Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
File: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft (raw, json)
Hash identifier: W6Cv8SjT5r1a32D89kVsDG7/UVJYRFKOCrra5qHiOyg=
Subject key identifier: EA:08:4E:1D:6A:9E:52:DA:A0:BC:2D:CD:24:9D:E3:6D:FC:D6:2A:1A
Authority key identifier: E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
Certificate issuer: /CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Certificate serial: 019DA52FD611630A4A33B486242AB1098F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
Manifest number: 98
Signing time: Sun 19 Apr 2026 10:01:08 +0000
Manifest this update: Sun 19 Apr 2026 10:01:08 +0000
Manifest next update: Mon 20 Apr 2026 10:01:08 +0000
Files and hashes: 1: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl (hash: TQ3oECJy8Ost5X80XPJkPH7D3tJTyT8lQm/Szz3IzKI=)
2: AFLK_8dbQHSlYChoAA91MADo2dU.asa (hash: 7cAv3e9gnI3dZUR9MQwkNpXKUI1PglLX9wimy3aeHe8=)
3: Piv3x5GjdFWYogfJry-sQL2JX-U.roa (hash: 2ZYAqvuqxNoPqFzul2MyF+P3n7KAI2Js6FxsXshtYjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:d6:11:63:0a:4a:33:b4:86:24:2a:b1:09:8f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Validity
Not Before: Apr 19 10:01:08 2026 GMT
Not After : Apr 20 10:01:08 2026 GMT
Subject: CN=ea084e1d6a9e52daa0bc2dcd249de36dfcd62a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:a1:2c:22:f1:e1:40:9b:e7:14:db:8d:d2:
13:db:b9:7d:d6:17:d1:11:a9:e5:4d:f9:5a:4e:b9:
84:00:62:63:49:94:6f:c2:7f:54:18:5e:09:5f:f8:
52:93:8f:be:52:7f:0c:1d:c8:dd:f8:0c:98:89:1b:
bc:36:79:85:03:e2:2f:d0:08:9b:05:dd:36:0d:07:
d4:dc:ab:61:c3:9c:26:58:8d:aa:58:b5:6a:4d:ce:
37:28:73:74:a8:f3:0b:1c:b3:43:46:46:e4:35:bc:
fc:20:59:1d:ba:8f:7b:8d:03:68:45:b1:25:f1:79:
de:5a:88:e3:c4:95:3e:93:54:fe:a1:b0:7b:aa:19:
0f:5b:39:c8:f6:82:b4:bf:f3:3e:70:93:58:7d:ec:
bb:c3:3b:3a:4a:6c:03:cd:e0:0c:af:af:5a:50:a6:
8a:80:ad:4d:c3:d0:dc:02:5a:98:a2:ff:98:e6:24:
18:e5:eb:cb:35:e5:2f:18:91:11:2e:5b:b3:15:27:
60:2d:60:ba:55:d0:ea:24:13:9a:3e:40:05:54:59:
86:b8:06:6a:1b:a4:29:0a:3d:1d:3e:36:56:63:6d:
28:28:ea:8b:e4:b7:25:bb:d7:77:ae:42:a9:60:0e:
84:6f:09:5f:fb:0a:86:b6:fb:ff:c6:a8:8e:14:98:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:08:4E:1D:6A:9E:52:DA:A0:BC:2D:CD:24:9D:E3:6D:FC:D6:2A:1A
X509v3 Authority Key Identifier:
keyid:E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:01:af:91:b8:53:0c:20:2b:f0:95:dc:1c:d4:44:b4:c2:72:
b7:8e:a5:72:97:48:2e:96:b4:09:e6:f3:fb:df:9a:ba:00:cb:
9e:d9:04:ee:a2:8e:a8:a6:e5:17:84:aa:3e:f6:2a:5d:63:23:
10:61:68:f2:2a:43:e5:32:68:df:f7:e9:ef:54:91:62:94:a0:
a1:79:9c:1c:bc:d5:c9:e5:98:d9:cf:53:d6:58:c1:71:06:aa:
c2:8d:5b:be:24:f9:2b:c7:ce:92:64:ad:28:5b:38:9d:ba:48:
2e:74:a6:d0:b3:9e:ca:77:2e:99:e4:64:77:2a:e7:8e:03:ef:
95:61:61:82:36:f6:3b:89:f9:05:59:2f:08:72:9f:03:a7:d0:
95:8e:79:f8:08:e9:33:fb:16:23:c8:63:0d:e5:f7:e5:d4:52:
36:7f:2a:f3:86:0c:9a:0a:53:65:72:c9:76:3f:80:a4:9b:6a:
d1:20:33:81:2d:a3:a3:ef:1e:fc:13:9a:19:fe:2f:50:16:ed:
5a:af:d9:66:a2:a6:4e:5e:27:57:79:3c:0c:80:63:6c:a5:91:
6f:bc:99:5c:17:ed:f7:1f:71:af:2e:aa:6b:cb:92:a5:1d:99:
a2:41:17:9b:45:55:c1:c3:f3:05:50:45:8d:b5:1e:58:10:e9:
22:d0:0c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:45:15 2026 by rpki-client