Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: 6s/Uez1ZYXf+K60J6iY0sU1czXT8nssSdguVJJw/U/g=
Subject key identifier: 85:E6:12:78:21:A5:4D:9A:CE:BA:E1:F1:11:CE:1A:D9:3C:D5:1C:50
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 019D9A3EABAB2FF5D7818D163F5340B916EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 0878
Signing time: Fri 17 Apr 2026 07:01:31 +0000
Manifest this update: Fri 17 Apr 2026 07:01:31 +0000
Manifest next update: Sat 18 Apr 2026 07:01:31 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: 833lp9s2oXHlSwMVObdaJHWOj2rvJGqQrDkeH4wEyVc=)
2: G2elpiRe3mLE21vYizlf0cxzEYA.roa (hash: Eg0ncyWZplHxiExP5Yc2JBQmHWqje615/1fpu2tFHEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ab:ab:2f:f5:d7:81:8d:16:3f:53:40:b9:16:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Apr 17 07:01:31 2026 GMT
Not After : Apr 18 07:01:31 2026 GMT
Subject: CN=85e6127821a54d9acebae1f111ce1ad93cd51c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:c2:2c:f7:0d:34:39:b2:1f:41:7e:93:da:
68:d3:c2:93:20:0e:28:22:8b:db:57:28:0b:36:29:
13:96:fa:92:10:19:6c:09:d3:28:cc:e0:e8:f5:82:
a0:c0:b9:3c:6a:d6:f0:32:9a:6a:cb:f0:db:b1:54:
a4:8b:c0:04:bf:a5:ec:c4:6f:0e:b6:68:4c:d5:b1:
b0:02:06:cb:ed:3e:8d:93:63:c5:7e:a2:c5:9c:d4:
2b:1b:26:39:aa:63:2e:31:31:df:2b:07:ea:15:8c:
3b:ca:8d:1d:3f:0a:bd:72:a6:b3:a2:79:29:7a:ca:
a9:2f:64:6b:25:a4:8b:86:fb:a0:f0:84:ac:e7:52:
86:3b:cb:5e:13:e7:fc:cc:a8:7d:34:67:2e:9c:0d:
29:20:2d:fe:26:39:5e:20:94:55:e4:52:27:94:3f:
8a:97:6e:02:ea:77:16:af:31:83:43:33:1e:1d:44:
25:61:66:3d:c1:c5:30:12:f1:fa:8e:e3:88:7c:22:
13:45:e3:c2:b8:cc:65:59:51:03:20:ba:d0:6c:2d:
3e:37:e8:2e:dd:6f:15:7b:b0:00:d6:bf:0c:bc:f7:
c2:f6:b5:3e:89:4d:5a:3b:ee:78:59:af:f3:91:16:
1a:7b:10:98:91:65:f8:e0:bd:ea:b0:82:0a:98:82:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E6:12:78:21:A5:4D:9A:CE:BA:E1:F1:11:CE:1A:D9:3C:D5:1C:50
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6b:2f:2f:cb:d8:1c:62:7a:e9:5a:b5:2d:01:6d:1d:71:22:
b9:b1:1e:34:57:4f:9e:33:e8:e6:16:39:95:82:6c:00:54:98:
7e:ea:16:6f:a4:fc:f8:e2:ae:27:47:bb:62:4f:fc:85:ad:52:
40:2d:32:84:c1:c4:d5:cc:a3:71:bd:39:cf:12:2e:b3:a3:c8:
4e:83:6c:0a:d3:3b:cf:9e:f0:48:cd:7d:6a:71:09:f7:f8:d6:
ef:fc:9b:aa:b9:f9:a0:de:52:ab:8e:bd:b2:15:fe:98:e5:0d:
3d:c4:fc:6b:fd:2e:82:b9:71:23:16:df:70:df:06:35:55:3e:
2a:98:a4:a1:1b:10:a8:37:0a:7b:a4:8d:1f:f9:02:59:9c:7b:
69:80:1c:8f:3c:c0:c8:14:f2:e3:57:35:e7:79:70:e6:2b:a5:
2c:63:e1:a9:b6:27:bc:b7:83:c8:2c:e2:be:ae:49:a9:9b:ed:
7d:04:32:e3:5b:78:bb:29:1c:63:e4:5f:ad:06:84:da:21:cd:
87:4e:b9:02:27:e7:c4:8b:b1:8e:5d:a1:a3:f7:ed:44:0a:4b:
e9:4a:9e:2a:03:30:04:e8:7f:0f:3c:4d:f8:20:f3:ce:ed:70:
3d:f9:c5:dc:7e:18:ea:cc:04:45:96:f5:b0:ad:9f:8a:b3:30:
d8:3b:7e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:54 2026 by rpki-client