Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
File: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft (raw, json)
Hash identifier: 6/MM791KadJFeZ45tKr3tr4Od74kztT/L6s8Es9LraM=
Subject key identifier: 6B:31:0F:EF:98:41:FD:87:CA:9B:7E:BE:F4:DB:81:C8:3F:74:2D:06
Authority key identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
Certificate issuer: /CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Certificate serial: 019DA3AF2617BA817EE8EE1FE36983C95EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 03:00:57 +0000
Manifest this update: Sun 19 Apr 2026 03:00:57 +0000
Manifest next update: Mon 20 Apr 2026 03:00:57 +0000
Files and hashes: 1: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl (hash: ZvZlzEnx+SWJ3/xirxQv2aQnYt4JJUVbMu4cE+npl9g=)
2: Ci7zv_DnAxQFZ_khRfP74GA8IGU.roa (hash: cMMuhG7xrtOzbQLc/BDIeV4S+eWZ3lL1QRAwLOKEPgQ=)
3: hvjTcKPQGXrhHxR8FLC4HcSQhWk.roa (hash: nOSvBwGcqr48/L9ifoZ/bQG7uxX3sVi/N4rTjGne47k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:26:17:ba:81:7e:e8:ee:1f:e3:69:83:c9:5e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Validity
Not Before: Apr 19 03:00:57 2026 GMT
Not After : Apr 20 03:00:57 2026 GMT
Subject: CN=6b310fef9841fd87ca9b7ebef4db81c83f742d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:68:58:04:d3:dd:7f:ca:fb:df:bd:38:c3:
32:42:e4:c4:71:4e:d7:9d:a2:06:0d:85:f5:6d:02:
ef:c5:c5:4d:f6:ed:97:b2:52:40:70:5f:a4:d5:28:
d1:4f:41:e9:58:b4:2b:cf:9c:c4:1d:cc:e4:41:39:
43:ae:02:43:29:2f:45:36:3d:02:d8:1f:94:ca:d6:
7c:01:72:4f:99:7c:07:0d:33:5b:d9:f8:af:0d:f5:
4e:8c:45:3c:ad:e9:cf:c4:be:6e:ea:9a:08:53:19:
88:7b:71:2a:2c:93:c6:00:12:02:3a:fc:bf:96:e6:
a1:b8:8b:9f:a6:ea:d2:51:60:30:ef:5a:07:85:3c:
2e:d8:a9:38:3c:74:42:3f:24:2c:95:55:03:78:d0:
7e:7b:e4:f2:1a:2c:ed:c3:72:9b:aa:e8:b8:dd:c0:
b4:f0:b3:63:da:22:86:0f:0e:5e:22:29:9c:73:e2:
3c:cf:c5:67:f4:93:e0:f5:d4:b3:cb:f6:a5:c0:aa:
ba:b2:3f:d4:13:79:37:21:b6:41:21:4e:01:7b:e1:
71:92:db:d7:26:ea:ef:cb:1b:3e:0c:fc:a9:d6:22:
16:95:d9:d0:fa:4b:bb:65:80:c4:fa:8a:3e:7c:f7:
7c:11:12:8a:80:96:d8:35:d1:85:4f:df:64:0d:4b:
c3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:31:0F:EF:98:41:FD:87:CA:9B:7E:BE:F4:DB:81:C8:3F:74:2D:06
X509v3 Authority Key Identifier:
keyid:E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8e:03:fb:33:87:61:01:93:a4:ad:74:55:be:e1:aa:f7:fd:
38:eb:29:9d:eb:b6:e0:d8:19:34:4e:bd:88:f6:40:5b:e5:b2:
88:34:20:96:6b:fb:c4:c6:54:fb:e6:99:1c:68:4f:a2:57:14:
90:ed:e6:ec:a6:2c:63:d0:e3:e4:8b:55:68:c4:c2:0c:1a:ad:
52:9e:80:66:7a:87:47:7d:d9:d0:35:82:cc:1b:9c:da:34:d2:
63:14:88:a9:24:4a:47:52:46:b6:09:6d:66:e5:a9:4b:2e:7f:
ce:54:9f:c0:53:b5:9a:b4:59:0e:03:6a:58:d1:41:5f:e5:f1:
bd:20:67:cf:a8:f6:0a:e1:61:da:17:da:72:db:3b:c0:58:c9:
6c:43:54:13:9f:c1:e0:38:19:e2:47:67:6e:2c:22:f0:d9:f6:
4c:7c:81:43:52:f4:f2:ab:85:e3:59:34:a7:60:65:60:0c:72:
c2:42:bc:31:c7:56:1c:7a:bb:46:ac:c5:43:ff:9b:3c:b8:83:
65:57:3a:21:e5:7a:c6:79:8f:3b:2d:7a:0d:f5:1f:ff:42:78:
12:45:dd:6c:36:96:12:53:7c:18:14:17:67:78:09:77:41:1f:
92:02:fa:1b:ca:26:b8:af:fd:29:af:35:3a:71:87:91:37:bc:
68:58:b4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:11 2026 by rpki-client