Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
File: _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json)
Hash identifier: wpSiZXFL3LkyJPMstHgCxwvVeDIGW9zPxFJgOgx9Sfg=
Subject key identifier: 9E:1A:2D:68:AA:A6:B8:34:2E:FF:86:4A:30:88:4D:55:A6:EB:44:0E
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial: 019D99CFE6E086402FDF28B727CAD1F12FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
Manifest number: 14A9
Signing time: Fri 17 Apr 2026 05:00:32 +0000
Manifest this update: Fri 17 Apr 2026 05:00:32 +0000
Manifest next update: Sat 18 Apr 2026 05:00:32 +0000
Files and hashes: 1: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: RmYmGfDvLOk6vOGh0/P69/YCDZj/nHv3yDuhD+uy40c=)
2: oXxloD6njLTbPU8cd4uQW4D9yL0.roa (hash: jZodZWVBC3KPHbgCzoujj4oDNgC3Pjsq3788f/bPMYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:e6:e0:86:40:2f:df:28:b7:27:ca:d1:f1:2f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Validity
Not Before: Apr 17 05:00:32 2026 GMT
Not After : Apr 18 05:00:32 2026 GMT
Subject: CN=9e1a2d68aaa6b8342eff864a30884d55a6eb440e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:fe:4a:ed:ae:71:72:7c:38:85:c4:f0:9a:
a0:a5:a6:19:c6:d0:69:ac:d6:e2:f0:a0:b8:18:2f:
92:41:0f:3e:55:f4:7a:b0:9b:99:cc:b1:88:d9:b3:
39:7a:b4:9e:ba:5e:30:c1:a7:a1:2f:59:19:2c:11:
a7:88:a5:da:b0:45:9a:15:7e:bc:aa:1b:fd:cd:92:
f6:58:c1:d7:04:2d:01:ea:f6:e4:b8:f2:47:89:da:
9d:94:5d:51:9a:de:19:72:e9:fd:1f:5e:48:aa:99:
19:e4:af:ad:25:01:a4:2b:b0:1f:bc:bb:d6:af:9f:
d1:67:ec:54:b9:d1:e6:14:b3:98:47:dc:69:e6:93:
16:ab:d1:a8:ca:be:d0:28:a7:68:29:85:5a:fd:38:
af:96:aa:1c:5d:ad:44:aa:70:4d:6d:2e:16:a7:04:
4a:53:0d:7f:e7:bc:13:0b:36:d1:2a:88:36:b1:f9:
4b:0c:7c:20:ef:30:47:cf:89:ab:94:e1:7d:eb:fa:
29:c0:16:f7:22:c7:26:91:21:97:57:87:97:e9:aa:
74:8c:0d:18:58:d1:db:24:3a:45:65:b1:5e:1b:af:
27:f4:74:8b:d5:7a:c0:78:c7:15:cb:22:47:0e:7f:
3a:e2:c4:00:38:99:55:0d:65:0c:9f:3e:2f:88:50:
b0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1A:2D:68:AA:A6:B8:34:2E:FF:86:4A:30:88:4D:55:A6:EB:44:0E
X509v3 Authority Key Identifier:
keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2d:f5:53:9c:34:18:f0:75:52:d9:e0:0d:a8:9f:15:58:b8:
f4:26:7f:14:ea:bf:c5:c4:5e:36:51:26:ff:f2:e3:e5:23:bf:
81:41:9f:78:62:99:12:14:af:18:a8:89:d3:58:7f:15:16:1e:
2b:90:d6:46:4f:a5:c2:82:09:14:7b:64:20:10:16:94:be:9f:
83:c5:5f:93:70:02:43:3a:5a:95:b4:80:5b:6e:f2:9c:67:0c:
20:6e:8e:38:6b:bf:d7:5a:d0:77:ff:bd:21:7e:a1:ba:2e:43:
6b:4b:d0:20:15:38:fa:c7:98:7f:58:0c:5a:86:c4:24:c7:62:
d9:57:78:15:ea:a0:86:e5:e4:17:44:40:71:1b:63:39:f1:6c:
38:76:c7:44:cc:0c:a0:12:df:96:87:80:a8:5a:cf:26:f4:dc:
bb:8e:9a:60:01:ba:97:21:36:d9:a7:8f:d4:3e:61:11:d8:87:
c0:a5:0e:d5:93:42:43:32:76:73:7c:58:6c:64:db:e7:1b:0b:
56:46:20:ca:57:8e:d3:6c:3b:ed:2d:ef:7e:ce:60:26:d9:6e:
ca:f9:de:d9:83:77:f9:59:ca:3a:54:74:c7:ef:f5:c8:d1:cc:
94:9f:13:e8:3f:10:d4:4e:d4:75:b5:28:b2:fd:e2:d8:11:6f:
19:30:29:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:26 2026 by rpki-client