Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
File: 4xnQzWVZPZaejUU4KhlKqnPA_4w.mft (raw, json)
Hash identifier: HkVHKEZzCXHsDw9Ff8LRd4Ntx1j9LYOIt7Wi3yCx9Do=
Subject key identifier: 90:3D:E0:D5:4E:AF:12:FF:7E:EB:84:76:CC:6B:A3:73:C4:EA:37:CA
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 019D9A3E3F033B2EEF5A07B687AB3E494051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
Manifest number: 136A
Signing time: Fri 17 Apr 2026 07:01:03 +0000
Manifest this update: Fri 17 Apr 2026 07:01:03 +0000
Manifest next update: Sat 18 Apr 2026 07:01:03 +0000
Files and hashes: 1: 4xnQzWVZPZaejUU4KhlKqnPA_4w.crl (hash: vnS+gJADK9fzFImCJG+J5+0imXF9YxCZ3l3uqGoKo2g=)
2: B4XqtMRju7ct1VHWSys1ZmsVDvA.roa (hash: dT4gZYld/5NxZfQ/re1cqoiLPKYDPvy18QhmjeiLxrE=)
3: JtnFvVL5luwjJsUrKE_PkZqBzv0.roa (hash: bNLA85FkwBGVG4amTnLndpNSGrwg8SVdNJn4yP+K6lQ=)
4: _biLnM_coqEwA_A8eVlJQZHQt48.roa (hash: 5mMri1uaYw577nOuv+pbuYsKwcFaxTbTyFZQFkO22x0=)
5: cvu881wX1J1NkelwvHsakF8V-nk.roa (hash: 3p0KxNsFZi7KD2HoriAn/X0d7O0pV7iqm6G3fj1N+gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:3f:03:3b:2e:ef:5a:07:b6:87:ab:3e:49:40:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Apr 17 07:01:03 2026 GMT
Not After : Apr 18 07:01:03 2026 GMT
Subject: CN=903de0d54eaf12ff7eeb8476cc6ba373c4ea37ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:3c:d6:95:c5:0e:85:18:33:92:9c:2c:98:
5b:57:83:22:ff:cd:fb:94:03:b5:3d:5c:30:3d:5d:
33:08:42:2c:2b:4e:e6:ab:dc:df:dd:8e:8a:5a:b9:
72:22:de:5f:22:db:98:22:37:6a:28:d7:ea:ca:62:
65:55:33:24:2a:bd:c1:90:14:d5:fc:9f:f1:23:c7:
c6:f2:db:8e:d1:05:0c:4c:03:2b:3c:45:2b:0d:75:
2c:ca:9d:a7:f7:4a:e6:08:60:9c:a0:6f:cf:2f:05:
34:79:c8:5c:49:a0:ba:33:38:ed:9a:ca:29:3d:20:
fe:04:f1:a7:75:cc:b0:0c:35:8c:ff:07:f0:09:95:
6d:ce:20:f1:2f:4d:7a:54:cb:af:55:10:43:a5:db:
8f:44:47:a3:97:dd:f2:38:d5:b4:c6:f1:55:c9:c1:
76:5a:a5:03:1a:6c:dd:2d:68:71:8a:5f:d2:52:8a:
17:6f:46:65:ec:4b:e9:23:14:33:15:43:91:cb:4e:
ab:ed:e7:d4:d5:d8:65:40:73:72:6c:a5:45:31:2d:
12:7a:af:c1:90:bf:80:06:52:e2:3f:f1:98:4c:24:
a6:bc:25:1a:c8:3b:79:fb:70:2c:92:3c:97:8c:d8:
e0:9d:0e:9e:8e:18:78:43:fe:e9:af:a0:01:a1:a7:
ee:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3D:E0:D5:4E:AF:12:FF:7E:EB:84:76:CC:6B:A3:73:C4:EA:37:CA
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dc:b9:2a:77:78:ef:25:1c:4c:a4:40:ef:d2:d6:8c:ee:b2:
5f:f6:19:1a:8c:f1:8b:b3:88:6c:02:dd:c7:03:cb:c4:37:e9:
cf:e3:7e:d8:b7:b8:3c:4c:38:f1:bc:96:f4:03:6d:93:03:af:
bd:28:0a:79:e7:af:b1:ee:96:3d:4f:7f:cc:7f:e1:b1:59:e4:
8c:ca:dd:46:97:43:22:a8:8f:2b:30:1c:d6:b1:83:31:a8:70:
9b:1b:3c:a9:e5:7f:f2:26:f6:cb:bb:db:52:41:63:0f:a6:04:
50:86:fe:8b:31:b4:ea:55:f6:69:5e:f9:68:8c:01:be:58:23:
2d:16:1a:06:ca:d5:25:56:c1:5f:57:59:b2:d0:a0:d5:3f:79:
b7:17:15:3b:34:a6:a3:ca:a2:7d:33:4e:5d:57:ad:d8:a4:68:
2d:05:9c:41:b6:c7:cd:74:fe:45:cb:f2:80:f9:92:5e:f3:42:
a5:6a:1f:a9:b0:1f:b4:be:10:09:a5:10:02:9a:a0:89:b7:42:
3f:71:85:51:d0:38:58:f0:30:75:62:b6:4e:bc:2a:40:e9:a9:
f2:6d:04:9a:ba:d1:6a:95:98:04:33:0c:7c:22:01:f5:2a:51:
ef:aa:1b:9c:6a:85:31:41:fb:80:e1:64:5c:1d:6a:3e:f8:07:
b1:98:e0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:08:58 2026 by rpki-client