Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
File: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json)
Hash identifier: fJ7wg/+pAuX0PNZOxL6nGFFIaV5CyWjRN2YDUrMf2MY=
Subject key identifier: D6:59:5E:B3:16:33:6F:1E:8B:A6:F7:74:20:C9:B1:36:8F:1B:83:30
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Certificate issuer: /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial: 019D9A06DBFCFE335C5A939175D6D70C1513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
Manifest number: 0A44
Signing time: Fri 17 Apr 2026 06:00:33 +0000
Manifest this update: Fri 17 Apr 2026 06:00:33 +0000
Manifest next update: Sat 18 Apr 2026 06:00:33 +0000
Files and hashes: 1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: vaI9Zi+eUNZ2EYtoxMW5HEVl85ULOMZ7KmDLRIVBLAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:db:fc:fe:33:5c:5a:93:91:75:d6:d7:0c:15:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Validity
Not Before: Apr 17 06:00:33 2026 GMT
Not After : Apr 18 06:00:33 2026 GMT
Subject: CN=d6595eb316336f1e8ba6f77420c9b1368f1b8330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:16:f5:2e:f9:1e:f5:eb:55:91:e2:47:f0:
cd:ed:a5:1d:34:41:7f:dc:d2:ff:b2:b0:64:ef:76:
1d:4c:7a:02:1a:00:57:bd:40:07:e3:99:81:29:9d:
a5:2d:bd:8e:29:77:4f:ec:64:18:a6:b7:4f:42:cc:
5a:03:fe:55:79:52:99:ae:aa:18:04:67:35:cc:41:
b3:b3:67:cb:a2:5a:9d:5f:c6:2a:df:59:20:45:8f:
1e:e9:44:1b:1d:eb:2f:23:25:46:1c:2a:52:cc:2b:
7b:25:7c:de:5c:21:73:07:38:0e:12:58:ee:aa:61:
aa:d5:24:db:40:77:8d:67:dc:b1:45:fb:00:c9:58:
e7:6c:c1:8b:77:b6:0a:1f:6f:26:db:f4:90:81:8c:
ba:06:f3:25:99:5c:5d:d6:8e:8a:c2:4f:41:ac:63:
61:c1:0f:8a:9c:3f:d2:6f:14:dc:c1:53:84:d5:4f:
21:53:93:40:f3:ce:fa:0b:4a:7d:3c:8a:d5:84:a6:
9b:45:7d:e6:ad:82:6c:45:e9:ef:76:e0:41:8e:8e:
aa:66:6b:99:10:72:87:46:ea:47:b9:dc:84:69:49:
21:55:96:a4:a1:a9:35:15:0c:87:7b:f0:cf:8e:01:
7b:2a:11:1f:85:6f:7c:21:d7:14:37:dc:55:33:f0:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:59:5E:B3:16:33:6F:1E:8B:A6:F7:74:20:C9:B1:36:8F:1B:83:30
X509v3 Authority Key Identifier:
keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:34:09:d2:7d:b8:1a:ec:a3:80:30:14:f2:bb:04:6d:e3:15:
68:02:25:5a:a0:3e:d4:cc:a9:b8:99:07:f4:b6:39:40:9b:f0:
41:bb:d6:ad:92:16:84:bd:c9:f7:ca:2e:05:fa:27:43:53:2a:
05:00:78:f9:b6:ae:4f:aa:33:75:a4:b5:00:50:0d:87:4f:a8:
c2:30:97:eb:21:7e:ce:ae:a0:da:5e:7e:0e:37:a1:3d:8c:14:
b4:54:a9:b8:51:84:87:79:77:08:58:01:c1:98:aa:6c:99:31:
d2:0e:d6:97:71:c1:80:56:f9:df:71:82:ef:1b:18:24:49:2f:
92:9a:61:70:71:58:ac:bb:a3:a1:76:52:24:42:09:ad:19:9b:
d2:f1:7b:2c:c6:2b:2a:3f:c1:0f:cf:68:90:3a:39:61:00:53:
0a:1e:f0:6b:1f:55:71:31:ad:0d:94:e0:0b:e2:fe:dd:54:41:
b7:ff:0c:1d:e7:f3:a3:02:1a:c7:db:74:4f:ba:4d:13:45:17:
dd:b2:39:f3:c5:0c:9f:bc:3d:9d:98:5a:ca:e5:8d:94:b0:40:
c3:5d:eb:d4:f8:4d:15:f2:a9:ae:19:1e:fc:62:ef:53:df:98:
bd:fb:2a:86:a3:29:6d:27:f4:fe:72:45:d8:c3:fc:d0:e2:2f:
cc:e4:11:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:19 2026 by rpki-client