Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
File: 4MZJtmoZ2i_sI2sEndEioO82iw8.mft (raw, json)
Hash identifier: A7L+zu5uqmRZVhw7yPY09tQNNjA7MAooM1KQSukD8Ik=
Subject key identifier: BA:F1:B4:15:40:3B:E7:66:06:A8:C1:22:9C:BE:ED:0E:03:73:56:4C
Authority key identifier: E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
Certificate issuer: /CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Certificate serial: 019DA59D52580B6AA36361B635BAF04077CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
Manifest number: 01B8
Signing time: Sun 19 Apr 2026 12:00:43 +0000
Manifest this update: Sun 19 Apr 2026 12:00:43 +0000
Manifest next update: Mon 20 Apr 2026 12:00:43 +0000
Files and hashes: 1: 4MZJtmoZ2i_sI2sEndEioO82iw8.crl (hash: jCmnHblHdyUA5Xc7Do5vOgPt0NDJvMJpO55w9hZaojk=)
2: INwAC_jNS7HwUjq0ta-X62KVJno.asa (hash: 0iRDupFn1+ZlmDKitgIiV/zTNurv4zOW9wtdEQ3dQhc=)
3: iQFBjQMYNTTJ2jk6e5feOS_a39s.roa (hash: GqVM6J5PfB8C9Ws9x090WHFvEBb+mt5HYBg+7QoW2vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:52:58:0b:6a:a3:63:61:b6:35:ba:f0:40:77:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Validity
Not Before: Apr 19 12:00:43 2026 GMT
Not After : Apr 20 12:00:43 2026 GMT
Subject: CN=baf1b415403be76606a8c1229cbeed0e0373564c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d1:2a:d7:e4:54:30:a3:be:92:ef:14:1b:83:
06:3f:74:8c:fb:6c:e5:61:83:99:97:06:59:c5:6b:
1a:df:24:be:2d:c8:da:5b:ed:83:ed:7f:d5:3b:22:
82:a4:aa:1c:90:90:7e:95:13:8c:03:06:06:3f:c9:
8b:c3:46:20:5d:54:86:94:30:87:da:d1:20:1a:79:
4e:24:f1:f8:24:ca:a3:a6:a0:01:24:b8:d5:32:60:
40:0f:2c:d6:3e:f6:95:8b:0e:ee:19:a3:72:31:ba:
b4:de:f1:b6:3b:12:aa:57:c2:ad:ff:49:f1:fe:ac:
e0:e9:c7:ee:7b:f7:35:a3:d3:75:d6:16:eb:e5:28:
06:6c:62:1a:29:a3:e3:21:13:e5:e4:59:94:71:7b:
35:57:6e:54:be:e4:5c:26:2b:29:66:12:2f:9e:02:
a6:92:7b:a0:cb:7d:f0:53:8c:6c:81:49:f6:ea:15:
89:a0:dd:db:e2:b9:f4:6c:db:73:ca:db:02:f5:fd:
89:3c:6e:bd:ad:99:e5:34:7f:b2:b3:8d:25:59:d3:
c4:e3:71:bd:1d:4b:39:78:e3:6b:08:29:66:34:82:
ba:0f:f9:15:22:e5:c8:73:8f:90:61:9c:a1:8b:9b:
03:b9:79:a9:20:a1:cd:2d:ec:b5:60:13:ed:6b:c0:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F1:B4:15:40:3B:E7:66:06:A8:C1:22:9C:BE:ED:0E:03:73:56:4C
X509v3 Authority Key Identifier:
keyid:E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:08:3a:d7:ee:2c:2b:93:c5:1b:c6:9d:dc:3e:d1:29:e1:47:
66:7d:d2:50:5a:d2:92:c4:77:d6:f2:d5:54:e7:1b:10:a5:ac:
94:b8:22:01:0c:89:7f:cb:4d:dc:af:95:1c:cc:44:05:61:be:
55:20:b8:0a:22:9a:0b:2f:42:13:72:c8:6e:8e:40:64:40:e5:
d2:9d:b4:80:b0:96:3f:7e:94:45:eb:c5:5f:05:da:f1:fa:d5:
5b:ba:96:44:f1:a4:06:ed:7a:f1:ff:58:e4:58:d9:ee:c6:5c:
e4:ac:63:0e:32:70:b6:a8:ad:2b:c9:81:a2:e3:a0:c7:42:0a:
cd:bb:6c:39:40:75:b0:87:5b:03:45:eb:a6:92:fb:e7:e7:e7:
23:54:ef:d2:8e:e4:aa:e9:7b:2e:11:2a:b7:3b:24:50:c1:d0:
8a:82:f0:01:32:a4:ba:53:00:37:04:32:c0:d5:c4:bb:1b:67:
de:69:0e:3a:7a:a2:b1:16:bf:3b:e6:eb:67:52:22:9d:fe:c4:
91:60:d5:23:aa:1f:96:92:67:ea:ba:c7:24:79:f8:d5:bc:cd:
9a:36:6c:fa:8e:cc:67:28:7a:8b:7e:d8:b4:20:e6:72:5c:ab:
f7:46:98:55:97:2d:5f:0a:75:38:6b:df:d7:93:66:1e:a7:63:
5b:f7:2c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:43:40 2026 by rpki-client