Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: 03RzPjxWdtD1jPVdebyfBm3wH3NakQKFpgLu0IFFEfg=
Subject key identifier: F0:DC:2B:48:71:4C:3B:36:C7:59:39:00:10:89:58:B8:28:05:90:64
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 019D98865114749AE2CB7D8F64876D152727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 23:00:32 +0000
Manifest this update: Thu 16 Apr 2026 23:00:32 +0000
Manifest next update: Fri 17 Apr 2026 23:00:32 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: 2Pr7zWNj1AirahWiMl7H3hYMwMFE6+ioG5aL3msns/k=)
2: J1Zd6j9Lcwtys2PuV4W0VrM-mt4.roa (hash: 0QTHJDhGxK5m6zxqs1yz2ztZUhs7s6VuZHp2XlfhZqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:51:14:74:9a:e2:cb:7d:8f:64:87:6d:15:27:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Apr 16 23:00:32 2026 GMT
Not After : Apr 17 23:00:32 2026 GMT
Subject: CN=f0dc2b48714c3b36c7593900108958b828059064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:41:9a:06:b4:12:c2:af:85:b9:f8:3d:06:1a:
85:36:ad:c3:1b:e6:6d:32:f2:a6:fb:e6:9e:ea:63:
e6:d4:a9:28:ec:66:d9:d8:7a:c3:dc:8a:2e:00:03:
a6:fe:2f:4a:7f:68:4d:19:84:7b:aa:48:98:0e:c3:
16:f8:73:fd:f0:72:27:bd:60:59:60:a9:55:18:5c:
1d:ec:f7:24:66:e2:79:e4:d3:6f:c9:94:a4:d4:cc:
be:57:af:80:ea:af:79:72:3f:59:74:a1:fa:8c:42:
6e:57:cb:ac:8f:c1:53:a2:57:6e:02:cb:23:84:96:
c0:27:1f:53:23:8f:fb:04:20:a6:50:d7:cb:e0:e1:
d8:6d:ad:bb:1b:1b:59:d6:a9:06:e5:a8:11:90:95:
98:f0:0c:d2:49:06:62:7f:fa:c4:8c:35:1a:11:db:
22:ef:f4:f8:4e:00:61:32:89:22:4b:8a:7f:62:81:
08:60:44:af:d9:d1:18:70:41:6e:23:f4:f5:b0:d1:
db:36:85:82:77:5f:da:17:6e:23:4a:15:d7:c5:5f:
57:b8:40:b8:6a:d0:9a:01:5b:1b:7f:4a:dd:1e:0c:
43:f3:75:fc:68:45:1b:bb:15:cf:51:7c:13:a8:c4:
7b:09:04:1c:a1:0a:fd:bd:ce:66:50:04:2c:77:6d:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DC:2B:48:71:4C:3B:36:C7:59:39:00:10:89:58:B8:28:05:90:64
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9a:cf:b6:79:86:ed:98:50:9b:d8:39:c9:d8:d9:e6:c1:70:
84:ec:10:e3:25:c3:1f:fc:73:09:5b:01:d4:fd:c7:e3:83:d8:
b9:bc:02:54:fc:7a:67:bf:e5:82:63:c9:ea:02:49:e8:5f:b1:
ef:2d:ee:98:df:30:38:8b:c6:2a:60:be:d9:df:21:64:16:07:
7d:e6:c1:d1:06:8d:f0:01:a6:2e:99:d3:5d:b0:03:83:10:9e:
5d:54:c0:65:87:4c:46:22:99:d4:21:8f:21:92:cc:f2:f0:0b:
01:99:92:98:13:91:71:46:4a:ad:c5:b9:b5:2e:e3:d8:c9:02:
da:52:12:b7:69:b8:b8:cc:bc:11:09:dc:a4:cc:56:7a:db:7f:
6a:d2:8f:8d:44:7e:25:8e:fc:3f:05:bc:95:48:0e:e4:2e:4a:
24:9f:20:61:1b:90:b0:c6:82:aa:fa:ed:25:b4:13:d8:f6:4a:
17:7c:cc:47:27:ca:1e:69:69:0b:e4:c9:d5:98:14:cb:52:0f:
47:32:38:aa:c4:76:47:67:4c:59:c2:3e:d3:fa:a1:dd:21:ec:
df:ca:a2:3a:ba:6b:1b:4b:03:93:b0:0f:36:4d:69:02:d5:26:
97:fd:ab:06:d7:b7:60:46:97:1f:14:10:ad:67:39:ee:5f:a1:
a9:c0:c6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:30 2026 by rpki-client