:7e:af:0b:07:ea:46:39:11:67:5a:
08:72:27:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:59:37 2026 by rpki-client