Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File: 4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier: vWOhWs7J0nw2gSTcpXn1fsoVN3HV6Zw/6YLay9yPYUo=
Subject key identifier: 5B:4F:BB:1B:7F:5C:D1:78:ED:83:80:76:1D:40:77:CE:CB:D3:09:BB
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer: /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial: 019D98BD1685AF6CB8FBB5589D7B513D6756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number: 0BDC
Signing time: Fri 17 Apr 2026 00:00:21 +0000
Manifest this update: Fri 17 Apr 2026 00:00:21 +0000
Manifest next update: Sat 18 Apr 2026 00:00:21 +0000
Files and hashes: 1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: ik+MvOt8CBcdqYwIzW2tZkz3byhUY1nevez/7GbMDYU=)
2: G_3AbkBvxlIP88eiGt3CS6nBjms.roa (hash: HxmAkTnKX1MXFmf40b0A8DoHMlH+AhQxL52OcvMUs9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:16:85:af:6c:b8:fb:b5:58:9d:7b:51:3d:67:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
Validity
Not Before: Apr 17 00:00:21 2026 GMT
Not After : Apr 18 00:00:21 2026 GMT
Subject: CN=5b4fbb1b7f5cd178ed8380761d4077cecbd309bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:a5:38:27:ec:72:39:75:81:d3:25:da:5f:
cd:2a:d8:82:e8:1f:7f:5f:b5:64:1a:2f:5f:c9:0c:
d1:09:60:be:bb:1a:96:4a:3c:7c:7b:9b:35:16:e0:
9c:4a:05:31:a6:74:1d:14:6c:d9:df:be:a2:38:d9:
f6:28:2b:66:4d:ef:34:cb:15:67:67:91:83:1b:43:
1b:67:50:db:0b:ad:69:8b:9b:fb:dd:0e:e0:26:46:
e7:55:97:fa:08:b5:64:83:f1:bb:90:2a:73:8e:36:
a3:4f:2c:ce:07:ac:23:45:1a:5e:cd:f1:1b:59:6e:
70:15:20:83:9d:7e:a5:28:fb:f1:9c:8f:0b:6f:76:
85:86:1c:62:38:13:03:c4:1d:a4:eb:6a:a1:db:8a:
1a:06:e2:67:a5:76:cb:20:97:68:c7:20:63:92:40:
9b:2f:76:23:2d:cd:4b:3e:79:69:af:0a:b8:3f:00:
f0:84:b7:ff:8b:88:9d:52:d0:07:27:55:86:e8:39:
69:25:c7:36:be:69:6e:22:e9:eb:70:e6:44:ca:2a:
2b:2a:79:43:24:d7:75:6d:a4:13:36:56:b6:65:9b:
83:46:80:01:80:fb:c1:d8:9a:2e:27:cd:63:90:19:
dc:9c:ea:11:cb:c1:7b:1e:02:9d:8f:89:de:90:4c:
6d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4F:BB:1B:7F:5C:D1:78:ED:83:80:76:1D:40:77:CE:CB:D3:09:BB
X509v3 Authority Key Identifier:
keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8f:43:ba:a1:40:2e:e8:28:c7:fa:e7:15:fc:26:00:95:9a:
f0:c9:0d:e5:c9:49:a9:1f:de:f3:ea:14:32:60:e5:29:06:5f:
94:cd:5b:55:67:98:1d:9f:a2:3a:97:e1:4d:90:cf:60:25:52:
c7:16:9a:65:7f:73:d8:32:85:34:33:3b:f3:3d:97:a4:2a:16:
9c:9d:7e:1e:e6:8d:ff:7a:ec:76:58:3b:69:8d:2c:49:19:8a:
8b:95:54:2b:8b:14:89:77:82:95:f3:7d:bc:26:e8:9e:66:17:
e1:4f:9c:9e:4f:ee:16:2c:2c:fc:df:62:ad:68:37:ad:06:5e:
ee:0e:a5:96:1b:16:01:82:94:70:b8:e0:e0:d5:a9:a4:b4:f9:
a4:1e:52:d3:3d:70:33:a1:15:96:0e:3d:1c:63:8c:10:84:1c:
52:75:be:78:65:c0:3f:f4:22:ab:93:7c:06:d3:47:6f:24:4a:
15:3b:6d:9a:17:30:64:c7:54:ff:ef:3c:fb:0f:09:7b:80:82:
57:af:b6:bc:0c:b4:20:19:e1:ca:65:2b:39:a5:67:e1:63:e2:
48:b9:19:da:5e:44:83:b6:b0:53:53:6e:ff:88:8d:bb:6c:49:
f4:46:6d:b6:f0:f8:50:c3:57:23:c5:3b:3c:d1:c5:b3:f0:20:
25:de:08:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:18 2026 by rpki-client