Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier: 9WmVepHoppFAX+KmdF6Leuhf+hwWLKI72COXTwI4FaU=
Subject key identifier: F4:68:67:0C:67:C9:5D:04:DA:8F:17:21:05:D0:5F:7A:1C:59:2F:5A
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial: 019D99CFDB5376B2617196A318E337456547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number: 0F92
Signing time: Fri 17 Apr 2026 05:00:29 +0000
Manifest this update: Fri 17 Apr 2026 05:00:29 +0000
Manifest next update: Sat 18 Apr 2026 05:00:29 +0000
Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: gS9m1VqaPqDyEsqIU/05YLhQj9NDsv+XX2gsWn7HUZ4=)
2: sIZQ5tszAsQWV3tSj16L1GSVX6c.roa (hash: UbS6Ylynq2ME7l06L5T3TkFEta0v6LJ++TVobQTXGgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:db:53:76:b2:61:71:96:a3:18:e3:37:45:65:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Validity
Not Before: Apr 17 05:00:29 2026 GMT
Not After : Apr 18 05:00:29 2026 GMT
Subject: CN=f468670c67c95d04da8f172105d05f7a1c592f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:9c:d5:51:61:4f:56:4d:53:8c:9f:63:a2:
bb:0e:a0:fd:74:2c:22:da:2d:3f:10:92:9c:1b:e0:
7f:a6:a7:45:1c:ec:54:de:e8:31:5d:63:37:f8:db:
eb:31:46:6f:1f:a3:b7:0f:6c:31:4b:40:c0:2d:78:
b2:82:01:4f:b2:03:47:48:5a:d4:01:f7:66:35:0c:
74:02:b7:6c:31:4a:5b:eb:ed:df:44:96:ac:05:6d:
e1:4d:c9:c6:5b:e1:3a:64:73:dd:8f:db:9c:cf:43:
a8:20:c5:86:b0:34:10:cf:92:9c:25:d1:04:f5:7d:
4a:53:1a:c3:62:4a:74:21:6a:ac:13:90:da:23:28:
c5:5c:3b:4e:7b:2f:e2:01:d3:e6:71:37:b3:e2:46:
f7:bc:51:f9:11:2d:2d:a2:36:ee:4e:67:a6:56:3c:
24:c6:00:82:3a:52:a3:6e:8d:16:7e:9d:fd:a8:a6:
f1:b6:e8:8f:3b:34:c1:c2:a7:9b:2e:1c:96:fe:6b:
77:7a:da:b7:88:36:02:9c:70:a1:8c:07:70:3c:c6:
3a:a9:9e:50:66:94:eb:66:8c:80:dc:aa:5e:39:b0:
c1:73:bc:a6:f3:40:79:d9:b2:36:ca:a4:92:0c:c6:
52:59:cb:cb:e7:0f:9f:f3:20:13:91:33:76:55:32:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:68:67:0C:67:C9:5D:04:DA:8F:17:21:05:D0:5F:7A:1C:59:2F:5A
X509v3 Authority Key Identifier:
keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:58:e8:b1:30:0f:5f:95:03:ad:1d:fa:79:e9:25:f2:a7:0c:
cd:ce:59:2a:56:d9:a6:dc:1c:17:8b:01:c7:63:86:c2:ce:d0:
74:d2:4e:4d:a2:be:44:5e:d9:c2:31:68:b0:89:86:15:56:f0:
6c:64:df:3a:ef:e6:5b:53:c5:88:b0:50:03:84:4b:96:f7:05:
1a:f0:5d:c0:41:e0:52:87:9a:c7:41:ae:4d:ab:04:8e:7d:2a:
62:6d:82:01:79:f8:c5:c3:d3:68:fe:23:b0:dd:11:84:d3:f5:
7b:72:9b:6c:b1:9c:39:ed:7c:7a:3c:ed:f2:7a:a4:c8:d8:d5:
0b:f9:c1:62:cc:ad:ca:59:aa:63:e6:50:c3:84:90:65:ac:46:
6e:d2:b4:b8:f5:de:91:66:52:ec:73:8e:0c:e4:c2:46:44:bf:
66:13:f5:d9:d4:2b:e0:75:ce:e6:aa:6d:65:30:4a:6b:e9:7c:
5c:fd:ef:8c:74:05:86:64:44:cd:87:de:0c:fe:f0:19:4b:51:
bf:bf:4c:a8:c9:63:b5:d6:dd:62:31:05:4d:d9:4e:80:96:cf:
51:74:1b:d3:62:2a:1d:51:11:1c:23:87:3d:33:1f:b5:e1:9b:
2b:c8:96:bb:a6:b7:f9:1f:25:db:f1:ee:bb:1f:35:0c:79:95:
6d:7e:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:14 2026 by rpki-client