Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
File: _4MmzOvF_DL70ONP7n85u6iPuaI.mft (raw, json)
Hash identifier: 1lK/nCsKSYLcPoF2oAjhdJ2XhUShkFry6c+yJffvJhU=
Subject key identifier: 97:D9:F1:99:A4:D1:D6:91:D4:11:68:66:6A:A3:7F:BD:1D:0E:7A:37
Authority key identifier: FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
Certificate issuer: /CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
Certificate serial: 019D99D089C02CD315A8E9FFE4B84A2B69C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
Manifest number: 1441
Signing time: Fri 17 Apr 2026 05:01:13 +0000
Manifest this update: Fri 17 Apr 2026 05:01:13 +0000
Manifest next update: Sat 18 Apr 2026 05:01:13 +0000
Files and hashes: 1: _4MmzOvF_DL70ONP7n85u6iPuaI.crl (hash: s7vbxxIluW9tci9ev51TqGK00GQ6vP0QE9LjDVn0Ads=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:89:c0:2c:d3:15:a8:e9:ff:e4:b8:4a:2b:69:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
Validity
Not Before: Apr 17 05:01:13 2026 GMT
Not After : Apr 18 05:01:13 2026 GMT
Subject: CN=97d9f199a4d1d691d41168666aa37fbd1d0e7a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f2:2b:39:c3:3b:bb:9c:05:8c:63:4d:58:fd:
21:c7:6b:29:14:d0:bc:c9:9e:92:a6:d0:77:bb:76:
ac:c1:be:7f:31:2c:ec:67:6c:54:61:d4:0d:3e:c9:
15:01:fe:fb:9b:d9:f4:32:18:ad:13:2f:b5:51:23:
33:03:92:fe:fc:ae:63:a1:13:04:1f:b3:c8:fb:24:
7d:c8:0b:15:6e:53:7f:3d:99:b1:7f:59:47:ba:a2:
12:13:8a:10:83:bf:5f:cf:2a:69:b8:92:65:34:bf:
ce:45:1d:ae:0b:cf:2b:24:4a:2f:0a:a2:4c:c6:c5:
39:43:65:11:3d:7e:0b:4b:cc:f5:1d:b5:49:ff:47:
a8:2c:c6:f8:f6:c9:d3:cc:93:bd:13:2e:1e:57:77:
77:fb:75:f3:a4:b5:11:b5:ab:c1:ad:5e:34:23:c9:
f9:cb:5c:12:70:aa:75:ce:59:c4:a6:18:1d:70:a8:
80:14:2b:a0:8f:22:26:c7:d5:8c:45:e5:7d:49:41:
69:85:06:fb:79:9a:ec:76:fd:bb:e8:63:9d:e9:be:
c0:cb:45:74:07:26:d4:01:7d:d4:3f:43:7d:20:74:
02:b2:2c:ad:27:a8:50:28:a6:a9:dc:89:c3:ec:96:
0d:22:7b:a2:b7:db:7f:cf:2c:8f:aa:21:21:23:24:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D9:F1:99:A4:D1:D6:91:D4:11:68:66:6A:A3:7F:BD:1D:0E:7A:37
X509v3 Authority Key Identifier:
keyid:FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:85:eb:86:81:fa:20:ca:93:85:a1:4c:e3:9e:4f:fd:88:9c:
31:84:59:ed:12:70:fa:f1:53:3d:ca:e0:4d:c9:84:de:4f:ec:
65:d0:93:05:1f:51:4b:ab:f7:a3:33:d0:17:02:d2:e9:a9:ff:
f0:e0:f4:b4:11:13:30:b8:a4:38:ab:c9:94:d8:dd:6f:7a:25:
16:ef:37:fc:2f:33:06:7f:90:09:dd:3b:d7:cf:c0:af:cc:d6:
79:54:df:55:b0:dd:d7:3f:b5:5e:7c:f4:a7:cb:b3:ac:6b:2c:
69:96:0f:ac:4a:48:aa:e0:cc:97:dc:50:20:af:a4:8a:64:fa:
5d:94:81:23:7f:aa:2f:98:64:13:c7:cd:7a:9e:c1:4c:94:34:
56:16:81:02:60:f2:6e:45:16:29:fc:94:7e:76:e8:f0:f5:6a:
cb:e3:42:b9:3b:af:77:88:0a:00:fd:0e:0c:ab:2b:31:69:1c:
a0:09:f0:73:e4:c7:55:ce:0a:80:69:b4:06:28:e0:88:fa:7a:
9c:a7:7c:36:94:d3:80:5e:f1:a8:38:bf:00:6e:32:bc:b5:f5:
56:b2:ac:a5:7d:be:9d:41:2a:97:f3:4d:ec:a7:f0:e9:f0:a2:
0e:2f:e8:c0:d7:df:f1:4a:01:4a:1f:2e:4c:b1:58:6f:88:c8:
c4:02:21:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:17 2026 by rpki-client