Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier: AdEMKMVSlHQjuxWRy0++o8YbRzzHi8p3/eRsZSq0Qt4=
Subject key identifier: 64:00:44:1A:30:CC:68:F3:E5:E3:A1:CB:11:E1:CB:75:B6:BC:31:96
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial: 019D985032F12A7D397FB71B9AE1D617FD13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number: 18D3
Signing time: Thu 16 Apr 2026 22:01:25 +0000
Manifest this update: Thu 16 Apr 2026 22:01:25 +0000
Manifest next update: Fri 17 Apr 2026 22:01:25 +0000
Files and hashes: 1: 1-nIDHjjDOfK0qkT3T38aF1CybZo.roa (hash: wfNaZ1sAvLj/BXad973SBMXYEOp2AK12GK1yxn0qtHA=)
2: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: ixVUBWAp8pX9xjeoj3Z6ZXqk1L3uLFfudzNxwQMinMI=)
3: 7cNt7nS6Ga02pEEvUGwXFcclfa4.roa (hash: IhtCXpz8Ziv5ADSE80GH1TqeWkIm73cJMRq8OxzR0jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:32:f1:2a:7d:39:7f:b7:1b:9a:e1:d6:17:fd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Validity
Not Before: Apr 16 22:01:25 2026 GMT
Not After : Apr 17 22:01:25 2026 GMT
Subject: CN=6400441a30cc68f3e5e3a1cb11e1cb75b6bc3196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2b:54:70:d3:97:42:48:07:0c:d3:7b:33:79:
09:24:ec:e5:f6:b5:d2:c8:c3:f0:d6:23:84:aa:40:
d6:69:4c:8a:d2:ff:a0:af:26:84:e9:38:5e:f3:5f:
8f:90:c0:fe:7b:e5:98:e8:d6:6c:9f:6b:e9:9b:de:
ab:05:ec:46:42:fd:84:87:7b:2e:d6:16:06:4e:0a:
1e:fe:6f:c5:a8:77:4b:5e:9e:5b:c1:b6:65:71:09:
0e:eb:27:44:6c:85:07:ee:ab:2e:aa:09:dc:fa:14:
34:60:dd:2a:87:d0:36:25:cd:52:52:a7:0c:50:26:
60:31:6f:60:b1:d2:67:ec:92:68:07:7e:e8:7f:fe:
da:c8:2b:3d:43:18:66:d6:c8:94:03:f7:13:fe:95:
c9:6b:fa:d7:28:9b:04:35:44:f6:c8:53:2a:b6:85:
05:8a:14:11:ab:c0:fd:68:30:41:8e:be:c1:e5:3b:
1e:13:c8:34:71:49:98:09:56:c4:38:97:42:23:de:
c0:21:e7:e9:17:32:1e:1f:9f:d3:bf:fc:ea:a1:51:
e4:e6:2c:cc:3e:2d:f5:98:40:98:bc:46:30:fc:c2:
2f:d2:0e:8b:95:bc:08:b3:48:1a:ff:b1:ed:2c:31:
71:2a:75:ae:93:4a:c0:fb:df:e7:21:c2:c2:d6:01:
7a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:00:44:1A:30:CC:68:F3:E5:E3:A1:CB:11:E1:CB:75:B6:BC:31:96
X509v3 Authority Key Identifier:
keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8a:a8:51:cc:e3:98:bf:c7:9b:56:9c:5e:af:d4:c3:3a:51:
fc:27:9d:6b:84:5e:ba:e0:36:5a:de:78:38:0f:c5:48:c8:09:
cb:4f:6d:09:67:57:87:96:25:77:60:60:1a:38:38:7e:31:e3:
17:f7:12:86:5e:03:ce:c0:cc:7d:7b:f5:27:03:c5:a6:76:84:
2f:f9:e6:76:63:7a:88:ee:48:3e:a8:ad:25:f8:9f:28:9b:5c:
13:8e:cb:48:d3:93:ea:22:3b:35:d1:00:5f:10:23:96:58:cc:
b5:7a:d7:c4:ca:a1:63:d7:ca:d4:f5:01:4a:ee:ea:16:34:65:
c0:8a:ac:6e:2e:ce:51:40:5a:bb:e6:03:4d:1f:3f:b9:62:5c:
04:45:60:02:d2:af:f7:9b:9e:3e:3d:53:f3:0d:52:b7:09:c9:
1b:e0:74:28:4d:a2:9c:f2:f3:cc:6f:d9:cf:51:af:a5:bd:b3:
01:74:e3:93:51:e9:5c:22:e3:53:a5:11:b0:56:47:ee:c5:89:
52:59:bf:37:45:dc:e0:0f:bb:ba:1d:1a:25:59:6b:8d:8d:96:
0a:19:5b:ba:1c:d8:8c:74:11:5d:3f:ca:e4:24:ca:eb:16:d5:
8b:54:e0:0a:5b:b9:d4:fd:3a:2c:90:cf:8f:bb:e3:ad:c8:27:
f0:e4:0e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:58 2026 by rpki-client