Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: S/pk/EZ7yGnF3663tT8BQ6KU7/ybwz9H17A3rNLVhHY=
Subject key identifier: F9:E2:65:D2:5B:0F:D6:C0:8A:D9:34:9E:D2:07:79:17:0F:8B:93:BC
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 019D9962C8D1371D5285268BD67CFA961358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0D39
Signing time: Fri 17 Apr 2026 03:01:21 +0000
Manifest this update: Fri 17 Apr 2026 03:01:21 +0000
Manifest next update: Sat 18 Apr 2026 03:01:21 +0000
Files and hashes: 1: GsRkXOSW1fdFu3DPwvlbZ7bJfrs.roa (hash: LrZFy74UOAGrG2L260gD+OSmEU83mjEYLFF/UUa8s7U=)
2: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: ywe6Q/5UatWBtGapTR4xY2p9f+FMglWT9ZHMcEm8gNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:c8:d1:37:1d:52:85:26:8b:d6:7c:fa:96:13:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Apr 17 03:01:21 2026 GMT
Not After : Apr 18 03:01:21 2026 GMT
Subject: CN=f9e265d25b0fd6c08ad9349ed20779170f8b93bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4f:68:67:7e:03:ae:21:13:cf:b4:a1:2b:a9:
5c:67:1a:a8:2b:75:2e:6b:5e:e3:29:e0:75:37:79:
22:e4:2b:84:16:45:49:94:9c:4c:9e:7f:cd:0a:1b:
7b:42:36:54:2a:f6:b4:3f:aa:73:21:9b:b0:fa:be:
8a:d5:9c:07:14:77:19:69:8c:a9:8a:60:90:3d:cb:
cd:17:6b:44:7b:7c:60:99:cd:6a:86:7d:e7:2a:3e:
1d:43:13:1a:37:54:e5:63:0c:3f:b3:05:9b:03:dc:
3b:00:3c:b4:77:ca:e5:b3:71:2e:75:fd:35:4f:14:
a1:00:db:98:e8:7d:a3:73:51:a8:08:15:7a:c7:1e:
7f:b1:93:72:2c:c1:79:52:25:c2:cc:e6:a1:a0:fa:
80:58:5d:58:ae:b7:06:11:a1:7d:73:1c:92:01:03:
11:c0:74:ef:2b:43:92:f5:f9:ec:ff:08:12:d2:e5:
38:19:97:aa:71:a4:98:3e:ae:d5:c4:f2:90:f4:3f:
f9:d0:e0:e5:b5:f3:ae:e9:60:bc:4f:da:28:82:a8:
80:3e:74:3f:b4:81:83:25:cf:13:96:89:47:7b:7a:
51:5c:e7:0c:ec:5c:ac:e7:53:98:94:fa:96:49:ff:
09:11:e4:33:e8:80:da:5e:c5:75:92:24:a5:9e:3a:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E2:65:D2:5B:0F:D6:C0:8A:D9:34:9E:D2:07:79:17:0F:8B:93:BC
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c5:71:64:86:b1:b2:43:9a:bc:ab:48:11:db:f0:5d:bf:1a:
b1:38:60:e6:da:02:8d:68:93:d9:17:09:a0:2e:6c:ce:ea:7f:
c1:23:dc:59:f6:d2:80:7b:26:ab:d1:92:82:58:74:68:43:43:
e7:8e:4b:dd:22:8a:0e:e2:57:5e:45:98:16:04:b0:c1:1c:05:
b5:92:97:b0:67:69:10:c0:d8:82:e2:0b:42:b1:21:28:96:4d:
50:74:94:eb:ed:55:35:18:08:32:df:f7:85:12:a1:b1:c7:be:
2a:0a:b3:7d:6f:7d:a9:ab:d6:ee:18:6a:5c:3d:2e:46:0c:02:
ec:a3:c9:3a:05:97:4b:3d:ac:0e:ed:79:3d:cc:e6:a9:74:3b:
88:22:c3:ae:bc:d0:1b:f0:a9:fb:8d:e5:4b:90:70:d4:6a:30:
2d:5b:e2:74:73:9a:16:33:4b:92:f6:9c:c6:1e:6e:88:cd:c7:
55:79:97:c2:64:d9:48:3b:d7:27:47:40:83:c2:7a:80:cb:c7:
b2:e4:f1:bb:33:a2:d7:35:77:72:82:23:31:e0:0e:28:ed:ed:
0a:8d:00:24:2e:43:3e:5d:85:5f:c8:1a:64:69:80:74:48:47:
33:c6:2c:92:2a:29:64:ab:fc:04:79:3b:64:6d:6e:d8:fd:3a:
71:09:f1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:13 2026 by rpki-client