Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: wkK6S/c2U5nD/CLGfD2c1f+0Oo/m0GxP4DKqSH6XGyk=
Subject key identifier: 06:6C:2F:07:78:49:2F:C7:00:4A:1E:EE:C1:DD:8A:51:D3:72:4E:FC
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 019D98864841C30C594F9CBFB431DFBD5FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 23:00:30 +0000
Manifest this update: Thu 16 Apr 2026 23:00:30 +0000
Manifest next update: Fri 17 Apr 2026 23:00:30 +0000
Files and hashes: 1: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: wt9FupYa2EGJFm3tOUyEG/n4Z6g5TtKZGBgb9ZW9U7k=)
2: jbafLlCB65wc3lu8qCmYl11AIFk.roa (hash: K+M36ULpoKKc2R4rksKlSojLYrf7EhhEe4ldkXRNVqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:48:41:c3:0c:59:4f:9c:bf:b4:31:df:bd:5f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Apr 16 23:00:30 2026 GMT
Not After : Apr 17 23:00:30 2026 GMT
Subject: CN=066c2f0778492fc7004a1eeec1dd8a51d3724efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:d5:05:82:6a:dc:ab:89:31:70:22:84:a0:
d3:31:2e:4d:85:9d:a4:e5:e3:d6:97:7f:b0:c6:5f:
d7:1e:01:27:ba:91:ba:cd:41:78:6a:c2:3a:89:9b:
14:7d:2e:99:7f:d1:85:1e:38:84:bf:ca:fa:de:b0:
40:d2:0e:96:7a:f6:76:00:f1:94:38:8f:d3:8b:b0:
ed:37:0f:d6:6c:ac:67:3e:d8:f2:de:ef:9c:60:6b:
15:75:fb:53:23:4a:e5:11:76:8c:e0:d7:99:23:05:
d4:ff:11:44:92:71:d8:b4:40:d5:b0:f8:1b:a7:fc:
a0:88:49:10:62:70:3f:b5:6f:bc:64:23:7f:15:79:
17:1c:f8:48:e5:08:f2:4e:29:ae:1c:83:c5:33:ff:
00:22:4f:e3:23:6e:48:02:39:cb:4b:80:92:34:ef:
d5:b1:5d:9d:c5:9d:35:0d:44:6c:ab:7a:0b:89:73:
e1:86:03:4d:56:a4:0c:2b:cb:12:83:35:e4:59:6f:
3b:cc:3f:38:40:c9:84:a5:26:be:c2:fe:e0:3a:ba:
2e:77:4d:cb:f6:70:a8:4e:82:50:f8:62:72:57:f9:
43:2d:f6:e5:69:0a:ec:02:b6:d3:b1:e0:36:cc:f0:
00:1b:e8:d6:72:f7:b4:0c:7e:d7:84:97:2b:4e:5f:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6C:2F:07:78:49:2F:C7:00:4A:1E:EE:C1:DD:8A:51:D3:72:4E:FC
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f1:22:51:3c:96:53:9f:e7:8e:ea:f6:4d:65:e0:97:82:09:
7c:44:96:19:b7:d4:f5:7e:0e:77:ad:57:3b:37:af:5b:61:36:
ef:83:3d:93:2f:12:7c:8c:76:16:84:a1:ee:d7:05:fd:33:bc:
e9:11:47:01:0d:31:ce:c6:ac:91:2d:4d:a1:e8:0a:01:e8:89:
d0:30:25:04:9b:5c:2d:10:12:2d:c0:b1:2a:9f:77:8c:a6:4f:
fc:20:d6:25:4a:39:f5:3c:56:cd:9d:ae:0d:f1:1b:ed:9d:4d:
53:d3:f0:ea:bf:3d:89:8f:c0:36:73:ef:c2:56:31:ae:cc:f5:
f4:67:45:3f:85:06:a6:56:16:f6:62:2e:82:d8:2c:45:cb:22:
c2:dd:cd:6f:e2:15:23:35:a6:80:ec:08:b7:f1:70:d9:77:e1:
c4:bf:51:85:0f:19:8e:00:8d:5f:d8:63:13:2e:6e:0d:a9:18:
82:bd:0f:f9:68:69:18:ad:05:4b:87:78:fb:b2:37:64:08:31:
de:3b:29:f4:40:8f:c0:74:1a:25:b7:1a:34:59:bf:7e:40:0d:
63:89:0a:84:67:f5:09:ba:c9:74:a4:d6:b4:5d:74:bc:30:da:
43:71:b4:71:89:7a:08:76:58:cd:b2:fd:95:81:f9:cb:c0:f8:
62:02:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:36 2026 by rpki-client