Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier: D50IdpqB3vlf7P1lUBP+CDCp1DCXMhn1Lly5xCE/IaQ=
Subject key identifier: 17:E8:6A:59:EB:60:59:6D:F3:88:15:1B:C1:C5:14:2E:FD:1E:A4:8F
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 019D992B418EBAB00D28708C8718570BC172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:00:41 +0000
Manifest this update: Fri 17 Apr 2026 02:00:41 +0000
Manifest next update: Sat 18 Apr 2026 02:00:41 +0000
Files and hashes: 1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: zDyy++E+wwA+pOlf6z8zHfotwAtfFXMCOD1UxlziKn4=)
2: WIclx685icB5o3UOREAKLFzzP34.roa (hash: uDpM1rHiGL2CuGW9o80RIXGPENrx4ls410ovEwWq5XE=)
3: hCTpwVd8i1hPStdoLxWMzM8N_TE.roa (hash: ihYHu1XwJ3avyhb/XoPHgm87ZbqnGY5kgmNHjUUXafY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:41:8e:ba:b0:0d:28:70:8c:87:18:57:0b:c1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Apr 17 02:00:41 2026 GMT
Not After : Apr 18 02:00:41 2026 GMT
Subject: CN=17e86a59eb60596df388151bc1c5142efd1ea48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:af:0b:1d:8c:14:ff:38:5c:3f:d1:cf:be:
e4:d3:4e:be:85:30:d5:01:76:16:49:a9:93:b4:a8:
a5:fa:68:a9:ab:83:96:db:19:41:ec:e9:2e:a9:70:
9b:fd:b3:bf:54:a9:e8:df:43:9c:a4:44:de:97:39:
ee:8a:31:05:df:7b:f1:70:f5:d8:bd:2d:05:40:6f:
03:36:73:f4:dc:ca:4d:d7:03:64:61:e3:7c:49:2a:
90:1a:bf:7c:c8:71:a1:42:7e:d0:48:2d:53:45:34:
11:29:7e:30:db:bf:8d:f8:64:5b:49:88:e7:16:5f:
37:1a:5d:0f:c4:1b:f6:9f:ed:69:c3:f2:d1:09:09:
3e:84:c3:e6:fa:6d:22:fb:e7:2f:7f:ed:5d:a8:d5:
07:86:a1:f5:f1:48:3f:cc:2c:fb:d8:ac:64:f2:b8:
89:d6:d2:13:9e:23:7c:29:7c:e9:dc:d2:bf:21:8a:
cf:17:35:16:b7:d9:c5:2d:5c:63:fe:7f:77:b3:b1:
5e:1e:7a:58:25:e3:92:df:16:81:79:2b:9a:ce:46:
ac:d8:35:5d:28:62:d8:7d:73:0e:02:3d:9e:9e:45:
bd:6c:3a:c4:61:95:72:fd:6b:bb:1d:dc:fd:82:a8:
b6:b3:40:45:5f:0d:a8:93:e3:f7:a2:d8:9e:1e:b3:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E8:6A:59:EB:60:59:6D:F3:88:15:1B:C1:C5:14:2E:FD:1E:A4:8F
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d2:70:f8:b3:40:d6:8b:93:0c:a6:1e:3c:47:8a:0c:c6:5d:
7b:fe:12:90:01:79:cc:31:83:a3:87:06:db:21:34:63:d0:65:
7e:7e:d6:a4:85:45:1e:84:0f:c2:7c:c8:ff:8f:28:98:94:e7:
15:15:63:cf:bd:4a:e6:85:42:c5:73:e4:d2:38:db:41:40:ab:
93:70:12:21:3b:8e:54:aa:62:91:57:71:97:45:36:2d:98:fd:
ef:ec:92:7b:cf:23:3d:a2:03:ad:a2:98:d1:0a:11:e0:96:83:
0b:f6:b2:4d:72:e4:8d:a8:95:7f:66:05:4b:dc:c6:7d:32:5c:
d0:02:2d:6e:6e:a0:79:fa:d6:e3:c2:9a:14:21:0e:c3:83:20:
30:21:21:1b:15:ae:9b:f9:1d:1a:9f:ca:e7:fa:2f:3e:e7:c4:
33:13:33:e4:b6:ce:13:7c:60:4e:78:73:b4:f9:66:11:bd:35:
e5:11:3c:49:bd:15:9d:f0:b9:a8:18:44:5f:5c:3d:85:71:a8:
91:e5:87:eb:64:3f:3d:82:4c:47:10:dd:3a:19:18:b1:64:97:
be:18:6d:7e:d5:3c:fa:2f:3d:51:54:90:c7:93:93:fc:ad:39:
ef:8c:f3:7f:d1:92:56:e7:f8:21:07:cd:d2:58:45:b2:63:ba:
91:ce:09:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:25:09 2026 by rpki-client