Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File: A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier: ZcraDfwz8c4mzxSg/WNqHnYq1QHdEV9rk9LiEBHtrOo=
Subject key identifier: E5:B5:03:43:9A:CA:23:78:89:DD:5C:3F:94:59:C0:E3:A6:B9:4B:16
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial: 019D99992970BC540117E607EC70F2240ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:00:44 +0000
Manifest this update: Fri 17 Apr 2026 04:00:44 +0000
Manifest next update: Sat 18 Apr 2026 04:00:44 +0000
Files and hashes: 1: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: OWS7NVBS/nlDS9+g6YpOl9HBuqkx3979bs13CGs8LvU=)
2: DNy-Ywo37F1s94DzRvRfvjndiAw.roa (hash: kJUUhnZY4jdclwXVHJF/NcqyyZenLqwhpoq2KYT5Bxk=)
3: GtRmGH4bGG6oOP8kzT17gVxixR0.roa (hash: vabTUX5Qd4MvYjPie5N9mfB497dNe6aI2rUnS9Qyx28=)
4: nehss--I5fmpoVCvb0Oo4Ab0mGQ.roa (hash: QL6FWPRVEjAfMv/oZtTE230B/5xMRz1J6W0IaVZGkq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:29:70:bc:54:01:17:e6:07:ec:70:f2:24:0a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
Validity
Not Before: Apr 17 04:00:44 2026 GMT
Not After : Apr 18 04:00:44 2026 GMT
Subject: CN=e5b503439aca237889dd5c3f9459c0e3a6b94b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:af:8b:34:68:c5:ba:57:ab:09:06:10:f0:
eb:b8:20:99:1d:b5:40:76:6b:f7:42:fe:80:45:bc:
70:c4:63:87:66:06:7a:af:21:51:20:b5:35:33:5a:
c2:be:d4:99:0d:d1:8a:9f:98:c1:02:f7:b9:1e:7b:
ba:e1:e6:50:0b:e9:c0:78:05:5d:65:14:69:cd:04:
4d:2e:bc:b7:23:1f:9e:74:44:e1:b0:75:2b:6c:95:
0a:3d:b6:af:47:d8:37:5c:13:ec:94:6f:44:91:03:
4c:0f:7f:9e:6d:53:78:4e:24:68:11:2e:1d:91:54:
f4:d3:a8:14:3c:c1:26:f6:2d:40:5b:04:d9:42:4f:
28:11:aa:40:3c:85:a0:6e:20:8b:fc:a5:99:a5:f2:
73:f9:f9:4a:6b:fb:4c:7b:6d:76:76:e4:01:47:a8:
32:a5:89:23:c7:d1:c1:f4:be:18:90:01:92:4b:f6:
79:db:08:32:38:8d:68:75:09:aa:aa:6a:fb:43:95:
9b:3f:3f:e7:3d:c6:48:4e:91:3a:da:77:36:d1:10:
6a:69:86:2c:07:92:42:a8:e7:8f:0c:a7:7b:b3:f2:
df:1b:94:3e:97:00:00:fd:86:7e:04:e0:5a:f4:b8:
db:77:f0:6c:6b:79:7e:d3:3f:53:d7:c5:c4:18:42:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B5:03:43:9A:CA:23:78:89:DD:5C:3F:94:59:C0:E3:A6:B9:4B:16
X509v3 Authority Key Identifier:
keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fa:ce:44:e1:f0:be:d9:88:e6:cf:b3:ca:2a:83:99:44:0f:
86:fa:f6:b9:8c:d5:00:86:c7:28:20:00:ef:2a:ae:2a:53:dc:
05:bc:ab:34:a2:bf:75:13:54:59:67:3c:a7:bb:9a:22:f3:f8:
d8:a0:80:cd:8f:fe:32:d8:a3:3d:e1:3e:94:e6:94:37:b4:01:
c8:a1:a7:f7:03:bf:87:ed:93:7d:2c:f1:03:fe:e1:c1:6e:71:
09:a9:a3:71:7d:69:77:81:b6:9d:a8:bd:a8:5f:b0:4f:dd:81:
1b:be:e3:61:59:7e:ed:2f:a2:1c:8b:e2:b0:ea:53:3f:51:4a:
c2:39:72:da:49:ad:0d:e0:8e:6e:03:66:24:d4:5d:aa:0c:56:
87:39:f6:5f:b0:9c:85:87:56:03:6e:0b:dd:2f:99:00:ea:29:
65:cb:5c:3c:8c:eb:d4:0b:89:ef:bc:4b:b9:39:f3:41:30:ee:
d2:20:4a:9c:96:1c:d4:dc:11:5d:65:4a:3f:97:00:71:41:49:
af:5c:ac:0a:8c:db:04:90:9a:31:5d:7a:30:2c:e5:b0:a2:80:
9d:63:df:41:44:79:00:3a:cc:5f:ff:49:b2:2e:15:54:6d:5b:
6a:67:88:9f:c5:9f:d1:7c:39:cd:cc:c8:7a:b8:98:00:c6:7d:
0f:2c:fe:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:37 2026 by rpki-client