Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier: n1/8Frrchqu/Mp4+Qpk/VF92AIBNcwzBHKmrx8s3otw=
Subject key identifier: F9:BF:51:06:22:0C:DC:49:0C:9E:1D:1F:37:1F:95:5B:B6:06:EE:D1
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 019D99CFBF57DD7B17CFF539240CF291F7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number: 0B47
Signing time: Fri 17 Apr 2026 05:00:22 +0000
Manifest this update: Fri 17 Apr 2026 05:00:22 +0000
Manifest next update: Sat 18 Apr 2026 05:00:22 +0000
Files and hashes: 1: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: EIPBaH3a07wktSLJQawDOoJXA0y011DdgAlP3yNw7Es=)
2: 5F_Lv04RXNd_Y46Aej2XB7OXRCs.roa (hash: OFOrOgL1BwCDJs6vNTJlxJXJgyRTHA3y/UE7TO8d/LM=)
3: oil7N-Cu9Bp_DmPdE_j9IZL0Ozo.roa (hash: sJuR4lvRXMBU3fcQ7PumT3oOEz1g58/Vsv/QWac8Orc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:bf:57:dd:7b:17:cf:f5:39:24:0c:f2:91:f7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: Apr 17 05:00:22 2026 GMT
Not After : Apr 18 05:00:22 2026 GMT
Subject: CN=f9bf5106220cdc490c9e1d1f371f955bb606eed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:a8:e6:ee:5c:b9:c8:a0:71:20:01:9e:6c:
fc:69:d7:e7:8d:03:d4:8f:c5:f5:d4:c0:62:8f:09:
9d:bf:82:fc:bc:6e:14:13:95:6f:97:67:57:2c:b5:
6e:a8:5e:a1:ff:38:ff:b6:0a:9f:cd:be:c9:0c:fb:
21:a9:41:09:fb:a4:b3:8d:3e:cf:89:66:19:b6:bc:
e6:ae:5e:78:3b:57:4f:a7:e7:88:c5:58:3c:92:7c:
92:72:ac:37:92:4f:59:11:fe:e0:64:18:5c:3e:33:
24:2e:17:fc:98:d5:d5:09:67:53:ca:67:af:48:94:
1c:a1:ec:48:60:9e:af:ff:a9:35:16:51:d2:f7:1c:
95:fd:8f:6a:1a:c1:3e:2a:87:f6:1a:80:6c:e9:1d:
a7:da:16:b1:a3:90:c3:af:3c:e1:90:4d:09:31:68:
ea:cb:62:29:0f:28:2e:12:ec:83:ad:cc:4e:f0:0b:
ad:d7:0e:58:48:19:81:c6:b2:b9:7d:bb:d6:d5:78:
ad:5e:8a:04:72:86:c2:d9:cf:65:70:49:f2:65:66:
f9:e3:d2:9d:8b:b3:5b:a9:17:30:70:db:6b:09:91:
a1:fb:63:3b:97:2c:68:51:00:f8:95:3d:07:c5:74:
d9:f7:5f:6d:4d:31:e0:9f:bb:11:47:66:6f:6c:bc:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BF:51:06:22:0C:DC:49:0C:9E:1D:1F:37:1F:95:5B:B6:06:EE:D1
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ab:ff:4a:6f:85:e3:fa:0e:da:ee:7c:e5:ca:7d:06:a4:06:
56:d5:83:c6:ec:b1:e4:c2:65:a3:96:bf:08:a3:60:66:1b:4c:
7e:a3:f2:51:c4:7b:7b:82:04:7e:e6:d5:a9:bf:f0:4a:0b:73:
c7:e9:28:34:c7:69:a2:95:a3:68:ad:9e:5e:d2:79:08:9f:a1:
1c:33:30:20:d5:73:13:dd:f2:37:81:3a:12:5b:d7:0e:f9:e1:
8a:af:7c:b9:35:92:eb:e6:0a:62:1a:e5:fb:21:2f:d9:e5:5a:
0a:71:bd:c4:a8:7c:a0:84:df:2a:42:72:f8:13:da:4f:88:e9:
f8:40:41:30:64:97:39:eb:dc:08:0f:32:f2:68:d7:7d:1e:b2:
96:df:a2:99:7a:d8:04:61:69:79:d0:1c:b3:77:92:0b:74:6d:
69:8a:cc:04:5e:1d:83:bd:3e:fb:28:83:7f:ac:b7:e1:87:c9:
46:1e:ae:61:de:2f:66:70:f6:47:fe:93:60:5f:7a:d4:71:a1:
cf:e9:09:95:eb:50:4e:b9:29:dd:5e:ff:3d:72:48:00:1d:b5:
80:62:8c:e4:9f:d4:b6:e6:f8:70:5a:22:a8:14:a0:c8:95:d1:
f2:50:09:c7:da:8b:f3:d1:78:41:be:30:d3:a7:35:14:4e:dc:
e4:e6:bd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:26 2026 by rpki-client