Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier: ehZ7so9sgxurjkrOOtKcOY5eVYGBbrFCkV9O47FfEcQ=
Subject key identifier: 6B:15:2C:C9:5B:0E:3C:6E:0C:28:C0:DD:93:79:22:FF:6E:2D:76:2A
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial: 019DA4F8D1957BF0D71C186D9E0D4521C99C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 09:01:03 +0000
Manifest this update: Sun 19 Apr 2026 09:01:03 +0000
Manifest next update: Mon 20 Apr 2026 09:01:03 +0000
Files and hashes: 1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: Gs/AafYj2Emv95BXNSS7FJ/CLGRsSRzXr09PeTjMGbQ=)
2: azb1_WO3_kwPuSAgYoVTIRPk0go.roa (hash: 1/nAUytly79O0AERwCaGs88tFerHBFBw3HoH4Qov+gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:d1:95:7b:f0:d7:1c:18:6d:9e:0d:45:21:c9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Validity
Not Before: Apr 19 09:01:03 2026 GMT
Not After : Apr 20 09:01:03 2026 GMT
Subject: CN=6b152cc95b0e3c6e0c28c0dd937922ff6e2d762a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:79:02:20:fc:21:30:c5:e5:04:b1:31:f8:
0b:55:d8:3b:fd:de:b2:c9:e5:2d:5a:79:7f:35:7c:
14:d7:9a:bf:ce:ed:ef:e5:78:81:8b:01:5b:90:8e:
1e:1e:0c:26:3c:e5:43:a2:59:f4:78:bd:56:43:78:
9d:df:d3:d3:92:fd:1a:90:b4:3c:2a:f4:6e:60:72:
4f:4d:4b:3e:fa:7e:b8:fd:1a:df:98:ed:d9:a6:21:
0b:90:69:0e:c6:f3:98:0c:dd:4e:77:5e:b5:20:58:
6c:e7:dd:89:a3:6c:b7:5a:d0:05:49:1c:64:21:56:
74:f4:3a:4f:03:8d:62:b6:68:ff:54:e1:74:1e:15:
d7:6b:3f:30:14:4b:10:25:8f:3b:a0:1a:f7:55:f3:
d9:36:88:11:e4:2b:0f:7a:c1:16:f2:55:06:98:d7:
eb:90:12:b2:2e:53:49:5c:f2:76:a1:c8:b7:d9:cc:
5b:6f:88:25:1f:1c:2e:32:d3:0d:57:4a:11:11:e1:
50:0f:64:03:34:54:91:29:38:56:50:fe:bc:e3:04:
7e:84:f3:b3:1f:20:6c:3d:59:5e:57:56:5f:a0:e6:
e7:02:9b:21:00:f6:44:8d:3f:15:74:05:de:03:9a:
a2:33:64:41:24:7f:94:8c:b0:6c:c3:60:04:73:22:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:15:2C:C9:5B:0E:3C:6E:0C:28:C0:DD:93:79:22:FF:6E:2D:76:2A
X509v3 Authority Key Identifier:
keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9f:d5:28:00:69:56:2d:60:d3:09:0f:9c:0c:0d:2b:87:b6:
4f:1a:97:9f:88:92:ec:57:58:71:e3:ea:d3:6f:74:ea:ec:31:
d4:42:be:1d:60:f3:ee:b3:bf:ec:39:da:42:6b:a4:1d:08:f8:
97:86:c2:8c:af:f8:e3:ef:e3:b4:5e:60:1a:cd:bf:b3:b0:18:
a0:bc:b1:68:d9:1c:ee:b0:e5:63:a6:e6:20:38:5f:8d:a1:c8:
37:6c:78:a0:10:b2:18:7a:70:07:25:24:94:84:33:13:b2:55:
cc:b9:27:7a:af:09:8a:0b:11:be:01:22:53:c9:d3:b5:fb:33:
a8:ef:be:3d:67:3e:fc:ac:fb:54:33:15:e4:ad:83:4d:9f:c1:
2c:ee:b2:df:c3:f6:e7:10:0d:78:21:8f:f1:71:f8:9b:56:88:
27:b5:a8:1a:11:1c:7f:ed:f1:cf:a4:cf:21:59:35:5f:40:79:
23:13:8f:01:2d:97:f6:15:df:68:22:c3:2d:c6:be:94:32:2a:
86:71:76:a4:6f:aa:ce:c2:f2:1d:b1:db:c7:7f:cf:e7:a8:2e:
2f:0f:3f:fd:81:a6:3c:fc:04:44:b1:90:fa:cb:19:06:8b:3e:
a7:f0:15:1c:cb:ea:98:9a:b3:fa:c5:7e:8f:1c:8c:d1:2a:92:
0c:6a:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:28 2026 by rpki-client