Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier: HKRVNsDeHoheWXjqikfOKBZKBumcNexICIqu+HmxZiM=
Subject key identifier: 68:85:73:E7:A7:5F:9E:33:36:91:05:41:9E:87:D1:12:2E:7A:D1:56
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial: 019D9AABDDAA6E63EF54C5459F48717D3A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number: 15F2
Signing time: Fri 17 Apr 2026 09:00:47 +0000
Manifest this update: Fri 17 Apr 2026 09:00:47 +0000
Manifest next update: Sat 18 Apr 2026 09:00:47 +0000
Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: jDu7aCk3vauCc0+jwrnyPdPMRzjeRuP7Cwvdt0aUZDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:dd:aa:6e:63:ef:54:c5:45:9f:48:71:7d:3a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
Validity
Not Before: Apr 17 09:00:47 2026 GMT
Not After : Apr 18 09:00:47 2026 GMT
Subject: CN=688573e7a75f9e33369105419e87d1122e7ad156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:c7:21:45:c3:ae:5b:8c:01:4e:18:d6:70:
e2:6e:b7:b3:43:42:41:1b:42:6b:01:ee:2e:3f:3e:
67:b1:7f:2f:b4:12:90:ab:39:f2:93:70:45:dd:d3:
62:14:5d:3f:60:66:3a:91:ee:a7:01:c4:66:dd:a2:
1c:14:97:89:c6:37:8b:c2:19:67:e9:36:e7:be:60:
5e:44:ba:83:9b:ea:fd:78:28:00:80:24:b2:64:f8:
d9:34:e5:a7:d7:67:ec:74:a0:4b:32:29:cb:eb:c1:
f8:88:a3:ef:cc:12:38:17:d8:90:5e:f3:a0:20:3a:
e2:27:a3:72:2c:4a:e0:55:8b:56:fa:f4:54:a2:7b:
a3:65:5e:66:4f:1a:42:2a:49:25:c8:78:63:47:46:
ea:e6:7e:a2:21:e4:0c:4c:fb:50:9e:8a:28:40:dd:
1b:75:dd:9c:6f:01:fa:33:50:3d:e4:c0:78:4c:b9:
b1:e0:7e:bb:09:22:bc:46:39:71:95:8a:ce:be:86:
fb:ad:04:a4:50:1c:04:d7:97:59:0f:57:36:90:e6:
40:84:40:df:57:fb:78:1a:06:fd:01:6b:58:0a:c3:
6c:1d:cf:56:06:6f:9b:19:95:6d:1a:17:a8:cf:e4:
c0:fe:51:fb:9c:31:f3:d1:0b:46:dc:83:c3:2a:be:
9b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:85:73:E7:A7:5F:9E:33:36:91:05:41:9E:87:D1:12:2E:7A:D1:56
X509v3 Authority Key Identifier:
keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:00:e2:bb:e6:df:f9:f2:c3:14:79:0d:85:0f:81:b8:f0:68:
a7:19:b0:15:da:cf:04:1c:41:19:8e:7e:57:af:ad:a7:85:41:
14:83:19:13:1b:50:f7:fe:b0:cb:ed:51:52:7d:9e:c5:2a:28:
73:f4:d9:51:7b:37:c3:b9:c5:63:6b:7c:f0:03:bf:ad:8d:61:
de:31:20:8b:cc:7d:04:33:6a:2d:7f:83:09:77:65:db:e1:2d:
14:87:b1:49:0e:ed:99:06:e1:83:66:85:10:b3:38:8f:36:a7:
3a:b6:45:63:45:fb:ab:dd:93:fa:f6:56:59:4d:83:0d:aa:44:
7a:12:65:3e:de:35:ae:2d:6c:7c:47:d2:e9:b8:45:ec:8e:be:
ac:83:c6:5f:b1:cf:e2:0e:35:a6:85:f5:25:bb:7d:ec:32:50:
f1:f8:1d:85:6a:03:90:f3:5b:61:52:a3:c6:0f:6d:71:e7:51:
22:90:14:c6:74:78:90:df:32:72:84:c5:4e:e4:be:db:5f:fc:
cf:55:5d:25:90:76:4a:2d:3a:de:9e:57:81:ac:92:00:0c:0d:
40:91:96:c9:3a:8f:1d:50:91:54:d2:7e:0e:1f:9d:34:82:50:
12:ae:2c:86:4c:62:95:2b:fd:4d:56:e9:a9:eb:83:a2:1c:9d:
cc:f2:2b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:51 2026 by rpki-client