Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
File: 4DkMHDYd8FIkN2EI7_myDcLuAmU.mft (raw, json)
Hash identifier: fexcLBER5H5QgjOq8NxldJ4eTc17EPFT45mMydUWqcc=
Subject key identifier: E6:D2:04:D3:17:AC:BA:87:1E:3D:95:5C:75:9C:C4:5F:9E:20:8B:B5
Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
Certificate issuer: /CN=e0390c1c361df05224376108eff9b20dc2ee0265
Certificate serial: 019DA41C96B48C5E0BE11B9252AC17DD5BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
Manifest number: 18D0
Signing time: Sun 19 Apr 2026 05:00:30 +0000
Manifest this update: Sun 19 Apr 2026 05:00:30 +0000
Manifest next update: Mon 20 Apr 2026 05:00:30 +0000
Files and hashes: 1: 4DkMHDYd8FIkN2EI7_myDcLuAmU.crl (hash: mBIuUrJkPmJ8qqRyPYF38VIYK6NQz6XWFPUJCfhnxUk=)
2: HMpkFnFRNLrRrrjLr9m-Ha2OMAk.roa (hash: MvD+kW64gasfrmfOU4x0HNuN58jbkr9LphVnvyCI/70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:96:b4:8c:5e:0b:e1:1b:92:52:ac:17:dd:5b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265
Validity
Not Before: Apr 19 05:00:30 2026 GMT
Not After : Apr 20 05:00:30 2026 GMT
Subject: CN=e6d204d317acba871e3d955c759cc45f9e208bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:d9:cf:11:a9:91:0d:95:9f:5c:38:e3:d3:
88:f9:25:9c:54:84:ea:02:21:10:59:ca:f5:b0:d3:
4c:a4:45:de:2f:2c:c2:2f:42:bd:41:e4:36:c8:3c:
9d:e3:ca:94:df:9b:34:de:d3:43:fb:3a:09:c3:20:
56:cf:77:c7:bc:d5:56:54:a6:85:07:40:4b:07:32:
01:4e:bd:9c:2a:f7:b5:bf:9b:e1:57:49:87:78:03:
75:23:f6:09:40:98:e2:6e:39:5b:d5:ee:49:70:ff:
9d:a2:4b:77:af:69:72:34:62:b3:d2:ff:ae:fe:16:
dc:1c:6e:c7:9e:4a:99:c5:cb:aa:96:85:42:6e:c5:
8a:5d:b7:55:9b:06:08:45:e0:c2:bc:ea:6f:2d:bd:
17:dd:b8:8f:df:2e:16:cc:b5:91:00:b6:c4:32:8a:
f5:68:92:e2:f2:5c:7b:d7:aa:6f:f1:89:95:dc:a3:
2d:bd:23:44:d9:0c:77:de:82:d3:05:63:6e:1b:72:
42:83:4e:10:00:ba:ff:03:69:0b:1c:8a:a7:ab:17:
40:72:99:67:68:e7:26:8c:6b:81:5d:10:aa:fd:20:
53:d2:b9:1b:0a:cc:36:9f:1a:17:b1:59:01:78:36:
01:8c:65:8d:26:a1:b7:33:86:5f:db:9d:51:13:62:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D2:04:D3:17:AC:BA:87:1E:3D:95:5C:75:9C:C4:5F:9E:20:8B:B5
X509v3 Authority Key Identifier:
keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:31:a5:ac:1d:b8:ac:33:19:ca:14:88:f2:d5:4a:72:d6:07:
e7:8a:64:73:59:c5:ab:d8:ba:fa:66:47:76:e7:9f:40:a8:23:
ee:c8:6b:81:25:40:63:e5:8e:9e:08:10:7d:2a:06:1b:62:0e:
3f:45:ab:20:10:1b:49:3a:d9:5a:ca:e0:4f:86:70:85:85:43:
c9:22:db:95:ed:d8:a1:78:4f:95:24:20:2e:80:be:68:37:8d:
e0:d8:5c:7e:12:63:57:6e:aa:6e:c9:ba:bd:b0:c8:2b:1d:3e:
b2:16:ff:ae:57:da:6d:42:31:87:46:89:6e:8f:ea:84:74:48:
70:18:b6:a6:d0:d9:1b:56:52:00:ac:bf:be:e8:b1:c7:58:9c:
d6:a7:bf:8d:48:57:75:22:13:f0:55:3b:0a:2a:e5:9e:e8:27:
40:bf:24:ad:eb:ca:59:b4:18:01:c1:7b:40:3b:bf:d7:64:8b:
47:73:51:b3:8e:18:5a:04:ae:69:2f:e1:95:46:2c:46:3a:38:
e7:9f:76:01:3e:90:d4:f2:d2:e6:9c:2b:09:a4:09:b0:ce:93:
0b:4d:48:25:37:91:4e:1d:fd:d9:b6:6e:60:db:59:48:21:6e:
be:27:37:cd:22:69:ab:83:38:02:69:7a:25:65:4c:e3:80:7f:
b7:f1:d0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:34 2026 by rpki-client