Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File: 4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier: xQb4c9up/zMRzwQH5fRWugMecGQdyKfHta/h2TUcRqc=
Subject key identifier: 11:1B:C9:2B:11:57:04:51:B8:14:47:B3:0B:C8:12:C1:D6:4B:0A:BC
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial: 019D97741F33E0E0B50B79DE4113608C4082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number: 09C9
Signing time: Thu 16 Apr 2026 18:01:02 +0000
Manifest this update: Thu 16 Apr 2026 18:01:02 +0000
Manifest next update: Fri 17 Apr 2026 18:01:02 +0000
Files and hashes: 1: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: tCa3Z0CWBJLVFpb1lhVtYzdyonq9uXOvhj/LeBJy5co=)
2: u7z3f5MyS6Pn44Y8ceWPcFJRqYE.roa (hash: wWTcWByT+kygfV9+kd/6R30QexArvjCPKfIUysPXkgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:1f:33:e0:e0:b5:0b:79:de:41:13:60:8c:40:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
Validity
Not Before: Apr 16 18:01:02 2026 GMT
Not After : Apr 17 18:01:02 2026 GMT
Subject: CN=111bc92b11570451b81447b30bc812c1d64b0abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:7d:c1:6c:85:3c:ab:2e:d6:82:1b:e4:0b:
45:b3:2d:e6:2b:9c:8d:d4:ad:aa:d5:a8:74:5b:65:
32:9a:26:9d:aa:6d:70:ef:e2:2c:fd:f8:b0:b4:ba:
ef:7b:ce:ad:82:d6:7a:ac:89:9c:3d:cc:e0:ed:0b:
a4:c5:46:24:3c:40:65:8c:39:cf:46:f4:02:19:00:
05:5c:09:ea:c0:77:b9:b8:e6:e1:1b:43:0d:8c:03:
f2:a7:a8:43:cd:a9:6b:99:99:37:06:43:62:76:e8:
28:4a:fa:cc:53:e9:02:4c:16:06:54:45:f7:96:92:
de:7b:38:1c:7a:70:41:82:e4:b6:39:0f:5b:35:c3:
84:2f:b2:ca:30:62:6c:d8:f3:a4:55:53:71:61:b6:
32:15:2d:fd:1e:22:b3:c4:df:b4:b3:77:d0:16:f3:
72:d5:34:ba:97:09:37:5b:6e:cd:81:95:62:4e:ec:
93:bc:8e:7a:c5:ea:a9:db:95:eb:b5:3e:0d:39:e9:
b0:28:fa:b1:80:52:0a:6b:44:40:72:4f:b8:36:4c:
d9:a8:52:d1:1c:6f:f4:c1:a8:4d:77:de:c2:eb:bb:
44:f3:94:92:b1:bd:bb:b6:b0:83:8a:a7:f1:6f:dc:
5d:ff:51:1f:44:d7:8b:f1:d9:be:c0:36:50:db:a9:
c7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1B:C9:2B:11:57:04:51:B8:14:47:B3:0B:C8:12:C1:D6:4B:0A:BC
X509v3 Authority Key Identifier:
keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c1:b1:bf:ff:81:b0:e2:6e:10:77:16:fc:73:b6:06:b6:a4:
6d:4e:ba:a4:88:62:32:15:66:d6:8f:f8:b4:3a:aa:88:f4:87:
12:b4:22:4a:56:9c:8b:d0:81:f6:b7:ea:74:ef:39:ff:c8:70:
44:0a:16:f7:4e:c9:30:24:40:c7:a4:df:4c:2b:67:d6:36:af:
33:ec:19:3d:86:35:aa:b6:43:84:2c:ba:3b:ff:f7:14:12:f1:
cb:ef:43:02:9e:ea:de:8e:1d:18:14:93:ff:26:e1:9e:4e:a6:
9b:72:52:6f:bf:8c:89:b7:cb:05:f3:0c:3e:c2:ff:19:97:08:
f3:28:b7:e8:21:1d:aa:0d:a3:1d:ce:12:9d:a0:26:98:1c:c6:
26:6e:be:65:e3:82:07:d2:03:c1:a5:a6:98:16:12:47:f3:19:
e1:9b:7e:80:b8:21:c7:d7:1f:a8:bc:54:85:38:2d:bf:b6:78:
74:00:b1:b1:2e:a4:f8:27:cf:e9:10:34:99:31:a2:d9:b3:b6:
54:3b:ad:68:ff:4d:cc:02:d5:a3:b4:c6:34:87:1b:e1:d8:4b:
02:93:48:74:2e:27:a9:32:65:4b:56:1c:d8:15:40:08:ba:56:
81:5b:02:b4:4c:82:de:59:99:d4:e0:f8:94:f2:b1:0c:a9:12:
cc:17:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:27:24 2026 by rpki-client