Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
File: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json)
Hash identifier: QZ2eBf+M1XEgLLdHkAxbmHZUw82LJ3PAD0gNeiZVQ4g=
Subject key identifier: 0A:69:9E:0B:1B:07:B9:46:41:D0:9F:76:4C:1F:03:01:47:B3:E2:08
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Certificate issuer: /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial: 019D9BBED3F9AEB0F75E1F2C9A1DEA5D6CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 14:01:07 +0000
Manifest this update: Fri 17 Apr 2026 14:01:07 +0000
Manifest next update: Sat 18 Apr 2026 14:01:07 +0000
Files and hashes: 1: 1OhU1ba4r4lAxG-v3HBo5kpowjY.roa (hash: uhi47WtmC1HtS+uzfaoWnsMLVST1oI2GfXGXB1P0CWo=)
2: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: KZ9xVBNyOAtceUQ5MxlVM/koYKfXDT+wAHRoj6Ha9o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:d3:f9:ae:b0:f7:5e:1f:2c:9a:1d:ea:5d:6c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Validity
Not Before: Apr 17 14:01:07 2026 GMT
Not After : Apr 18 14:01:07 2026 GMT
Subject: CN=0a699e0b1b07b94641d09f764c1f030147b3e208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:47:41:49:6b:c4:65:8f:10:33:19:a8:0b:
bf:e1:4a:f1:c3:73:f3:54:f5:a1:4d:ce:e1:6e:85:
bf:cf:85:c0:74:ed:81:d8:de:8a:65:e3:07:89:03:
9e:78:c6:fd:ba:1b:3d:6b:ec:48:cf:d9:e9:f3:0c:
78:c7:73:48:19:d4:4a:f2:51:7e:12:7a:64:4d:40:
f5:a8:ac:c8:2f:93:7a:33:13:da:6b:d5:49:7d:93:
2d:a7:0a:5a:bc:79:5a:7d:17:47:60:61:79:4c:cb:
bd:2d:d4:31:e1:33:d1:d5:40:ba:0d:63:3f:91:96:
f7:bb:69:5c:0c:4f:a2:b0:23:d9:d2:4c:97:2f:22:
1a:83:98:94:32:af:86:94:9d:a4:ef:14:8a:a2:17:
f3:91:bb:9b:c9:ac:6a:7b:a9:09:8b:41:d5:6a:16:
91:35:0c:56:68:a4:43:88:8d:89:b9:5c:d2:be:29:
a3:a8:2a:77:0e:aa:c0:fd:a6:ae:3f:99:a2:35:eb:
8e:e0:43:80:5c:7a:80:28:4f:e3:ec:ce:55:37:f2:
a5:56:d1:86:52:56:26:91:0e:e6:e1:f8:a1:a0:5a:
e2:e5:0f:1d:1c:cf:bc:31:73:17:11:1c:ad:61:63:
71:67:23:cf:d8:ee:7f:f9:db:76:02:e7:ee:e6:4b:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:69:9E:0B:1B:07:B9:46:41:D0:9F:76:4C:1F:03:01:47:B3:E2:08
X509v3 Authority Key Identifier:
keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a6:8e:b5:b4:b0:e3:d4:95:4e:98:21:0f:ce:2e:bf:fd:56:
3b:cc:3c:2e:11:7f:2e:b4:be:ea:4d:a0:c5:1c:5d:1d:ec:ec:
f4:ae:89:ab:0a:4d:d5:cc:19:4f:bc:c1:6e:cf:e9:ba:10:40:
7c:d8:ad:00:06:08:06:27:2d:2e:aa:b9:fd:8d:0e:cb:65:46:
73:be:90:50:39:2c:fa:e5:da:38:1e:78:6c:91:87:98:58:b4:
54:0a:50:f9:1f:81:a9:b7:3a:26:d2:46:f8:b5:30:97:4a:95:
0c:43:53:cf:73:8d:c8:0c:0d:af:87:a7:bf:1a:7e:6d:2a:ca:
24:46:a1:62:b1:ab:01:31:c8:d3:97:59:6e:88:d8:9b:a6:d0:
91:66:a1:09:f9:82:07:5e:9b:02:9f:c8:d2:9f:14:1d:a1:38:
3f:29:60:e3:06:44:e7:b6:ff:6e:3e:43:c6:68:58:0d:0a:86:
ff:56:29:ab:e8:72:9d:16:19:44:69:5b:02:23:8c:84:83:18:
b0:9a:5f:9d:d6:84:cf:79:a5:71:d8:40:14:b1:ce:98:f1:a5:
f7:c0:d5:d5:f1:4e:6e:d9:22:a2:bf:ca:b3:54:98:5f:51:08:
73:cc:9c:86:17:0a:2f:a4:be:ad:a2:a1:1e:88:12:ca:72:93:
cf:9c:b3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:24:01 2026 by rpki-client