Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: hKfzHdkbYtRRJniPh+cmYtNTMUWA8mWj35YKvOK6EmI=
Subject key identifier: 6E:C4:BC:DA:F4:06:EE:B0:7F:32:F3:1A:26:B1:CD:7C:84:F5:36:2E
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 019D9D3ED1D9A30C28E72AD6F6F7B682B5AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 1616
Signing time: Fri 17 Apr 2026 21:00:33 +0000
Manifest this update: Fri 17 Apr 2026 21:00:33 +0000
Manifest next update: Sat 18 Apr 2026 21:00:33 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: lylLxT4A+bJojDmjEK1Dky3/cna1C4lCPUyj5bGrxB4=)
2: ZFPsdpNLJ5l0WxKp0MW2ehft5Vc.roa (hash: 9gNaT5xTEshkzEjpFa3J0fv6CbE+hBJqY5VddI2BOX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:d1:d9:a3:0c:28:e7:2a:d6:f6:f7:b6:82:b5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Apr 17 21:00:33 2026 GMT
Not After : Apr 18 21:00:33 2026 GMT
Subject: CN=6ec4bcdaf406eeb07f32f31a26b1cd7c84f5362e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:1b:50:6c:67:af:46:0d:03:44:4c:82:54:
a7:11:e6:27:a7:a0:1d:58:20:74:63:0b:aa:cf:67:
bc:54:74:d1:b7:e7:d7:aa:9d:f9:b0:ca:7b:b3:1a:
36:77:2b:12:26:fe:83:a2:e3:99:d0:b8:42:71:b6:
0b:d7:d0:75:44:88:3c:7e:9e:f6:32:08:f3:f3:92:
cd:cc:77:b5:f0:72:1f:69:52:22:74:3e:4a:e5:d3:
c0:9b:3e:66:31:e9:88:43:d8:ce:10:e2:0c:87:2c:
d5:fb:79:bd:ec:89:22:93:c9:7c:8b:ce:82:15:17:
fe:24:e6:61:cc:cc:39:25:1f:b5:dd:f0:1f:5e:b1:
59:1b:3e:bb:3d:6a:ca:53:ef:e6:a1:ee:1a:48:f6:
7b:82:bf:02:bb:72:99:54:40:76:fd:58:5b:cc:c3:
0f:f6:14:6b:51:85:3a:8a:cf:a9:34:53:ba:ed:33:
73:1e:51:99:cb:4d:5d:2f:20:65:da:9a:b9:30:6b:
80:ec:e9:2d:40:d6:15:27:bd:da:40:43:d0:7e:02:
ee:45:9d:9e:bd:76:47:f0:2e:00:95:32:ee:57:e1:
c1:77:8b:e9:ab:22:d3:27:c7:b3:00:03:92:94:50:
af:29:12:75:bc:b0:a9:f7:48:07:49:80:07:03:00:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C4:BC:DA:F4:06:EE:B0:7F:32:F3:1A:26:B1:CD:7C:84:F5:36:2E
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cc:63:7d:a0:1a:43:b4:88:52:b7:ce:c2:18:b1:ff:c4:b5:
f3:9f:58:05:2f:7c:c9:4a:73:a6:da:c0:d9:76:29:fb:0c:10:
98:40:9a:83:b6:fe:89:c1:d6:88:7c:83:28:29:df:99:29:55:
da:89:a9:e9:3b:57:9c:31:2d:b4:b4:b4:c1:77:65:34:9d:70:
e7:14:a9:2a:cf:a9:4d:65:0c:34:24:a9:4a:64:62:21:42:12:
1b:02:f6:ec:27:d8:ac:b0:a6:df:53:7a:e5:4f:fa:aa:3c:ef:
a3:78:d9:46:28:b0:5e:86:6d:2b:d9:61:56:61:57:c8:7b:06:
cb:a1:b2:86:b3:68:9d:0e:b0:e4:e4:20:65:c5:2a:23:19:8f:
bc:16:d9:b7:78:97:4e:af:1a:e9:65:df:ec:02:3a:39:ec:3e:
a8:fe:33:71:4e:af:06:f9:e9:6d:bb:b0:f6:b4:8f:ee:4b:7c:
26:a3:04:e2:ee:32:ef:92:d3:22:6a:fa:2d:84:21:29:31:f0:
91:52:15:86:ae:10:e7:45:81:b6:f3:ba:5a:a4:f4:c7:9e:51:
b6:b9:c0:88:6a:d4:55:c2:c1:6a:ce:52:6f:2f:1c:59:ca:15:
bc:fc:f7:6e:eb:e6:40:8e:5c:1d:35:23:b7:4a:63:ae:2e:a0:
be:bf:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:31 2026 by rpki-client