Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: 5NMCrh7+OsHWN/knqrvTv6wJrS+Qyq3hsTRPP8fwgVs=
Subject key identifier: FC:C7:A2:F8:11:64:04:47:31:CB:01:0C:CC:5B:92:5A:E3:F8:98:49
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 019D9850C772406CD31F65A12D8D13CADF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0F79
Signing time: Thu 16 Apr 2026 22:02:03 +0000
Manifest this update: Thu 16 Apr 2026 22:02:03 +0000
Manifest next update: Fri 17 Apr 2026 22:02:03 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: KpjwqhZJD9XFYUHCk9wMeEjzHglqvJCqbD0+0Fgf++c=)
2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:c7:72:40:6c:d3:1f:65:a1:2d:8d:13:ca:df:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Apr 16 22:02:03 2026 GMT
Not After : Apr 17 22:02:03 2026 GMT
Subject: CN=fcc7a2f81164044731cb010ccc5b925ae3f89849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:50:d7:62:74:bb:89:b5:6a:9c:41:b0:78:
7c:c1:04:ca:e6:b7:dd:1a:a2:ea:a8:07:ac:8e:f9:
74:95:67:e5:89:61:8c:80:64:fd:80:74:e1:a4:59:
ce:d6:4e:70:7a:f4:82:14:14:7d:ef:eb:6f:48:a9:
35:be:25:35:10:e9:98:91:82:4c:b6:76:0c:f9:81:
e7:60:8f:19:f7:2b:ba:3a:37:67:bf:09:50:9f:cb:
71:07:b9:b1:d6:5e:d1:8e:45:cf:8d:73:b7:e7:3b:
f6:81:ba:bb:27:68:e9:15:6b:c8:51:72:11:a8:1e:
d6:86:06:46:b3:7b:b7:68:23:49:6c:17:52:b0:47:
38:3b:42:39:c3:fa:25:bc:75:73:89:44:46:19:21:
4d:da:d2:3a:0e:a8:da:43:d8:63:82:80:42:b7:53:
8e:27:d8:39:a0:6f:37:8f:10:80:dd:ad:86:42:5f:
4d:42:c3:1e:66:94:6f:a4:7b:fb:aa:7a:d4:f0:2a:
b5:d0:46:91:44:de:86:66:ec:6a:0c:85:a5:bc:88:
0a:b1:72:87:11:c9:1d:5c:b6:48:89:96:88:a0:ec:
fa:8d:64:32:40:64:7f:e1:70:9a:9f:02:11:c9:58:
d1:d3:35:f9:1a:86:59:fc:b7:66:87:bf:6a:bc:0a:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C7:A2:F8:11:64:04:47:31:CB:01:0C:CC:5B:92:5A:E3:F8:98:49
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:94:a0:d7:61:9b:f2:3e:c6:02:60:98:71:26:8c:e3:0a:88:
a3:36:de:de:b6:51:e5:86:f5:97:93:0c:7f:79:57:13:8d:43:
79:1f:6d:40:b3:b2:47:16:c2:17:4c:0c:a2:bf:dc:0f:26:94:
52:20:b1:d1:3b:c4:32:d4:c8:da:f0:9e:0f:be:8a:dd:96:39:
4d:09:a7:3d:96:4d:05:96:a4:60:6a:11:b4:c5:c0:7c:3d:da:
58:25:25:b0:6d:d8:a1:98:e0:87:db:7b:78:c0:99:07:72:9d:
18:b2:7c:27:f2:77:dd:87:60:d5:48:14:5e:e5:ce:04:31:56:
ab:23:62:5b:60:f4:91:d1:da:32:a5:ba:63:8c:fe:19:37:f0:
f5:b8:9e:87:d0:fd:92:dd:dc:a7:a7:24:f1:4f:5c:8d:e9:f0:
57:88:3f:c4:80:74:cd:93:ea:e6:e8:2a:9b:15:c3:b1:ed:cf:
d3:57:92:77:5c:1f:3b:d6:f3:96:77:47:9a:5a:67:40:fc:fd:
2d:1a:aa:e7:7f:9d:c5:f7:c5:b6:e7:c1:91:d3:d7:8a:ae:c8:
78:e8:3e:ae:cb:84:93:70:bd:70:65:cc:5a:0f:03:e8:af:bc:
8d:e5:b8:b4:d4:59:bc:0d:cf:ad:d2:a7:a6:e8:a4:dc:33:1a:
b3:ed:43:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:30:19 2026 by rpki-client