Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json)
Hash identifier: ATaq2DmmP+e10OejwXslH6BYTLLLM/tMzVZghrWCQ9M=
Subject key identifier: 1C:46:3F:5A:59:2F:2E:FB:75:39:92:92:70:E8:39:23:C0:C2:4F:66
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial: 019D9AE36A61837C82494921D306DAE19B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 10:01:28 +0000
Manifest this update: Fri 17 Apr 2026 10:01:28 +0000
Manifest next update: Sat 18 Apr 2026 10:01:28 +0000
Files and hashes: 1: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: My7gFqGacPj8QWPpqWR0YouktrduJVQCMxX7aW0cG5M=)
2: gArRCC3q1YnlfTTgUixtQVGvcFs.roa (hash: narCCTYRY9LX6p6g8xSiiHiFz+JGuLFkwOfUQUNN3Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:6a:61:83:7c:82:49:49:21:d3:06:da:e1:9b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Validity
Not Before: Apr 17 10:01:28 2026 GMT
Not After : Apr 18 10:01:28 2026 GMT
Subject: CN=1c463f5a592f2efb7539929270e83923c0c24f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:58:1c:8d:95:cc:5c:98:f2:c8:4e:5b:71:
a7:88:f5:b3:0c:d3:6a:77:08:5e:2b:d4:19:db:eb:
f4:d2:c8:85:08:35:d1:42:0a:e7:1a:3e:19:3b:65:
c4:5b:c1:b7:79:19:df:f8:92:24:17:e4:9b:d6:aa:
bf:39:a2:ae:e7:60:28:4b:4f:2f:dd:ee:e5:3e:23:
99:94:59:d3:9f:3e:9f:5c:29:1f:f9:ef:47:df:9a:
61:c1:9e:9e:2e:7e:b3:25:31:27:25:68:c5:51:38:
a9:b6:c7:b5:5d:f2:7f:ce:3b:91:f6:b3:7f:bd:9f:
16:da:f8:5a:49:d0:cc:25:20:79:36:85:50:57:7a:
58:d1:42:e1:6c:54:b5:9a:dc:70:da:cf:94:0c:43:
a7:1a:22:45:44:57:8f:38:27:f4:1a:a4:a0:8b:c8:
4b:3b:f0:fb:02:f7:93:00:e5:cd:32:15:5a:c0:02:
24:86:0c:c2:d7:b9:97:bd:54:a5:8a:59:ac:a0:e7:
21:46:69:e3:7d:32:c0:21:a1:d0:7c:e8:d1:d7:cf:
58:be:af:82:02:d1:ac:a0:33:9c:ca:f2:10:1d:18:
c7:85:07:07:da:ad:fd:b4:68:64:b4:ec:2d:0b:fd:
16:e7:a2:91:ea:f7:28:63:a4:00:ea:e0:22:ae:b4:
fe:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:46:3F:5A:59:2F:2E:FB:75:39:92:92:70:E8:39:23:C0:C2:4F:66
X509v3 Authority Key Identifier:
keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:87:0b:01:c3:06:0c:61:6c:cb:69:03:50:d4:3b:a1:86:a3:
3a:60:d6:4a:15:84:a1:79:46:fe:95:ab:a9:cd:34:62:b4:47:
ff:27:f4:7b:07:f4:71:c2:04:2f:e0:9e:f4:48:cf:a0:eb:72:
12:00:46:a7:88:4e:33:ab:9a:fd:7e:2f:c4:3b:ce:00:ba:59:
fb:c6:0c:49:60:24:22:f1:a7:aa:e4:4a:e1:20:c5:f8:e1:e7:
4e:e5:33:f1:67:82:8f:2f:a9:15:ce:5f:02:d6:72:6f:7d:a5:
ae:81:3b:ac:75:0b:ac:c5:e5:71:dc:2d:e4:03:c6:08:50:98:
2f:78:e6:30:97:64:f6:02:67:a2:ee:4d:98:bd:74:8b:c5:12:
5e:1e:dc:37:e3:cd:22:66:2d:0f:8a:2e:ae:4c:8b:10:8f:42:
6d:5f:68:fc:e3:1c:1b:2b:2f:ac:a7:6e:d3:94:02:7b:28:29:
c1:e5:76:31:c5:78:98:e9:78:df:f5:2f:0a:3e:c7:50:da:89:
e6:38:81:94:19:93:b0:5f:7b:5e:88:8e:3b:d2:d6:e1:e7:53:
1e:9d:93:92:7e:38:e4:48:e1:19:6c:2d:97:8e:e0:e6:c6:0b:
1c:65:78:d9:a2:55:1e:12:98:ee:7a:af:88:7b:42:6a:b5:d5:
e3:ca:73:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:37 2026 by rpki-client