Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier: RdBAXeRY1ghgBJfaPIjNj/M+mGUceCopY5xMBcnJttg=
Subject key identifier: 90:65:62:44:ED:B7:40:51:36:F7:1B:EF:68:E3:84:27:C8:59:40:22
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial: 019DA309DD9DA5A3BFF3B29FFA3196A2A3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 00:00:25 +0000
Manifest this update: Sun 19 Apr 2026 00:00:25 +0000
Manifest next update: Mon 20 Apr 2026 00:00:25 +0000
Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: FAT9m1ki99PudpSgFnrTahe+x7RhIwTvjFafwgGxZzM=)
2: GD22NDKlkAh5bp67GRvvW84yHsU.roa (hash: LtP9pMPZerVqZeqzrIl5QfQhM+bLwsaU/FGis7xu4Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:dd:9d:a5:a3:bf:f3:b2:9f:fa:31:96:a2:a3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
Validity
Not Before: Apr 19 00:00:25 2026 GMT
Not After : Apr 20 00:00:25 2026 GMT
Subject: CN=90656244edb7405136f71bef68e38427c8594022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5c:cc:62:5f:af:10:57:f8:ad:b5:b0:05:74:
5f:31:0c:cf:d5:7c:ff:f4:5f:ba:0c:fb:7f:53:60:
bb:22:dd:01:07:e0:50:23:c5:b1:b7:70:1a:fe:c2:
d5:6f:4b:d0:cc:38:5a:07:7e:d2:f0:8e:f1:18:69:
21:6a:58:90:7e:6d:bc:b6:ef:7d:c8:cd:72:25:5a:
63:7b:30:56:2a:25:cc:90:ee:41:78:ff:17:cd:42:
85:f0:9d:88:aa:dd:65:5a:ed:f4:f8:09:fc:f2:01:
86:be:f5:e2:c5:2a:ad:85:a5:53:45:7a:b8:9a:0d:
8d:b0:04:90:9b:b8:42:4b:67:20:50:43:67:8b:0b:
f2:91:97:0f:6e:81:86:2e:ed:1e:2d:80:99:19:b3:
48:bc:3d:ca:49:34:a8:cf:55:8d:70:0b:02:53:75:
22:b9:51:18:ee:60:f8:7b:2f:84:42:5a:88:b9:b9:
97:7a:9d:b0:a5:76:de:9a:f3:01:43:58:cb:83:2a:
c3:71:74:ad:69:50:ae:09:9e:99:47:a2:81:13:82:
99:73:3c:78:3b:f6:22:af:91:7b:96:ae:36:fb:00:
9e:7c:f6:0c:90:0a:dd:1f:8d:27:a5:75:c0:a4:a9:
a9:e6:75:ba:39:ac:ee:64:12:5f:fb:3e:d8:ae:b2:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:65:62:44:ED:B7:40:51:36:F7:1B:EF:68:E3:84:27:C8:59:40:22
X509v3 Authority Key Identifier:
keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:87:a3:b4:5e:ae:db:3f:0f:1a:71:fa:a7:03:57:19:23:5a:
bd:b5:17:8d:78:47:1f:91:85:04:b9:e1:fc:fe:40:99:f4:cd:
54:42:3a:bc:6c:e5:89:84:fe:9d:d6:ad:17:e4:b6:3e:b1:d2:
a2:69:fa:b0:c3:c8:2a:0c:0e:2b:3a:bd:1b:da:95:ca:f7:ae:
aa:ec:6f:5b:91:e1:9e:10:57:f7:99:2c:c9:92:d6:6f:fb:4e:
32:e4:81:03:d2:e7:9f:8d:c3:10:58:7a:b5:bd:fd:25:2d:02:
ac:f6:90:c6:4e:77:a5:24:e0:d8:4d:20:98:47:03:16:bf:1f:
31:6e:ce:4b:12:1d:18:fe:2b:a9:0e:a5:ef:52:04:d4:09:17:
8c:9a:f7:7a:67:82:6f:ce:10:4c:24:8d:59:99:ab:be:ee:04:
a0:f6:34:aa:e3:b5:b5:c9:34:de:f6:0e:c0:3d:31:80:b3:f4:
f4:ea:fe:d7:3f:de:32:0c:b0:32:1a:f1:18:be:20:74:21:1d:
be:2c:b0:7b:e7:5a:90:72:c4:3c:6f:bd:6e:82:05:a6:30:60:
35:80:0b:3a:c3:5c:3b:88:74:fd:31:1e:ea:e2:57:69:f7:66:
59:67:01:35:0c:16:69:1f:a8:f8:63:79:5e:83:29:9f:aa:9d:
23:a9:5c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:12 2026 by rpki-client