Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier: wJIlqufZBZeI36/OOrZYhZM6/Y5Pga2qIxO9ZhPNcO4=
Subject key identifier: 74:F9:41:E1:E1:5C:2A:EE:50:BC:AE:7F:01:7E:BF:3F:2E:19:92:16
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial: 019D98BD38DA9D6AE02AA4CC1F92F87FD143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number: 1853
Signing time: Fri 17 Apr 2026 00:00:30 +0000
Manifest this update: Fri 17 Apr 2026 00:00:30 +0000
Manifest next update: Sat 18 Apr 2026 00:00:30 +0000
Files and hashes: 1: 2Yc5Pc_w4EBrqOMKmFKQLhTLkdw.roa (hash: xcDU75sza534zn4A1SLY0N4eKvAgRsSzSIlzRIhia7Y=)
2: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: Bwu2aebwC9ZIGCwLN4pRZpFLMDrG3Imi5wIy+UXClZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:38:da:9d:6a:e0:2a:a4:cc:1f:92:f8:7f:d1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
Validity
Not Before: Apr 17 00:00:30 2026 GMT
Not After : Apr 18 00:00:30 2026 GMT
Subject: CN=74f941e1e15c2aee50bcae7f017ebf3f2e199216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:50:db:c0:eb:a0:b9:61:8b:4c:8f:43:1c:
c6:63:23:9e:ce:d6:07:06:ed:5b:bf:4a:f4:9c:cf:
99:ef:33:e6:cb:07:52:bf:1b:91:ef:96:06:1c:a2:
a9:33:65:a3:9c:92:75:f0:10:1c:a5:d0:d6:e1:0f:
fa:27:dc:6c:8f:ba:74:29:30:6e:c1:e2:52:2b:99:
71:b4:6f:b1:16:8f:0b:a2:65:93:28:da:55:87:3f:
4f:aa:b1:f9:82:1f:2d:01:63:7e:3d:ac:98:35:bf:
c0:7c:58:b5:1b:ba:98:d5:2f:65:b3:81:df:20:fa:
cd:3c:fc:89:f7:bd:9e:c0:8b:0a:a2:f6:02:85:31:
8e:9d:69:c7:ec:c0:9c:39:b2:af:d6:e0:a5:87:ff:
4c:15:72:e9:73:41:d5:28:68:bb:44:c0:a4:15:69:
7e:99:91:ba:5f:36:60:69:92:05:fb:bb:b6:d0:65:
63:2e:46:b8:b4:14:aa:3a:04:0b:c9:d3:66:96:cb:
bc:60:a1:6c:e0:d4:42:82:59:ab:f9:12:5f:12:15:
1f:63:dd:71:df:cc:3b:ef:6c:a2:69:ba:95:4f:bd:
0f:d4:ed:1d:91:30:0e:1b:58:ee:82:95:d7:4d:b3:
09:f2:4f:67:26:8b:24:c9:c5:b4:7e:ec:c3:53:8d:
8d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F9:41:E1:E1:5C:2A:EE:50:BC:AE:7F:01:7E:BF:3F:2E:19:92:16
X509v3 Authority Key Identifier:
keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:71:d6:a7:d0:9f:28:b1:3e:ca:42:f4:80:fd:29:0d:64:45:
fa:88:09:23:44:53:e0:76:37:ac:56:77:49:f3:5b:a4:4c:20:
dc:84:a0:c9:ae:41:d1:52:c0:92:eb:8e:e4:eb:83:a5:75:3c:
d6:cb:53:4a:5a:93:23:68:9a:64:f2:14:12:f7:9b:46:9c:4a:
bd:18:16:c7:7a:61:cb:a7:41:7d:6d:71:f1:bf:18:f2:44:be:
51:c9:12:b7:3e:47:ed:ef:40:f0:d2:bc:e1:b3:5b:cb:4d:e7:
1a:7f:e2:55:19:94:96:23:19:1a:b6:ec:dc:bc:23:8b:17:d4:
2f:8c:05:4a:db:dc:96:6f:d2:b9:87:17:0e:40:60:42:77:d6:
3b:b3:53:4c:f0:42:96:30:77:74:5c:67:ee:51:2c:a5:af:7d:
b6:bb:49:1b:8b:d4:ba:c3:9e:d3:02:30:40:e8:10:cb:22:e0:
1f:a7:e7:1e:ae:0e:a8:e9:0c:40:65:4b:fe:21:98:ec:2c:f0:
8b:63:eb:d1:70:b5:fe:e5:fd:53:e7:05:57:7a:99:38:62:00:
47:e4:7e:57:f4:16:c2:1e:7a:85:f7:95:72:e7:99:5f:5e:48:
b1:2e:6e:e8:bd:62:8c:9d:fc:82:1f:5d:26:2c:83:5f:af:33:
e7:4d:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:19 2026 by rpki-client