Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: 2evfJ/vGJSf2CqRr/aO8IekbFFnk1yyPMkSaWeJDzXk=
Subject key identifier: 37:C2:06:BC:00:3F:E4:39:13:67:BC:C0:5B:1C:76:AD:B3:F7:66:CC
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 019D9850106B6217F2C0B145485E8A2FB9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 0C38
Signing time: Thu 16 Apr 2026 22:01:16 +0000
Manifest this update: Thu 16 Apr 2026 22:01:16 +0000
Manifest next update: Fri 17 Apr 2026 22:01:16 +0000
Files and hashes: 1: 1-qSiDXrAhQQiEkJKVibhHHT9XHY.asa (hash: ek3lFQhBM69m11IFyrspDmCB7+jlGlnfEWGxNiaYwFg=)
2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: zFKqN14XPSEqpmweiYELntghhg3DqQPtI+wXQLfZiIQ=)
3: s-PKc_tu2wV4rS8DFKDtN3pEWOo.roa (hash: RIeIk6mysjr3waBR5H6D0lD1jhhyLuowL03Fip2BNmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:10:6b:62:17:f2:c0:b1:45:48:5e:8a:2f:b9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Apr 16 22:01:16 2026 GMT
Not After : Apr 17 22:01:16 2026 GMT
Subject: CN=37c206bc003fe4391367bcc05b1c76adb3f766cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:5a:3c:57:19:3d:57:ba:7f:15:bb:0e:3d:
c8:43:71:fa:f9:7b:cc:2e:56:f3:55:77:a0:67:b9:
43:30:0a:9e:86:5d:c9:10:9d:cc:ac:a6:46:45:06:
62:cc:bf:a9:4b:39:b9:5e:dc:55:af:6e:69:ba:6c:
1f:57:8c:93:2c:24:79:95:d3:84:4c:f0:f8:43:09:
08:05:58:db:0b:1b:b6:ee:07:e4:3b:08:76:99:16:
de:a9:4a:d0:80:8c:9c:16:ec:56:2c:d9:ab:4f:10:
8b:af:e5:0f:74:ec:45:93:b1:d0:15:05:2e:fd:68:
fd:ca:1f:b0:91:73:c3:26:33:ed:7b:23:7e:1d:49:
44:f4:c0:30:2e:7a:76:30:cc:cf:ca:13:b3:54:48:
55:70:93:2a:e5:6b:6b:74:94:48:52:18:90:ef:23:
1b:43:e6:07:a7:f3:94:6f:df:25:9e:da:35:a0:d1:
74:cb:83:0c:9e:f1:90:98:47:4d:ee:6f:c1:d7:b1:
e2:3d:e2:cc:31:40:93:63:20:6f:01:77:0b:7e:ef:
7a:97:e5:a9:30:c8:b9:fb:08:91:bc:87:d6:c8:a2:
5c:0d:8e:ce:09:d2:24:c3:10:f2:f5:98:7d:b1:9c:
00:9c:7b:a3:f7:f7:4f:da:73:14:f4:58:e3:0e:4c:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C2:06:BC:00:3F:E4:39:13:67:BC:C0:5B:1C:76:AD:B3:F7:66:CC
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1a:0e:c3:5c:a7:1b:de:fe:ec:ed:6e:03:89:b9:e7:c0:f2:
3f:41:06:c7:2c:65:9a:2e:f6:ff:fb:bc:d1:f0:25:fc:b6:d4:
fe:62:88:de:78:1d:dd:8d:0a:80:d9:1a:84:7d:0a:5b:fa:99:
53:2f:19:cd:44:0f:be:dd:fa:02:09:0f:81:c8:b0:57:27:d2:
81:ae:df:54:7b:aa:75:2d:ef:d7:2e:8a:f4:b0:3a:75:e6:e0:
67:7f:6f:bf:96:c3:35:48:84:e6:6d:d8:7b:17:74:3f:84:4e:
39:ad:cc:b1:8b:d2:aa:f9:d4:cf:db:ab:55:59:b1:7d:76:f9:
94:67:a6:f1:43:fb:03:7a:0c:83:2e:e8:8b:18:1f:af:65:61:
09:47:fa:7b:2a:70:8f:bf:27:a1:9e:78:2c:08:79:eb:cd:ff:
88:59:05:a2:96:4f:58:7d:9c:6e:82:81:f5:f1:b9:93:f1:d7:
5e:ab:03:e2:7f:15:d7:ed:73:0c:3d:ab:d5:db:65:cc:0c:d6:
74:bb:f9:0a:6f:8f:cd:b6:4f:c3:f2:aa:dc:b6:97:13:b8:71:
1e:32:b2:7a:02:6f:67:47:b7:87:b0:ab:a3:c1:19:f5:c4:a7:
9d:24:3b:db:6d:d4:41:4a:70:69:a3:ad:36:ee:c5:f7:d3:98:
28:36:bd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:58:38 2026 by rpki-client