Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: +hnKTJ+cs4T/hSLUNC1UtF4kdknXfx3JBAmOz4HwLkk=
Subject key identifier: C6:BB:1E:AD:74:F9:10:3D:73:B1:13:8A:0B:0E:EF:D1:70:55:86:5F
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 019DA4542311DDE4BF13726CF03BEA9565DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 06:01:10 +0000
Manifest this update: Sun 19 Apr 2026 06:01:10 +0000
Manifest next update: Mon 20 Apr 2026 06:01:10 +0000
Files and hashes: 1: E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa (hash: iGIvi874jRBhxZZbEUcwG0C99qEqnZSND8WgM3AT+F4=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: rJvROzAT+IOc0cz3dL6B1ATabPqg/gC2WEIFw2HdZUU=)
3: yUKdjmZYtQWjFFXFgM-27cUdhs0.roa (hash: ob1AlTKcmBmfwJd93MbWCK4KiRPHg8c27xb+FIsvFL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:23:11:dd:e4:bf:13:72:6c:f0:3b:ea:95:65:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Apr 19 06:01:10 2026 GMT
Not After : Apr 20 06:01:10 2026 GMT
Subject: CN=c6bb1ead74f9103d73b1138a0b0eefd17055865f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:45:a9:53:ac:17:6b:87:b9:a9:c3:84:d7:
e0:01:5d:d2:8a:20:e7:72:f5:f6:9b:22:0a:22:f4:
ed:e8:49:4a:4d:a5:a3:03:ab:f1:8c:32:90:f5:7a:
58:9c:00:93:0b:9d:71:c2:16:46:39:b1:90:fe:18:
05:83:c1:35:b9:14:fe:49:25:20:2f:63:17:4e:59:
1e:f4:8b:ea:72:b9:22:d5:a6:79:2c:36:e3:99:6f:
47:7b:70:34:33:fa:03:b6:bd:9d:39:1f:21:dc:23:
23:f3:be:73:a3:9b:64:89:55:c3:2b:fb:00:fc:61:
6b:42:59:35:98:b5:04:3a:b2:23:6d:3c:f7:30:f7:
45:9e:f0:1f:97:75:fe:f1:80:f7:d1:1b:76:72:ee:
0c:cc:ac:a5:4f:ba:e9:80:df:86:95:6e:1d:79:8d:
73:1b:52:73:15:23:d0:94:1e:90:1e:1f:c2:35:2d:
e4:97:87:04:c3:d8:5c:5a:8b:04:e4:da:a9:f6:a5:
76:f6:43:e0:42:cf:b8:c6:d9:87:c1:9a:f4:30:bb:
95:9c:66:34:23:fc:71:8f:6e:c2:d9:f6:30:6a:5a:
37:a5:6a:96:3b:4d:46:9d:f9:d8:8b:01:fd:0d:76:
37:7a:39:03:c1:02:aa:4b:3f:ec:53:8b:48:fb:bf:
a4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BB:1E:AD:74:F9:10:3D:73:B1:13:8A:0B:0E:EF:D1:70:55:86:5F
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:55:0c:59:7c:f7:38:a6:66:b5:04:27:25:4e:35:b3:94:1a:
fd:ce:bf:a2:5b:7b:4f:b2:18:86:a3:a8:fd:cb:9d:b7:21:d0:
0a:38:3a:67:de:36:5a:b6:5e:8c:1b:91:5c:33:e9:d4:d8:df:
c6:ee:e9:8d:b0:8f:c5:8d:d1:e1:d3:f7:b0:a3:40:df:44:31:
fc:bd:a9:28:56:b0:35:00:a7:e1:ac:e1:99:95:f9:fc:c4:36:
63:ff:e0:ea:b4:88:81:ae:01:68:ad:89:92:85:52:4d:2d:d6:
4e:39:54:be:a5:54:01:ab:33:42:8c:46:f2:77:01:d5:70:b3:
81:6b:d6:4a:62:ed:73:67:3e:8c:3d:79:71:5c:38:37:72:81:
ff:bb:bf:d0:d6:e0:32:a3:15:5c:7f:82:32:58:20:00:f6:bb:
a3:86:17:cd:8c:9e:21:61:7d:3f:74:35:8b:15:b8:48:13:94:
71:cc:88:f9:c9:c4:64:b4:98:db:82:ff:b2:99:a8:c0:f4:64:
12:ef:13:5b:0c:e2:8e:f2:ec:60:37:fb:55:23:14:74:ad:18:
c8:b0:de:68:b9:58:25:2a:1a:61:4c:17:c9:4a:bb:81:3f:df:
b7:fe:90:84:79:3b:df:7d:8c:43:ee:12:a4:ed:5e:8d:9a:d9:
6a:9e:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:38:38 2026 by rpki-client