Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
File: 4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json)
Hash identifier: k8POpcwlC+NFTxUGg/9eupU5NCcPBMu56VDIbfOGqFs=
Subject key identifier: A3:AC:D0:EB:18:64:8D:FE:A9:94:45:8D:F2:A8:75:F5:16:E5:26:10
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Certificate issuer: /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial: 019D9A3E1BE2C49A448D698100A4319D6298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
Manifest number: 0D8C
Signing time: Fri 17 Apr 2026 07:00:54 +0000
Manifest this update: Fri 17 Apr 2026 07:00:54 +0000
Manifest next update: Sat 18 Apr 2026 07:00:54 +0000
Files and hashes: 1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: pp8PMi5SGxEECrf6YHM7p49VumZlEvfHphWixp27n2s=)
2: XexrTT-WjOfF1IH0hIaeXZfiLag.roa (hash: HDA8bu6O9RqOeUyNIrj9FwIn/BuM4ZQvluzThKczOzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:1b:e2:c4:9a:44:8d:69:81:00:a4:31:9d:62:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Validity
Not Before: Apr 17 07:00:54 2026 GMT
Not After : Apr 18 07:00:54 2026 GMT
Subject: CN=a3acd0eb18648dfea994458df2a875f516e52610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:c5:a8:f0:5e:38:d6:f4:20:de:b9:a9:3d:
23:61:7d:74:b1:e4:3a:11:b6:f0:8a:00:b1:7e:e9:
c1:7d:3c:93:14:ad:93:ec:99:f4:da:d2:2b:7e:1a:
20:78:2f:e9:0d:0f:e6:4f:bd:20:e1:10:25:09:b5:
a3:52:13:33:33:71:4e:b6:b5:0f:7f:e9:bb:57:71:
2f:1e:8f:c7:7a:ec:a8:56:16:4a:be:73:35:4d:eb:
d7:01:06:31:d1:b0:51:31:3b:e2:e7:d7:42:4d:76:
52:2b:68:39:5f:e1:9f:ff:35:a2:45:0f:96:ce:93:
b6:f6:c7:42:2f:9c:4c:84:cf:e5:dd:ff:58:09:40:
1f:9e:4b:09:d6:e9:3d:15:e9:6a:75:6b:74:ea:27:
24:d4:86:cc:45:7c:a0:e8:b8:e3:fc:e0:bc:49:b8:
21:80:f0:ea:78:60:b1:93:e1:f3:c3:b6:a2:f7:65:
cc:ea:c8:f0:b5:a4:7f:04:11:3e:2a:94:ba:5e:44:
10:01:ba:02:36:01:6e:d5:a4:f0:70:3f:74:2a:c0:
00:4d:ed:ed:ec:2a:b6:f4:16:1f:0f:74:7e:34:25:
98:56:14:9d:24:a5:86:8d:4a:22:70:ca:61:d0:1c:
d9:8d:de:8d:3c:a8:c6:4f:d7:6f:8a:c5:45:9d:ba:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AC:D0:EB:18:64:8D:FE:A9:94:45:8D:F2:A8:75:F5:16:E5:26:10
X509v3 Authority Key Identifier:
keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cd:1d:ad:23:b6:78:e1:bb:c2:1d:91:9a:03:d1:66:c5:5d:
76:a5:0b:8f:62:ba:d4:95:4d:4d:ae:40:a4:9a:5f:d4:93:ce:
e2:c9:3b:24:f0:b1:6f:e6:87:9b:c5:b3:b1:7c:c6:4c:87:5f:
e8:5d:f5:11:30:a2:0d:43:1d:71:d0:a6:e6:3f:69:d6:fc:65:
36:59:e1:52:04:ab:ca:e2:7a:f6:24:9c:66:b9:a9:39:41:7c:
0b:d1:ae:13:1b:4c:3a:ca:6d:e4:ea:5b:8a:0c:1e:fe:24:8d:
2d:64:7b:a9:62:e7:f9:95:1d:0f:a5:01:b3:f6:fa:10:62:b5:
d6:c8:93:10:85:4b:47:9d:08:86:47:d4:3b:b5:16:1f:55:d2:
c1:4f:76:a3:33:c7:bf:b5:8a:a6:b7:6d:9f:69:4c:2f:23:4a:
c3:67:a5:fe:74:50:20:56:44:68:1c:3a:62:c3:de:f9:de:a5:
8b:b3:ab:e9:58:3b:81:6b:a7:de:8e:d6:98:ad:f2:ac:80:2e:
4f:5e:9f:9e:ab:ba:04:83:93:50:3d:3b:81:56:cc:a8:e8:3c:
b6:c9:75:3a:e8:49:5c:cb:6d:bf:78:31:7c:6c:cb:0a:df:dc:
13:43:be:07:8a:6b:3c:6a:53:d9:bc:60:10:65:91:d4:75:fd:
53:ab:a5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:56:42 2026 by rpki-client