Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: AU4mf1XAytXuwXQFUMVYD2IDxZFi6EspZiLCG0/xv+w=
Subject key identifier: A4:80:F8:3E:EA:3A:39:06:FB:9E:EB:1D:A4:23:7F:19:9B:74:16:03
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 019D9A3E608D6E419C82BA37CDF4D7EC1B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 0BFA
Signing time: Fri 17 Apr 2026 07:01:12 +0000
Manifest this update: Fri 17 Apr 2026 07:01:12 +0000
Manifest next update: Sat 18 Apr 2026 07:01:12 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: V3q/hhpgIxKO//8KdV/gv9aKARDZDXpcQt+tgqjlzps=)
2: ErpeCUDkmubemk25x6bhiE8fSGc.roa (hash: TTJUK42mws9XlE8j1BxdD7GShsktqMxOOwmtU5mBiJY=)
3: T0pinHQE9eLRbdmXpvSn-pLDjUA.roa (hash: fpKBkag1Eq814ryw6TGAsVdMfo9isfHsmaeJ5gB+g6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:60:8d:6e:41:9c:82:ba:37:cd:f4:d7:ec:1b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: Apr 17 07:01:12 2026 GMT
Not After : Apr 18 07:01:12 2026 GMT
Subject: CN=a480f83eea3a3906fb9eeb1da4237f199b741603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:2f:df:bf:ec:d1:11:0c:a1:3f:dc:6b:9b:
d0:20:36:d5:da:19:1b:9e:3b:03:1c:d1:50:7b:c3:
11:0f:95:18:6b:32:73:68:f5:d8:8c:41:b9:88:ea:
32:77:73:20:b4:89:44:95:e3:50:0c:45:dc:81:cf:
a0:30:5b:c0:25:0b:de:d8:db:d0:08:b0:c1:29:a1:
b8:7d:1a:3a:06:f3:eb:3c:17:d9:f8:d9:32:bb:fc:
e0:ca:87:34:f8:d3:6e:9c:83:72:a5:4d:85:cc:91:
21:4a:09:8e:1a:c7:8a:21:b3:1c:46:86:69:57:dd:
49:47:a2:be:e4:9f:34:ab:8f:04:35:08:18:c7:df:
74:d2:9a:b2:7a:09:39:ab:e1:3c:83:3a:94:e6:0f:
ba:d4:3e:1a:0a:dd:2e:9f:a6:70:ab:58:42:d7:bf:
61:18:e7:2e:f7:40:4b:ab:26:6c:2e:24:f2:cb:c6:
62:4c:70:d3:5b:4a:56:64:39:74:8b:b3:92:46:5e:
c6:a3:31:ef:26:4e:90:cd:43:40:f4:0f:27:dd:5d:
9c:2d:a8:42:64:6a:13:3c:fb:ea:17:15:f5:a0:1b:
df:40:f7:ef:2b:9a:13:1b:7d:03:ea:1a:cf:4a:a9:
d5:6f:a1:a5:35:24:e5:83:e0:4b:8d:fa:06:03:9f:
7f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:80:F8:3E:EA:3A:39:06:FB:9E:EB:1D:A4:23:7F:19:9B:74:16:03
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c2:38:a5:66:8e:8e:0b:74:7c:9f:d9:b4:d1:cb:44:8b:e8:
6d:82:3b:62:f6:1b:eb:66:e5:26:b1:7b:ca:16:ad:62:9b:f4:
84:24:0c:77:7b:9e:66:c7:b1:fe:6c:e1:0c:21:fe:90:df:49:
27:d1:63:56:59:42:be:2f:80:ac:40:94:fc:4f:b7:ff:ce:9b:
4c:f0:3d:89:e7:c4:d0:bd:ef:85:a2:46:55:b8:b2:7a:b5:9d:
fb:83:ee:58:f2:5b:7f:7d:6b:fd:d6:06:84:17:d4:fb:90:7f:
12:6e:30:e4:37:2b:86:f2:26:b6:d6:ef:60:25:4d:1c:85:02:
48:02:e1:cf:67:56:a2:b3:7e:69:3b:0e:0d:a5:16:23:13:70:
56:51:a4:8b:a7:47:be:bc:17:e5:5d:69:97:f7:96:87:1f:0c:
ce:86:20:59:33:78:2a:ea:18:97:a3:e4:1b:99:54:e2:05:f0:
de:64:f6:3d:b4:6c:0b:18:30:4a:a1:a7:c3:1c:97:05:fe:30:
82:19:7b:d2:f3:28:34:31:2b:43:ad:b3:e9:de:1d:6d:0d:7e:
e1:cb:be:be:35:36:41:bd:48:80:8a:de:48:28:c9:8d:4f:7a:
19:9f:05:14:24:0e:ef:a8:92:5f:c6:77:5d:46:ff:cd:e5:8f:
51:e7:2c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:13 2026 by rpki-client