Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: yMt+14XXtau2P969ndqiOJudkXXa0+YcHYCsmupwSkw=
Subject key identifier: E0:52:92:62:1E:59:34:10:36:5A:5D:E0:40:C8:A8:D0:39:56:77:59
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 019D9A0719A63CE684B647495AE53ABC9A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 0F63
Signing time: Fri 17 Apr 2026 06:00:49 +0000
Manifest this update: Fri 17 Apr 2026 06:00:49 +0000
Manifest next update: Sat 18 Apr 2026 06:00:49 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: 8GQuGI7ppzCFntwYvO7zvOikjUDV/dEidPVvvNolJWk=)
2: BNM6KeFql-Ydq8vGXlt0w78-LM4.roa (hash: oiMAtbZ/3lDs7unsOpMUR0rJkCLWv1SgFkYJBCnCeLQ=)
3: tBScmKuEM3CY-0j6UOJC8exaQRY.roa (hash: 9gJqYwprFzWOCPewHOcv/LCR44zjyS1oQM6ha0bacY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:19:a6:3c:e6:84:b6:47:49:5a:e5:3a:bc:9a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Apr 17 06:00:49 2026 GMT
Not After : Apr 18 06:00:49 2026 GMT
Subject: CN=e05292621e593410365a5de040c8a8d039567759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7f:6f:45:1f:1a:a7:96:35:25:20:da:a4:c6:
e8:a5:ef:d6:9d:be:c9:66:52:35:39:1b:0f:fc:87:
47:98:4a:48:eb:bd:0e:50:76:2f:f2:17:8f:18:19:
21:93:49:1d:88:b8:88:8a:01:51:bc:30:4e:69:8d:
78:f7:0f:f4:d6:ce:a6:6a:c8:a5:12:91:d1:7e:e3:
b1:2f:e7:27:22:af:e6:3f:c7:a1:ee:33:e0:4a:aa:
60:13:02:00:ae:8c:76:65:c5:b6:4d:d7:a2:04:14:
ea:f5:7e:7a:89:d4:2d:37:d4:08:b5:e9:c6:64:d6:
e9:4d:60:e9:d8:b8:ea:2c:8c:c1:ce:22:0b:2d:71:
ef:17:2c:12:81:14:b8:cc:7a:8c:0d:9c:12:b8:4c:
9e:70:65:33:49:59:57:c6:ef:6e:76:b8:0e:34:9c:
1f:d0:c3:92:d7:d4:67:88:9a:ae:4a:bc:4a:ea:6a:
f0:81:1c:ef:0a:09:bc:92:cf:18:37:61:47:c5:6a:
27:98:02:cd:27:b0:74:eb:c9:92:17:fe:9a:3c:31:
5f:66:8d:c7:db:ab:c3:81:71:40:5f:29:66:e7:3b:
5c:be:55:a8:89:9e:57:24:c4:39:72:91:50:0e:d5:
69:33:7d:47:8d:c6:ed:44:5d:c5:cd:c1:f0:56:12:
df:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:52:92:62:1E:59:34:10:36:5A:5D:E0:40:C8:A8:D0:39:56:77:59
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:65:51:9d:d1:b1:90:cd:0e:26:0b:35:e0:01:0a:e9:ad:fd:
f7:25:d7:ed:fb:f4:29:7a:cf:cb:3c:d3:f3:5d:57:ec:2f:e2:
97:19:96:ee:ef:b3:d8:68:f0:c0:e8:07:ec:52:02:f3:88:be:
a6:38:ff:11:61:9b:f7:ca:26:46:38:2e:ad:e7:6d:3a:e8:05:
3d:9c:05:da:1e:e9:b4:d0:b9:52:95:09:46:55:bd:90:94:8b:
01:75:e9:da:d0:47:97:18:55:1b:43:e5:f2:ac:de:f3:68:a5:
ad:35:d4:46:0d:7b:be:3d:52:6f:e7:2f:47:94:20:5a:73:9b:
03:d8:75:e5:8a:ad:07:b5:92:97:4a:cd:c1:68:30:ad:2c:b2:
e7:34:bd:c9:63:a0:b0:84:4d:bf:b6:51:d2:16:c0:9b:4c:7d:
07:09:c3:8e:60:d7:51:2e:e0:b2:90:f4:92:bc:58:6f:07:6d:
47:fd:c1:cb:bc:56:69:02:40:ef:4f:22:71:06:06:9d:65:03:
c3:81:bb:14:42:14:9e:7a:af:25:87:b5:1d:fe:62:17:7f:8d:
23:80:57:d5:01:94:6f:a5:04:25:f6:4e:85:55:b4:f3:17:c3:
bd:de:ba:f6:ec:ce:cd:99:1f:18:8c:a2:9c:07:77:75:2b:d5:
71:90:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:09 2026 by rpki-client