Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
File: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft (raw, json)
Hash identifier: efy3VELFS74S1blBdsuuAcHuGPtf4TmRSx8xqvpO5Z0=
Subject key identifier: 96:89:18:22:42:97:0F:A0:BD:64:32:A7:F1:CA:CF:C6:3A:2C:F5:EC
Authority key identifier: E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
Certificate issuer: /CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Certificate serial: 019D98BDEC6903015288523E9835C58A65AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
Manifest number: 142F
Signing time: Fri 17 Apr 2026 00:01:16 +0000
Manifest this update: Fri 17 Apr 2026 00:01:16 +0000
Manifest next update: Sat 18 Apr 2026 00:01:16 +0000
Files and hashes: 1: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl (hash: vENDGZhIsZJu5uLsxr6NH279YKvlg8/LiV1KPugxBl0=)
2: eE7il2_XdwS5_JtxMq2pvAz1LIU.roa (hash: wpN1KIlOzEFCJRu+ipfs4OChRIy+MI7uehA6+KAIz84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ec:69:03:01:52:88:52:3e:98:35:c5:8a:65:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Validity
Not Before: Apr 17 00:01:16 2026 GMT
Not After : Apr 18 00:01:16 2026 GMT
Subject: CN=9689182242970fa0bd6432a7f1cacfc63a2cf5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:8b:fe:91:58:81:bb:24:fe:b7:b8:5d:89:
a2:57:ca:f8:e2:06:b2:7d:36:ec:ed:76:d5:46:56:
a6:e1:c3:df:56:16:5e:ce:dc:92:8d:7e:d5:62:a7:
1b:f0:41:32:0a:47:27:00:f4:fe:f2:45:e6:d9:55:
d5:55:08:8c:67:ec:bf:0d:88:b9:cf:0b:f8:ee:df:
bf:02:cd:59:b1:bd:b7:63:74:24:27:ae:03:ac:6a:
ac:30:d8:a3:89:75:6f:db:45:3d:e4:de:80:84:78:
7f:f5:c9:d6:c2:86:a1:10:2f:70:a8:ea:ec:60:3a:
29:fe:5b:a0:f6:d7:f0:61:95:e5:90:ec:ad:32:ca:
ec:f5:89:38:1d:10:bc:a8:df:c3:5f:c7:17:a9:71:
e4:da:a1:21:25:51:2a:b0:47:7d:d4:7b:1f:72:f0:
0e:70:c0:66:60:0b:25:e4:08:96:fd:e5:a4:3c:10:
8e:d3:9c:4a:bc:3b:00:c2:43:1c:08:07:a4:10:b9:
bb:76:8e:41:57:b8:4a:6e:fc:36:ff:86:a4:d6:25:
7e:db:bc:29:9e:98:9f:50:38:73:8a:70:e6:eb:88:
b1:6c:98:d2:b2:61:ee:b2:cd:c0:4e:79:f4:17:87:
92:63:1a:4f:37:de:35:96:e8:fb:65:b9:47:d2:d5:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:89:18:22:42:97:0F:A0:BD:64:32:A7:F1:CA:CF:C6:3A:2C:F5:EC
X509v3 Authority Key Identifier:
keyid:E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ef:44:35:1a:9a:b5:04:94:38:ec:2c:7e:f1:84:e1:42:66:
ad:fe:d3:c6:bb:0e:4f:98:1c:e7:ba:47:7c:79:08:fb:52:40:
42:6e:b3:61:f2:8f:c1:12:80:f7:8e:fd:dc:50:48:94:e8:91:
b1:dc:a3:80:76:9b:7a:09:70:3e:5f:36:93:30:82:53:a8:e0:
2e:0d:6c:6b:1f:e7:4c:0d:04:1a:e4:b1:87:87:4e:67:42:ad:
9d:5d:e8:73:0c:13:fb:cb:aa:bd:6c:a7:07:eb:3f:49:d7:ff:
0d:4e:b8:d4:72:6b:93:e6:bb:79:56:cd:0c:5e:35:d1:30:f3:
cd:93:48:0b:de:90:15:79:4b:99:8a:39:dd:d0:1a:b7:0e:ad:
d4:72:0a:3a:1f:70:4b:86:95:43:29:c7:4e:5b:db:78:44:c0:
f7:a7:19:d1:27:eb:29:7c:32:f9:50:81:e6:4f:d1:65:47:74:
d0:28:5f:aa:d7:94:f3:a1:67:f8:d9:90:1c:1b:ad:16:08:cd:
af:f4:2a:e7:7e:ea:20:08:dd:f0:33:9a:a5:ce:11:f9:f2:95:
c5:19:18:2c:9d:6d:45:f1:83:c3:17:8b:11:e0:84:c4:a9:bc:
81:44:44:9e:2c:d0:ad:0b:57:9d:8c:95:b3:fa:f9:af:86:ce:
f0:27:19:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:44 2026 by rpki-client