Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: oVqeJEf6d3LTvTosO+LH2j5KEqMDYL3kDKAP52Mnpyo=
Subject key identifier: 6D:C0:1E:A6:EB:BA:4F:65:3C:88:CD:0B:DC:7E:43:6B:F1:D0:4F:01
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 019D97E187595ED4FC76136755F282CD4C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 12B0
Signing time: Thu 16 Apr 2026 20:00:32 +0000
Manifest this update: Thu 16 Apr 2026 20:00:32 +0000
Manifest next update: Fri 17 Apr 2026 20:00:32 +0000
Files and hashes: 1: nPVHMKh_KfMvRao_vET8GSNdB60.roa (hash: CNFNDT0hozsG/GOj4JydTWPL4u34Bu99WDiqKSdCSGY=)
2: nT0dZV9vpJOe4Ur34PRwza0i0vo.roa (hash: NbPGPMvzh32ZwAt9Bg1XTBpSWoDxY/0tDyiOFU+i+30=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: NOlNvr0st0OjBOH8w3H2FX5kTA8v216yCqp+2ttju+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:87:59:5e:d4:fc:76:13:67:55:f2:82:cd:4c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Apr 16 20:00:32 2026 GMT
Not After : Apr 17 20:00:32 2026 GMT
Subject: CN=6dc01ea6ebba4f653c88cd0bdc7e436bf1d04f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3f:a4:7f:a4:ca:2b:01:ae:e6:99:c7:c9:df:
d0:07:33:45:76:da:a4:8c:f9:6d:d1:bb:a9:12:93:
cf:ed:a9:db:3e:fb:bc:10:46:59:f7:42:6d:94:72:
99:72:42:f6:31:c8:68:02:9e:17:fd:bc:55:52:fc:
16:36:bf:e2:b2:df:06:ad:c1:7c:64:e4:86:65:8f:
18:8a:8d:37:94:5e:41:45:2d:48:06:51:81:86:ee:
c4:25:f6:dd:b5:87:59:ca:cd:f9:df:72:3f:37:ef:
66:d7:6a:ce:b3:5e:fc:21:7f:cc:02:25:b1:88:4b:
1e:52:29:f7:8f:48:cb:44:db:ed:c7:97:f8:5b:0a:
3d:5c:42:d6:80:4f:6e:d8:00:a9:0c:69:e6:ac:b5:
09:74:ab:18:e2:d2:ac:45:f3:d4:07:08:f9:dd:47:
17:93:1b:05:bf:14:b7:f3:51:64:9e:1f:8e:fa:d2:
c2:46:e3:25:ae:8f:37:a6:74:d4:d4:b0:34:2a:ac:
09:fc:45:43:d4:da:d5:d8:a9:44:bc:46:b7:f6:7a:
f9:b6:38:bb:45:03:f6:5a:39:6e:dc:f2:7b:e1:82:
e8:a2:73:82:62:51:4e:c6:9d:db:da:9e:ee:52:d6:
dc:15:f6:93:04:05:3c:c7:0b:eb:ab:5c:9b:f5:2c:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C0:1E:A6:EB:BA:4F:65:3C:88:CD:0B:DC:7E:43:6B:F1:D0:4F:01
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b6:6a:51:69:b8:8d:43:ab:d8:f0:2d:b0:81:4a:ac:44:59:
8c:f4:d7:5d:4c:d0:d9:6d:07:d7:72:eb:b0:e5:b4:2b:de:de:
d1:29:b7:c0:aa:ca:b5:cd:5e:66:b1:7e:8d:85:c1:e6:96:e4:
98:e8:e9:02:88:f5:a4:a0:58:05:79:f2:71:fd:f8:2f:c1:58:
27:90:a4:9b:fe:99:09:13:5f:0a:9e:15:b8:63:bc:26:56:d7:
d8:7c:88:05:71:d7:3e:1d:34:bc:d1:a9:2a:0d:c2:10:e7:c5:
a3:d6:2a:60:13:84:c5:fc:53:a5:99:b2:ef:80:49:a5:94:ee:
f6:48:a3:6f:0d:d5:72:40:72:0f:45:45:e7:83:34:89:e3:8c:
76:70:07:aa:f6:17:7e:6e:75:83:24:86:75:3d:73:65:1f:a5:
53:c7:3f:d8:a1:f9:52:6f:e2:50:52:01:61:92:e0:88:25:b8:
b8:10:71:e8:36:10:28:92:ff:60:88:38:88:3d:3b:f0:5c:af:
99:be:98:1c:74:bb:cc:d3:30:37:e4:f0:d2:04:f5:45:7f:5d:
1b:f8:e5:24:5d:2e:c1:ea:57:a5:a6:74:35:f2:55:ab:85:d3:
6d:44:ee:3d:1d:6e:75:b3:68:62:04:8a:07:08:a2:08:31:b8:
59:53:68:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:04:18 2026 by rpki-client