Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: c5S6G6LYI91HGHbWpoGlv3mf4PW/8MxRPuh23r2cjxQ=
Subject key identifier: B5:24:1D:8D:8F:1A:25:77:3E:10:2C:FC:59:59:73:ED:CF:DC:93:05
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 019D98869AD2FFE0134F142EF5E7B87ECE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 23:00:51 +0000
Manifest this update: Thu 16 Apr 2026 23:00:51 +0000
Manifest next update: Fri 17 Apr 2026 23:00:51 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: O06RrWozwVXOZYG3t72eUSGFQ9MBtCU+Rx+BVOZxkRE=)
2: ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa (hash: k43BMZFCEHCe5ac3+lgii08XLhekVbwoHtiG/FwXDec=)
3: cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa (hash: rYHJYIx7h+jpfMPSSONXY/ad+DKlzYjKVh77kFCnfVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:9a:d2:ff:e0:13:4f:14:2e:f5:e7:b8:7e:ce:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Apr 16 23:00:51 2026 GMT
Not After : Apr 17 23:00:51 2026 GMT
Subject: CN=b5241d8d8f1a25773e102cfc595973edcfdc9305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:32:94:86:81:a5:4e:76:a1:9c:dc:4d:41:
fa:89:d0:51:a8:80:22:6d:2f:fe:7c:f1:49:9f:1e:
b8:0a:23:cb:4a:67:22:83:e2:bd:38:0b:9d:3b:e1:
f6:f2:32:ac:b7:ec:a5:bb:de:23:50:81:a1:04:77:
70:96:b9:cf:0b:05:f4:69:ae:f9:5f:50:6c:d6:6a:
02:83:6d:99:a6:56:7f:fb:0e:52:fa:30:a5:4c:68:
13:09:a0:ae:5c:8a:a2:0c:c2:91:82:07:22:2d:61:
e6:5e:65:3d:f3:5b:b5:f2:57:80:bc:cf:b0:75:6b:
24:bc:36:f6:7c:4c:09:8d:d9:1d:b9:44:db:f5:ca:
94:f1:6d:86:4e:19:22:9d:78:c5:fa:f6:b9:f7:87:
3b:24:6c:04:46:31:c5:b9:b2:a9:dc:03:7c:1e:00:
7c:b8:df:d8:b9:d5:a0:a8:da:25:0d:c7:cb:5a:bc:
a3:79:45:19:b4:0b:17:71:24:3d:78:e3:5a:cc:54:
56:15:eb:86:9a:80:b1:72:ce:4e:32:f4:9d:38:fd:
7c:f0:04:60:84:70:61:16:a6:6a:07:47:87:0b:99:
91:d8:dc:b4:af:f6:39:ce:92:29:33:06:61:a9:a6:
31:6e:7a:28:02:81:c4:6b:51:c5:cf:f9:e7:a2:02:
a2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:24:1D:8D:8F:1A:25:77:3E:10:2C:FC:59:59:73:ED:CF:DC:93:05
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:40:0c:c1:5f:33:c4:ab:ad:2b:e5:d0:9f:68:e5:c2:3d:5c:
d4:58:de:48:a3:bf:7d:4e:5b:42:b8:55:db:50:7f:d4:bf:42:
b3:b0:82:67:eb:64:1e:e7:19:f7:96:e5:21:2b:65:ab:96:6b:
0b:73:69:97:42:e5:f5:09:d4:fc:a9:f1:ec:b7:27:d9:16:f1:
a6:50:4f:5c:d3:d5:ad:a0:6d:ba:02:fc:9a:58:3a:6d:f2:b2:
24:3c:69:36:1c:7f:f5:34:0c:f5:03:d7:a9:06:47:e4:af:d9:
73:76:84:97:01:92:99:0e:b8:f2:36:2f:38:1b:15:ae:82:5c:
a3:74:6e:00:50:d8:51:1f:2c:3a:5a:82:df:80:cc:c0:88:5b:
da:ca:7a:cc:89:2a:38:dd:cd:b0:eb:70:31:44:83:b3:df:ab:
cb:f5:35:22:91:1c:f6:dd:6c:cc:29:54:67:45:c9:d5:26:fd:
1e:be:6d:71:97:fb:7e:33:a0:53:d4:1b:2e:86:65:97:17:a8:
ba:a3:f5:a0:c8:3e:4b:9a:a4:2f:3a:ed:65:06:32:f4:85:5f:
64:5a:16:f3:56:96:6f:88:58:a3:7f:bf:1d:5a:d9:53:d5:5b:
32:ad:47:fc:0f:db:a9:93:bf:38:b8:f2:2d:81:a7:f6:e5:ff:
4c:98:c8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:04 2026 by rpki-client