Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier: xEQ2oau55oNmIQe8ptyK96vGA08E0H0AeTo1/g3g4e0=
Subject key identifier: 9D:4E:A8:5E:46:BA:4D:C3:50:84:85:0B:9C:E8:73:FB:44:86:1F:0B
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial: 019D98F4C42C8FA34147CFA8D190E4EC6BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:01:10 +0000
Manifest this update: Fri 17 Apr 2026 01:01:10 +0000
Manifest next update: Sat 18 Apr 2026 01:01:10 +0000
Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: s6f7fXSpMKhrENcZRwTxEw8Dspuwea9tB21oZTLEwoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:c4:2c:8f:a3:41:47:cf:a8:d1:90:e4:ec:6b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Validity
Not Before: Apr 17 01:01:10 2026 GMT
Not After : Apr 18 01:01:10 2026 GMT
Subject: CN=9d4ea85e46ba4dc35084850b9ce873fb44861f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:8f:7b:53:cf:c2:07:7f:43:f2:06:13:a5:
9b:eb:09:9c:fa:a9:f0:4a:44:fc:b6:84:2f:f0:75:
c8:0b:2e:49:4f:f2:e1:01:66:a7:18:d9:e6:f4:7e:
f9:f5:b3:9e:f6:75:fc:d6:b0:58:d1:37:71:6e:ce:
dc:23:bd:52:af:0f:3d:fe:4e:d1:f1:43:07:a2:bc:
4c:f1:f0:ab:b7:22:32:57:44:0a:6f:d0:19:e2:6c:
6f:2f:18:77:12:a9:a5:d5:77:24:6a:27:ee:53:6a:
14:f3:1e:41:67:a7:d2:ec:e1:96:7b:4c:9b:48:51:
4d:8f:12:5a:b9:35:5a:8d:d0:31:7f:1e:8d:29:90:
48:cb:a6:5c:18:df:5c:2b:b8:ea:c8:ca:bc:d6:9e:
ed:c4:66:9b:e7:49:72:fd:0f:ff:d6:f5:f9:4d:ed:
7c:51:1a:98:a1:d2:fd:60:df:36:6c:0e:47:c1:9f:
5d:ca:b3:2d:25:02:07:c2:be:62:30:55:96:e7:19:
9d:dc:bd:93:c4:02:88:c8:05:2c:f2:70:5e:1d:b1:
21:ca:a1:60:e6:86:9b:ea:86:60:ab:46:b6:9e:e8:
b7:97:02:e1:95:9a:72:d8:c8:6f:2d:98:61:28:da:
ec:e2:97:c7:95:a1:87:f1:2f:4d:0b:57:4c:c5:c5:
2e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4E:A8:5E:46:BA:4D:C3:50:84:85:0B:9C:E8:73:FB:44:86:1F:0B
X509v3 Authority Key Identifier:
keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:48:cc:1c:8e:e8:2b:79:59:42:8c:ad:c6:40:1e:fe:e0:52:
4f:18:37:d4:2e:f8:9e:85:81:b8:06:40:a0:71:27:04:33:76:
35:23:61:67:47:e2:e5:cd:6b:51:0e:7c:ea:1c:07:bd:fa:58:
01:e0:31:64:7a:58:e3:3b:b0:87:ef:41:ae:1d:68:8a:d6:a7:
98:97:b1:60:1b:9e:2e:c1:53:cd:3f:08:2b:56:c0:7d:e9:cd:
c7:b5:bd:67:fa:f2:a0:b8:de:33:15:97:ae:79:be:6b:a3:b7:
cf:0e:9a:89:59:93:d8:10:64:c0:31:b5:57:9b:b3:e9:b3:db:
a1:58:90:91:c6:50:16:8c:d9:dd:fb:46:d2:57:c7:26:db:82:
b6:fe:c2:02:a1:22:81:77:29:5c:e0:69:21:00:ff:64:45:4e:
86:61:00:f8:ab:ec:27:12:27:af:ea:df:06:38:ca:12:da:39:
0e:e7:5c:c8:c5:ea:9c:02:59:13:46:73:70:6a:be:fe:3d:2c:
e6:6c:eb:dc:27:2a:49:c9:c6:01:2b:1a:d3:bf:c1:ec:6f:35:
10:2b:66:7b:17:2e:2d:6c:7d:ae:29:0f:be:4d:5d:06:d4:81:
9b:6a:d2:99:9b:5a:ef:bb:2d:8c:25:8c:60:1b:df:6d:c3:83:
78:63:69:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:25 2026 by rpki-client