Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
File: 4COOIod_cwOWQAfOPjQG9frZSWI.mft (raw, json)
Hash identifier: c92DDIMqpFAbmypPPFAKaWKHFg6Pr07/tiybDdEyz1I=
Subject key identifier: DB:38:23:D4:F5:1B:B4:A6:43:EE:78:D0:A2:92:56:6A:A8:3F:89:5B
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial: 019D98F4B4BD4E46670432051D21DCE1D526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 01:01:06 +0000
Manifest this update: Fri 17 Apr 2026 01:01:06 +0000
Manifest next update: Sat 18 Apr 2026 01:01:06 +0000
Files and hashes: 1: 4COOIod_cwOWQAfOPjQG9frZSWI.crl (hash: cqLxAj6bULZ0Qs/I+eBnczVUtX/ohJmjmNpX8kizdPc=)
2: MzwLUabPMVpWUbhvtlyD-QzTVcQ.roa (hash: X0nH2HeW8oMQ0R4XVjts1kBv71dyXZYfSTlTWrarM3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:b4:bd:4e:46:67:04:32:05:1d:21:dc:e1:d5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
Validity
Not Before: Apr 17 01:01:06 2026 GMT
Not After : Apr 18 01:01:06 2026 GMT
Subject: CN=db3823d4f51bb4a643ee78d0a292566aa83f895b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:94:fc:0b:21:6f:d4:af:7f:88:fb:88:75:
f4:c6:99:30:93:8d:2f:2d:fc:b7:3e:85:9b:01:17:
4d:0f:e0:b1:24:9e:a5:a8:66:bc:6f:9e:b0:0c:de:
1d:b1:c0:63:c4:87:07:c4:36:a6:e0:40:c8:98:09:
d4:aa:05:9d:de:71:f0:50:a0:47:58:50:da:8c:aa:
29:f9:2b:b1:3f:1b:a2:a8:ba:99:a4:eb:a3:74:b1:
e0:35:b1:75:34:63:e4:50:6c:57:1e:60:2c:b2:8a:
1f:56:bf:ca:80:fb:93:5d:b8:93:22:f1:96:d6:84:
51:82:f4:49:a8:7e:04:27:be:7b:3c:3d:95:0c:91:
77:6b:ae:aa:4a:d5:12:99:24:0a:16:3a:80:9c:55:
b5:f4:7e:83:06:7e:47:59:04:97:0a:d2:c7:d1:1b:
70:0a:c4:bd:4f:f6:af:4d:e2:b5:8d:ee:7b:f4:ab:
22:f3:09:b9:ab:4f:96:47:18:76:dc:a2:78:5c:c8:
eb:9a:a9:27:63:38:d2:6e:f7:e6:dc:e2:28:cf:55:
ca:5e:07:6f:58:9f:49:f5:bd:a8:38:fa:67:76:d2:
15:4d:36:0b:b0:54:86:37:e8:6f:6b:1a:18:47:aa:
21:e7:ea:96:9a:6b:55:b6:58:b0:0c:fb:85:0b:8f:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:38:23:D4:F5:1B:B4:A6:43:EE:78:D0:A2:92:56:6A:A8:3F:89:5B
X509v3 Authority Key Identifier:
keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5f:4e:b8:93:7b:92:59:91:a4:69:69:20:2e:94:08:ac:96:
c5:c3:3e:10:60:84:b7:ad:27:40:6a:09:d2:a3:bb:a8:2b:13:
2f:4b:6a:b6:3b:72:0c:25:46:19:3e:6a:8a:89:8d:dd:8a:4f:
6e:6b:5d:ad:e2:90:91:1e:53:f3:a6:df:bd:ac:c0:6f:7f:3c:
91:f4:59:9c:47:71:c7:a1:f3:05:29:72:c0:c2:f0:ea:ba:15:
65:a9:20:6d:d2:b9:eb:0d:f5:97:c7:be:4a:36:d6:03:c8:1d:
41:08:6b:5c:6c:6e:bc:45:b6:91:aa:9f:31:33:3f:ec:b4:b0:
7b:00:da:fb:55:56:6c:1f:68:cb:40:c0:7d:c3:3a:44:f4:02:
c6:98:c0:c7:3c:0b:9f:f3:44:93:14:67:7d:48:e9:53:a0:c8:
80:6f:97:56:b9:ee:71:f4:ab:14:19:81:6b:de:c1:14:7b:d7:
59:16:d6:2d:4c:fc:48:f8:b5:8e:94:7d:79:f2:6d:b5:0a:6a:
ce:6d:56:4c:10:1c:39:79:7a:a2:df:c1:96:f8:00:03:61:ae:
41:e6:58:34:09:9f:f3:8c:0e:e1:d1:b5:e8:15:cb:c5:c1:2f:
54:6f:4f:c1:44:6f:6c:db:84:c8:99:f9:b9:04:c9:36:52:1c:
53:24:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:40 2026 by rpki-client