Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File: 4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier: b4FZw26f/9e2ffnL4hxftRL9XVEewW9Y56gm9bYW/U0=
Subject key identifier: AC:9A:63:F7:2A:72:4D:BA:21:58:57:8E:6A:06:D8:48:E7:C3:8D:D6
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer: /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial: 019D981874CEAF0034612A8BFA4B57A41832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number: 0B28
Signing time: Thu 16 Apr 2026 21:00:32 +0000
Manifest this update: Thu 16 Apr 2026 21:00:32 +0000
Manifest next update: Fri 17 Apr 2026 21:00:32 +0000
Files and hashes: 1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: EHMYyhZkkW3gdMld34TN4GfAqZSBq0aPP0QrUKGdl3g=)
2: JHxvjWc19A1tU7KyYGlgqUyLkL8.roa (hash: 9C5Ys0C3mf/K+bjsErUIoK6hkq5Fu1f77/hUUvfMpdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:74:ce:af:00:34:61:2a:8b:fa:4b:57:a4:18:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Validity
Not Before: Apr 16 21:00:32 2026 GMT
Not After : Apr 17 21:00:32 2026 GMT
Subject: CN=ac9a63f72a724dba2158578e6a06d848e7c38dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fc:f2:88:af:bb:9e:09:60:15:2d:2e:09:bc:
0d:42:a3:6c:20:65:f4:81:43:2c:06:e1:25:bc:c9:
a7:46:7e:03:3a:4e:98:b5:bb:73:ba:e8:3a:14:2c:
41:a8:d6:52:78:c8:ed:39:57:a4:b8:14:68:ce:cc:
18:9b:1f:af:94:12:97:0f:45:12:cc:84:c3:45:77:
53:c5:29:02:86:e8:e0:4b:2a:b9:c9:54:fd:c3:76:
b4:cf:16:65:dd:ee:1a:89:fb:af:ea:91:30:6c:ef:
fd:e5:62:b7:52:a9:0d:68:b5:f8:bc:16:c6:1a:dd:
16:60:73:c4:b1:40:2e:85:7f:24:d4:a1:29:d6:da:
c0:6f:f5:93:70:87:1d:fd:c8:e4:63:79:7e:f1:10:
b4:39:4e:40:ce:6c:e7:ec:0d:59:ce:b4:f1:cb:20:
85:b5:61:bc:c7:2d:9f:46:c7:b1:61:7d:db:b7:4c:
e5:bd:bd:50:b3:dd:c2:e2:2f:88:05:c6:a3:74:43:
01:f4:a5:24:7d:33:9b:24:9a:07:12:79:9c:b8:cc:
c1:bf:d2:77:f9:89:cb:5f:9c:46:8d:95:f3:e2:c3:
92:76:7d:93:4b:44:d0:c1:e1:bb:cf:a4:51:f8:5c:
6c:4d:f2:82:43:0a:77:24:86:b4:9f:59:1a:07:e7:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9A:63:F7:2A:72:4D:BA:21:58:57:8E:6A:06:D8:48:E7:C3:8D:D6
X509v3 Authority Key Identifier:
keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:aa:6f:6c:c3:85:09:c0:41:4b:15:cf:fa:17:89:53:05:f3:
07:2f:d6:ca:2d:06:c1:ea:a3:6c:98:d0:16:1a:80:07:e7:ce:
8b:3e:46:bb:c5:77:38:da:67:bf:12:83:d0:22:f6:4c:40:de:
0b:8e:97:8f:79:f1:c2:b5:e5:c1:e0:4b:e6:51:4a:a9:fe:08:
7b:ec:02:af:d3:c3:41:fa:f1:56:79:dd:d4:d1:b4:75:b5:20:
f2:3a:ab:0b:6d:d6:5d:72:63:fc:3b:12:9e:4a:66:e2:8f:42:
bf:ac:87:6e:2f:b6:14:1e:64:5f:41:c3:52:4c:fe:df:64:68:
0d:f4:47:c6:13:9d:0c:2c:eb:05:f1:86:39:a5:35:87:d4:fd:
6a:df:6b:70:72:75:ee:0f:49:af:2f:72:48:bb:94:b1:64:b9:
ad:6e:07:65:0e:fa:b3:28:d3:93:c7:fb:0b:b2:9a:1a:56:12:
f5:8e:3b:16:49:96:e9:0d:76:5b:f7:a6:d6:d8:55:33:25:80:
37:ee:d2:77:c2:22:7e:1a:ec:e3:51:df:73:b9:5e:da:0c:67:
36:89:2c:e6:3d:50:43:97:c7:7a:d6:ae:bb:5e:7b:7d:49:33:
b2:0a:61:3e:ff:ed:49:26:6a:10:cf:09:c5:d6:4e:57:c3:e8:
f8:1c:c4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:01:23 2026 by rpki-client