
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier: LDN/VSqx8kAodGb0efCTPZMEv4Q0metc2fsg9DDPKL4=
Subject key identifier: 11:99:70:1A:71:F2:68:D0:38:62:0D:F6:41:F9:EF:57:75:BA:03:F3
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial: 019D9A748E0B183568DD253F5F33B576E5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number: 1459
Signing time: Fri 17 Apr 2026 08:00:22 +0000
Manifest this update: Fri 17 Apr 2026 08:00:22 +0000
Manifest next update: Sat 18 Apr 2026 08:00:22 +0000
Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: dv7SEfCVN/vf447PwqZT5a4ATIydyPp44faAgO/aQ1c=)
2: Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa (hash: QNb3CvjoOXufsYPkEn/ZOrzMSuEn5o0O6f8GFs+m4Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:8e:0b:18:35:68:dd:25:3f:5f:33:b5:76:e5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Validity
Not Before: Apr 17 08:00:22 2026 GMT
Not After : Apr 18 08:00:22 2026 GMT
Subject: CN=1199701a71f268d038620df641f9ef5775ba03f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:5c:5f:84:f6:bd:a4:db:ce:7d:4a:d5:e7:
d2:78:32:21:e2:a0:f0:cb:44:2d:11:d6:c7:38:f9:
db:ba:22:7c:68:4d:d6:73:ce:1c:b8:5b:0b:63:ca:
84:38:22:73:94:67:89:cc:0c:25:f5:0f:52:8d:06:
26:f6:ba:36:6d:81:8b:83:7b:63:1d:6c:2c:d0:ed:
1e:51:a1:12:c2:47:87:dd:99:88:76:95:79:86:58:
14:ae:6e:a1:3d:80:17:17:30:a4:dd:89:46:b4:7e:
56:2b:49:84:96:3a:98:02:c7:50:cf:6b:81:61:ac:
07:ea:fd:c2:7d:d0:5c:6d:52:15:a1:8a:f0:fb:8d:
51:d9:bc:3d:af:ed:ed:1c:fe:02:6e:50:76:24:46:
f3:bc:f7:d5:52:a0:80:a4:f0:26:4f:8d:a9:8f:b9:
e9:e6:c7:10:5c:02:b5:69:6b:ca:6a:d4:88:a0:32:
5c:93:ba:df:ec:6e:87:55:21:7d:46:42:25:39:d9:
7d:f1:6e:71:4e:9e:7c:bb:05:bc:60:09:8a:68:a0:
56:92:ae:76:dc:b7:19:c7:15:00:21:a7:8b:39:ff:
06:af:e7:bb:79:66:0d:88:74:75:19:0c:ca:3a:7e:
7c:d1:d8:2a:61:00:f0:3e:65:a3:41:51:64:79:20:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:99:70:1A:71:F2:68:D0:38:62:0D:F6:41:F9:EF:57:75:BA:03:F3
X509v3 Authority Key Identifier:
keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ad:fa:71:69:47:3a:67:49:b8:02:46:9f:08:52:b3:d3:fc:
38:0d:89:cc:91:12:79:6e:05:e4:03:b8:1c:a2:fc:ee:38:2d:
50:71:ea:a4:20:d4:f5:59:da:c1:36:0c:aa:2c:3a:51:89:e8:
68:e4:32:7b:01:af:e0:a3:32:84:53:ec:37:ae:6d:76:68:0c:
8f:bc:59:a0:85:aa:13:df:20:31:2f:fa:d3:88:dc:82:22:60:
40:37:6e:26:75:e7:01:88:dd:e4:a4:30:b6:87:26:f7:87:09:
a8:03:6e:f5:50:0d:ce:bd:ad:1b:22:02:4e:41:e3:47:a1:61:
e5:75:20:40:00:58:d2:ff:0d:5d:f2:ec:e0:59:54:8e:0e:31:
fb:75:d0:42:78:c2:5f:8d:05:e4:21:4b:1a:b6:6e:db:43:63:
29:2c:74:34:dd:1a:2c:ea:1c:ef:58:5d:a3:54:85:2a:77:58:
f8:bf:ad:8e:ac:e3:b9:f4:5a:29:52:b7:35:b9:f8:71:00:64:
a9:49:5e:46:2a:d7:31:c9:87:89:33:8e:b7:3e:3c:0c:30:98:
6d:f9:28:5f:63:ae:29:59:61:73:72:a3:e9:13:9b:76:eb:61:
c7:b3:fb:2a:e6:b6:e8:16:67:ad:23:35:4a:cf:ed:3e:c9:86:
74:34:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:10 2026 by rpki-client