Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: d6Di7U3Ff35+j7tRqNVB49zuKdNvJwIs6uA3zs73l+k=
Subject key identifier: EB:CB:69:87:A6:E3:25:3C:A0:52:41:AC:8D:FC:D4:97:C8:7B:55:37
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 019D9962BCD0D6F60A18072847E75C919BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 1280
Signing time: Fri 17 Apr 2026 03:01:18 +0000
Manifest this update: Fri 17 Apr 2026 03:01:18 +0000
Manifest next update: Sat 18 Apr 2026 03:01:18 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: plc8u9wR8wAOnc/M086il0/FTPTCbiAddGN+WN2obtA=)
2: nqVRQY9OL-QYsG10ABRxkJgdhMg.roa (hash: wMAwtClt2rNSLlbeGnfkTll5PRaR6LFumc9JToEyja8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:bc:d0:d6:f6:0a:18:07:28:47:e7:5c:91:9b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Apr 17 03:01:18 2026 GMT
Not After : Apr 18 03:01:18 2026 GMT
Subject: CN=ebcb6987a6e3253ca05241ac8dfcd497c87b5537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fd:97:3a:c3:e9:cf:84:b5:bd:83:fd:59:f4:
93:ce:d2:2e:8b:3f:5d:f1:cf:88:6e:96:c3:91:be:
da:ed:51:b0:82:54:80:c1:a5:c8:6e:89:3a:96:56:
34:54:3d:07:6c:b2:e2:53:b3:48:a2:28:aa:75:21:
eb:c9:dc:ef:c2:d7:4c:f8:a2:ba:f9:77:96:bc:a7:
38:1d:ca:33:aa:fe:e6:83:68:4b:e4:ba:25:6e:e5:
4f:98:08:a3:0a:51:f6:e7:93:b3:95:be:ab:45:27:
30:dc:eb:e3:f7:67:4d:ca:15:ca:0e:8a:5d:f8:66:
4a:5f:d5:92:87:25:9a:5a:a8:c7:2c:e2:e0:68:1b:
2f:e5:67:57:61:1d:12:ba:9b:08:db:c1:d4:5c:de:
64:37:5f:61:e2:df:af:d4:34:ca:a6:0a:f2:c2:68:
47:de:dd:70:ab:f4:52:31:f4:7c:e3:f8:3c:bb:5b:
21:63:e8:84:40:58:71:d7:50:66:30:4a:69:46:3b:
35:44:9b:25:cc:34:3c:1d:fb:fe:a8:f6:44:a5:e8:
bb:18:78:01:c5:a4:da:23:71:0f:b0:10:12:f4:75:
b1:5c:7e:16:4a:94:9a:74:6e:80:4a:46:76:a9:cb:
bf:8b:95:91:31:35:23:3e:49:1c:ea:54:46:ae:d3:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CB:69:87:A6:E3:25:3C:A0:52:41:AC:8D:FC:D4:97:C8:7B:55:37
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4b:1a:fc:20:2e:15:0b:d2:a5:d8:52:bd:76:f9:f0:8f:ae:
1d:01:08:d6:12:26:33:24:53:7e:34:64:07:8f:c8:c8:92:ae:
43:4c:84:8c:9c:36:5d:11:da:36:59:d9:a8:89:2f:e4:6c:67:
be:46:b4:cf:14:03:93:cd:68:6f:f6:50:e5:6c:e3:61:a9:9f:
80:30:63:14:f2:ac:7b:25:28:13:df:82:9d:9c:c5:39:cd:5b:
43:e0:6a:cd:7d:31:e8:7f:65:6a:b7:fe:ab:2f:18:da:25:eb:
77:4c:a7:14:d3:02:f1:2c:16:73:98:0d:d7:5e:f0:fe:4a:89:
87:9f:01:97:b8:fe:2b:bf:79:6e:8a:85:65:0b:bc:f3:9a:4f:
83:2f:20:0a:7b:ea:75:68:7c:21:7f:89:0a:16:34:cd:83:bf:
f8:f8:ff:0d:81:d2:51:46:36:74:fd:34:b2:c8:47:d7:d3:31:
8d:10:40:f9:be:f4:74:1b:cb:d6:72:e1:ad:4f:e2:d8:26:fc:
22:b7:29:7f:85:59:7f:2d:f6:f2:2e:58:76:8d:bc:0a:14:23:
0d:53:32:48:4f:f2:fd:c7:4f:ac:71:be:60:b1:4b:88:19:1a:
2f:0a:8b:3b:a7:40:25:35:33:68:d2:bd:f7:b9:39:ea:22:9d:
c9:37:73:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:36 2026 by rpki-client