Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
File: 4ygMY1Kgv7t50knIh17RhuzOioY.mft (raw, json)
Hash identifier: eGmbEjE59MSEyG/DHC+SIhbbYjKDDaN4Rh0WfM1H0R4=
Subject key identifier: 21:B4:83:0A:F6:DA:3C:8B:3B:CA:08:A3:EC:DE:CE:32:E4:E4:B9:65
Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
Certificate issuer: /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Certificate serial: 019D99992D3D3CE7E04E33B9C6DBC3D843EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 04:00:45 +0000
Manifest this update: Fri 17 Apr 2026 04:00:45 +0000
Manifest next update: Sat 18 Apr 2026 04:00:45 +0000
Files and hashes: 1: 4ygMY1Kgv7t50knIh17RhuzOioY.crl (hash: 2Tkompj9GHqOgVhHC6Xwe8cJnk+gJ2cJ9yCHcCYsENw=)
2: D3RzDDZgPLG3UCsxVx6Q8ZzLm1I.roa (hash: kVx9KqwTwAznM+coaQfniQbA9ErAhmA+cdao1OKFFKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:2d:3d:3c:e7:e0:4e:33:b9:c6:db:c3:d8:43:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Validity
Not Before: Apr 17 04:00:45 2026 GMT
Not After : Apr 18 04:00:45 2026 GMT
Subject: CN=21b4830af6da3c8b3bca08a3ecdece32e4e4b965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:42:12:1f:5c:fd:0c:fb:f8:c5:cc:94:9e:81:
f4:eb:aa:b2:37:64:cb:23:72:ae:be:6b:2c:af:a5:
fa:79:2e:8b:02:a4:3e:ce:1e:de:75:83:73:cd:dd:
67:7e:3a:1d:21:53:ef:07:4b:84:de:03:ea:f4:e4:
4a:7b:d6:b8:b0:27:b1:31:c7:e1:5b:4a:7d:70:d2:
de:34:f7:a4:92:a5:76:4d:d5:91:d8:6a:d7:c3:17:
05:6f:2b:5a:cb:9d:fc:41:a7:51:33:28:31:07:e8:
98:dd:e9:ee:f4:c5:2e:9e:84:b5:13:fd:95:f4:4a:
40:bd:9b:41:c4:64:c3:2c:8c:55:4f:67:e7:60:4b:
e9:47:75:de:16:d8:06:f6:7c:1d:08:d9:5b:75:6c:
cf:66:1d:2d:87:6a:28:74:aa:f9:f7:96:f9:db:53:
8f:23:96:0b:fa:97:07:3f:d3:b7:4b:cb:44:84:18:
5d:47:3e:99:43:fd:60:ff:3e:7f:92:3b:a2:c3:bb:
1d:96:c9:fb:b7:e4:19:b0:34:a7:74:b8:e9:36:e9:
18:a8:14:b7:6b:51:44:75:68:d3:1e:08:7a:d4:0f:
6c:c6:64:6a:18:9e:f5:3d:34:cb:27:44:fa:dd:16:
cc:5b:13:7e:1b:27:65:c7:7b:5f:b4:ee:a8:2e:fe:
1f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B4:83:0A:F6:DA:3C:8B:3B:CA:08:A3:EC:DE:CE:32:E4:E4:B9:65
X509v3 Authority Key Identifier:
keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ff:c1:48:78:1a:98:d0:13:93:0b:58:74:e9:25:b1:04:87:
8c:9f:45:69:61:15:b1:3f:22:ed:3e:c6:7c:ac:1e:d2:15:66:
59:48:cd:cf:3e:ba:26:04:b2:8f:46:81:4d:c7:16:80:ac:d6:
d0:f2:66:0f:08:6e:de:b2:9b:3b:75:02:ed:78:eb:bc:77:89:
df:22:90:22:ed:94:f9:e9:a2:26:18:5d:f9:58:46:7f:7f:6e:
43:dc:8c:2c:e7:71:72:fc:3f:93:f7:24:21:da:4a:02:10:ac:
14:9d:cf:ee:7a:b9:3a:f1:c8:9b:ad:ae:09:e1:88:20:24:57:
cc:da:76:13:4d:99:86:cc:6c:63:ea:3c:f9:ea:4a:45:7f:5b:
c2:9d:6a:98:7f:9e:14:1a:aa:31:0f:a2:c9:66:6f:c6:20:bb:
d2:b1:df:18:30:ee:c5:d7:e2:71:4d:65:93:0c:a1:46:b3:e0:
1a:83:12:27:2d:e3:ce:d7:a9:ce:74:75:a8:aa:b9:b5:31:6a:
d3:95:58:64:47:a8:a2:3e:66:6a:5a:0b:18:88:be:91:46:57:
d9:70:79:c1:c2:71:4f:00:06:1f:98:ca:5c:9d:2c:49:4a:96:
25:a3:63:6d:4a:c6:33:67:6b:ae:9a:d8:53:bc:4c:f6:9d:d5:
18:29:4f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:52 2026 by rpki-client