Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
File: v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json)
Hash identifier: DXl+wUcmYXiYmS8DsaKtBC6y1r7m6xHxbOYLa7avhxo=
Subject key identifier: 77:CC:04:FC:E1:9B:87:EF:95:4E:01:2B:85:7F:E9:99:D4:A7:F8:BF
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 019D98F542E3BB7F512BD9C5047E8FD5EE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
Manifest number: 0492
Signing time: Fri 17 Apr 2026 01:01:43 +0000
Manifest this update: Fri 17 Apr 2026 01:01:43 +0000
Manifest next update: Sat 18 Apr 2026 01:01:43 +0000
Files and hashes: 1: 3RsLnrTTWTLPQLyhD4gSJN-DaTI.roa (hash: P//UvOt3ZaB3uh3PmS1jjSG8dYP/ZrhMVhcmC8uqPak=)
2: orOrT8NVY4pf1QT1W-mHVHhwDL8.roa (hash: bx8FYIhx4hyq5ap/XvQzvchaRMF2JO/G6piTSSfSHKo=)
3: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: 4OAX8P1mnagSx6F45suYjskhi6t7/xuClRXhyT6iWug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:42:e3:bb:7f:51:2b:d9:c5:04:7e:8f:d5:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Apr 17 01:01:43 2026 GMT
Not After : Apr 18 01:01:43 2026 GMT
Subject: CN=77cc04fce19b87ef954e012b857fe999d4a7f8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:31:f8:ef:fc:64:89:56:c6:84:23:98:7c:94:
2f:97:57:be:33:bb:bf:d0:bf:95:ad:9d:f0:d4:4c:
68:0d:c5:05:7e:59:f5:a9:f1:2a:2d:2e:51:f1:2b:
5a:5c:43:5d:1c:e6:7d:c9:3b:54:a6:e2:4e:ee:37:
bd:76:6e:2c:0b:ce:cc:69:28:63:3d:c9:81:ec:ff:
e6:15:39:65:99:86:68:ee:6f:ad:c9:fb:df:86:f1:
62:02:8e:9e:65:75:af:e7:fe:33:b1:51:e4:47:9a:
a1:39:31:80:9d:4b:e7:7e:ef:b5:c2:88:ba:d3:11:
72:36:6b:a1:17:d0:7b:21:41:4a:87:88:cd:e7:f9:
66:25:77:08:79:bf:82:b9:33:ec:7d:75:e9:47:d0:
51:d7:8a:1a:9f:e3:77:22:fb:c2:86:ac:9b:5e:a0:
2d:36:00:d3:93:0f:55:78:46:44:75:ab:34:e1:1e:
0c:b0:d6:b8:d0:fc:ea:e2:8f:d7:dc:e1:c5:1e:00:
aa:a3:c1:17:00:c5:24:dd:db:1f:ff:24:02:6d:95:
9c:27:de:a2:c4:d0:32:b4:cb:02:44:19:45:60:66:
48:98:3a:cb:11:e8:8a:8f:fd:f3:18:b4:60:50:ab:
e6:bd:0c:b3:59:8b:40:18:41:45:e7:ea:60:cb:12:
c2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CC:04:FC:E1:9B:87:EF:95:4E:01:2B:85:7F:E9:99:D4:A7:F8:BF
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:90:1d:4e:1c:72:85:94:ba:56:2c:b6:36:16:71:19:3f:ee:
dd:62:fa:a5:f5:e4:e2:00:90:63:eb:e2:01:d1:59:a4:5b:11:
5c:b7:e6:43:95:c6:7c:9d:14:22:58:db:2f:9e:c2:fb:3e:6a:
11:9d:40:31:34:f7:db:76:92:45:3d:ef:a8:e6:4e:5a:8d:51:
d3:13:b8:41:73:c5:02:07:26:ce:96:b1:4f:c1:bc:a2:78:32:
df:2f:5d:40:a9:6f:7a:41:33:a1:ca:a2:da:9d:a7:55:fd:b5:
15:15:2a:11:03:81:d8:e3:e5:b1:e5:57:cc:ab:8a:17:70:ac:
54:eb:e0:93:7d:b0:df:9a:12:6b:00:a8:14:46:09:fe:89:52:
73:9e:5d:a7:b9:28:b8:29:30:8a:74:03:6d:fb:05:5f:91:f9:
c6:3b:18:8f:ea:15:51:02:9e:fe:7f:89:65:3f:f6:6b:33:54:
db:9b:4c:9a:f8:4e:93:c3:6b:2d:65:6c:68:0b:e0:9e:a5:c3:
a0:e9:ab:34:d9:45:d1:3b:4a:13:ad:99:f4:b1:91:26:e5:16:
5a:4f:01:18:aa:ff:f3:20:7b:fc:0d:23:ee:bb:94:83:68:78:
fa:b2:f7:f9:27:2f:3d:59:9e:06:06:a8:fc:c2:d8:97:f2:36:
61:2a:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:06 2026 by rpki-client