Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier: 0L0Zq2Hk3dVUs8BKtudxc6S1oQygT9KHgzClJyzSilU=
Subject key identifier: E7:EF:87:13:B9:19:21:4E:4C:D1:B4:DD:28:A8:68:FE:80:36:C3:E8
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial: 019DA41C8197390C2B29120842B7B26B0AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 05:00:24 +0000
Manifest this update: Sun 19 Apr 2026 05:00:24 +0000
Manifest next update: Mon 20 Apr 2026 05:00:24 +0000
Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: Q1gq17z4A0GRsw/0qESxK3flsETDoT5cdQbnRkpk8CA=)
2: SZ7uQjj18-cU4bIpWv5dSgIvGBE.roa (hash: rmE3xiiuA8FInWGbe7SdLUBpAe5mfXQkxmyusGShZtQ=)
3: XphaguuWFSP8UQVU9jupgKQKPTw.roa (hash: 7KRxLds07r+kpPQbo12VWuWgRVl+sWP2XMsAOWnoAcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:81:97:39:0c:2b:29:12:08:42:b7:b2:6b:0a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
Validity
Not Before: Apr 19 05:00:24 2026 GMT
Not After : Apr 20 05:00:24 2026 GMT
Subject: CN=e7ef8713b919214e4cd1b4dd28a868fe8036c3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:83:02:15:ae:b7:01:49:80:1e:b2:3e:7a:
3c:44:bf:b4:d6:8a:3d:eb:10:e9:75:84:6a:9e:60:
04:8b:34:34:17:ff:8b:22:af:f3:0d:41:f2:15:bf:
d1:4f:20:6b:b4:f6:fe:a5:09:89:6e:7f:20:0a:8a:
5f:87:9b:ab:98:c8:f7:6f:5e:4d:83:4e:96:94:fa:
6f:62:0a:23:45:86:16:b2:7f:60:75:bc:06:29:40:
6f:c0:c2:e3:6c:21:10:2c:e4:5e:3a:2d:73:b7:5b:
fb:ae:59:16:f0:5a:82:b0:c1:05:33:8b:0a:48:75:
ae:01:b9:d5:32:d9:59:c1:e4:28:da:ee:97:09:0f:
69:8a:2e:97:f3:ac:d8:ce:8e:85:78:66:98:27:93:
dd:1b:ad:c0:26:22:57:8d:62:2b:9c:89:45:95:f9:
e0:aa:44:59:1e:0b:88:26:b6:df:a1:6e:9b:47:f0:
ef:27:8f:26:4f:5c:a9:8d:9c:51:e7:48:80:fa:50:
d6:4d:ac:82:a9:d9:1e:f5:2c:bb:d8:ec:4f:c1:63:
5d:e6:26:e4:17:d8:bd:7b:f2:99:75:af:f0:9f:29:
2e:b3:0f:f1:f6:fe:10:52:a0:4f:59:8f:81:68:e4:
0b:c5:bb:1a:cb:a6:96:52:a5:27:0c:0d:eb:34:55:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EF:87:13:B9:19:21:4E:4C:D1:B4:DD:28:A8:68:FE:80:36:C3:E8
X509v3 Authority Key Identifier:
keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e8:a4:5e:ad:66:12:95:e9:17:e8:1c:04:55:c3:d5:e6:e8:
bd:dc:43:82:a5:c9:89:c3:35:a5:59:ad:f3:0d:fe:eb:69:eb:
a4:cd:2b:bf:f0:e2:78:77:5a:fe:80:f8:b5:f5:46:c7:e8:75:
8f:8e:5e:67:38:c4:a0:bc:9a:d8:93:8b:4c:c2:5d:c6:a4:49:
37:b4:4f:7e:2e:ce:b6:85:71:07:bd:0f:e6:52:0b:57:68:eb:
17:ef:6d:b0:43:1a:7f:91:42:45:57:57:63:98:26:05:5f:95:
12:8c:0c:7d:5d:4f:d6:0b:39:b0:c1:d1:f3:4a:5c:08:7f:fb:
10:29:d4:7d:e7:ee:4a:8f:89:38:04:10:49:e1:11:a5:ad:0b:
2f:30:fd:c7:95:88:3e:cb:dd:7f:f1:a2:3c:07:47:08:c8:e4:
73:61:35:6a:05:12:0f:1c:b3:38:b9:b5:bb:2c:a3:84:24:29:
70:2c:3c:70:fc:38:8d:66:a7:a9:cb:bc:2f:79:59:42:15:28:
72:9a:27:92:12:64:70:f4:ea:92:87:49:6f:b9:d0:50:6e:3c:
16:33:10:56:a6:e8:79:92:47:f4:a4:30:70:a8:a9:bb:45:ef:
8d:27:75:e4:a4:ae:16:ad:e5:59:20:ad:c6:d9:ec:6d:d6:7d:
28:b9:e7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:22 2026 by rpki-client