Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File: 4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier: VDBNeo7/KFsHIX+5SklOYvBOtqfFS4yrTxfTBvS1ViI=
Subject key identifier: D5:14:6E:2E:3E:B9:C8:43:44:C5:6D:EB:74:93:7B:96:11:3A:A7:8C
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 019D9BF534EB673375F82E00131C39515768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number: 07E9
Signing time: Fri 17 Apr 2026 15:00:31 +0000
Manifest this update: Fri 17 Apr 2026 15:00:31 +0000
Manifest next update: Sat 18 Apr 2026 15:00:31 +0000
Files and hashes: 1: 22Qs5ZZUH-o_UxeMTTaGlozw9ck.roa (hash: dzmFhhN9JFvpfi1wur97KqUtYf7OFbub2fPBQrwEANI=)
2: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: Po9V5ett4npoyDAxUAmCOCrRlTMjyK4swQFhjP7HGl8=)
3: OOmJ-RkbduxK-k7822kHHTnwfho.roa (hash: Zhhmx3+Bddmr+hDQFTAMK3LPfl5DC3igpcEZIPBCFZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:34:eb:67:33:75:f8:2e:00:13:1c:39:51:57:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: Apr 17 15:00:31 2026 GMT
Not After : Apr 18 15:00:31 2026 GMT
Subject: CN=d5146e2e3eb9c84344c56deb74937b96113aa78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:c8:a6:1a:50:2a:5d:73:44:4b:08:db:35:
5e:40:49:b8:9c:4a:99:02:b0:e3:2e:a1:a5:68:03:
de:93:9f:26:28:c5:cf:b1:3c:d3:d5:cf:62:65:f4:
58:3f:4c:5a:b7:64:05:e4:da:6b:43:48:b4:4f:f0:
6f:24:cf:27:b4:05:1b:9e:fc:ff:63:f2:a1:88:a8:
11:96:e6:6e:68:11:74:9f:f9:42:98:cc:fa:1c:38:
d7:d4:d6:61:df:5a:e3:be:16:69:d4:3c:a4:df:4b:
1c:20:c5:9f:6c:0c:47:03:81:98:24:ef:4a:40:cc:
14:9d:2a:3c:23:70:1c:4d:d6:36:66:f2:20:86:0f:
79:ba:56:37:dc:0b:1a:ff:d8:32:19:6b:27:d6:3b:
e9:2f:77:77:f6:42:a1:17:28:42:78:86:1a:82:08:
be:83:ba:5a:53:52:c4:c5:ee:76:f3:35:7b:1e:1a:
48:70:2f:55:bd:48:bd:d8:ab:bc:4a:0a:e2:38:c1:
2f:0a:53:5c:c7:78:d6:e9:e0:be:55:7d:91:ef:bd:
c3:fe:93:05:53:34:71:5e:23:12:d8:7a:bb:5c:bd:
5a:25:a9:6b:e1:4a:67:0f:42:6d:ba:7a:a8:08:8a:
8b:e6:5b:82:8f:30:1e:53:cf:d8:73:8c:a7:9e:26:
4c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:14:6E:2E:3E:B9:C8:43:44:C5:6D:EB:74:93:7B:96:11:3A:A7:8C
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:06:34:df:2a:d8:c3:5e:17:6b:db:a4:0b:43:c4:7a:db:fb:
e2:26:67:02:1c:d5:3a:cb:0d:9d:34:7f:9d:93:03:42:86:5c:
9f:38:8e:c1:3e:b3:03:c7:cc:66:cb:ca:cf:e2:a0:02:52:59:
56:02:3d:b6:73:9a:79:6c:d0:ee:79:51:8a:4d:e3:a3:59:a4:
d5:8b:b2:4b:f1:82:e8:32:76:fa:32:64:55:94:29:31:cc:db:
e0:6a:76:9c:43:3f:41:cc:c4:ba:b1:11:f8:88:97:5d:4a:98:
6e:45:7f:7a:bd:3d:f2:05:af:c8:be:22:d7:7c:eb:5e:9c:04:
e4:6e:06:1e:80:56:40:d8:8b:46:0d:92:48:9b:5f:65:ef:78:
ab:91:62:9e:90:b0:17:5f:bf:85:b4:c6:e7:f0:d8:38:9f:88:
f9:a5:7f:e0:f1:c8:73:15:7c:b7:72:c0:31:5b:1e:20:8b:03:
04:8a:cd:3c:20:82:37:57:a3:33:ca:d6:c5:c6:2f:8a:7d:d0:
b1:23:c8:c9:6f:70:9c:11:ff:46:b2:48:22:11:f3:0e:d8:b4:
d5:7e:08:fe:fb:51:25:75:04:d0:01:d8:5e:af:86:23:c7:0e:
b2:10:e4:50:8f:b5:f5:ab:3d:89:6e:ec:ce:ba:32:bb:b4:fc:
2f:b5:7c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:07:53 2026 by rpki-client