Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: sTts1wcsEpiZWYVqaAJzjYmz4I7z6BWQ49nNKHV8bJ8=
Subject key identifier: 6C:36:6D:93:21:F1:34:FB:19:6A:D2:EC:8A:07:7A:E2:96:82:1D:C1
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 019D9AAC557D816C9164E6AC35B14E8DB73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 13C1
Signing time: Fri 17 Apr 2026 09:01:18 +0000
Manifest this update: Fri 17 Apr 2026 09:01:18 +0000
Manifest next update: Sat 18 Apr 2026 09:01:18 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: LQnvaU2ivUrKIdj68YO+nKiwXP2nOk57UEQ6uoT6Jn0=)
2: 5BcZMkFK4H4HzeU32Pg9Et5_SQ8.roa (hash: yDr7OimE93R5A5WQDfIWvLQYnSnCYBj7r4S1yWKb1hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:55:7d:81:6c:91:64:e6:ac:35:b1:4e:8d:b7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Apr 17 09:01:18 2026 GMT
Not After : Apr 18 09:01:18 2026 GMT
Subject: CN=6c366d9321f134fb196ad2ec8a077ae296821dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:57:00:82:39:2d:91:fe:a4:b4:1a:00:4f:
66:93:50:18:87:76:85:98:95:6a:32:8b:bf:3f:f1:
e5:30:a2:ef:3e:c3:e8:a0:15:1c:b1:8a:ae:a0:fb:
d9:59:a9:26:6e:ee:5b:f3:88:e7:26:4d:95:36:83:
01:98:a4:28:a3:be:f0:2e:41:11:4f:3d:f1:c9:ca:
56:56:03:6e:29:89:6b:0d:26:39:16:a1:ae:69:f0:
3c:b0:91:00:6c:f7:d7:4c:0d:a1:dc:5a:d4:ce:2e:
f6:40:a0:44:af:9c:c2:72:47:24:12:78:fd:85:45:
d3:3a:21:cc:7e:2e:c3:6e:0b:11:3f:7a:fc:e3:56:
2d:e0:84:1e:b3:1f:e6:f8:18:fe:e0:a2:03:c3:c8:
46:74:c1:3b:81:70:65:47:ea:63:5a:48:83:ad:19:
72:e9:0b:b0:c9:d0:e3:89:eb:69:43:fe:57:5c:c8:
ae:e2:94:40:4c:40:41:1c:22:37:d0:5c:bf:6e:15:
8a:48:34:fd:b1:f3:f0:79:40:fc:cb:04:5c:2a:f9:
32:df:68:86:af:ff:37:6a:02:5c:e8:c3:4c:c4:ae:
0e:9f:5b:70:10:e8:83:f5:0f:da:a4:d3:9b:86:90:
7a:24:db:8c:b1:89:a0:b3:a9:ef:31:22:e6:9e:30:
50:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:36:6D:93:21:F1:34:FB:19:6A:D2:EC:8A:07:7A:E2:96:82:1D:C1
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d7:1e:dc:cd:8e:81:11:1d:ef:31:dc:14:52:e3:b0:a1:68:
7e:52:5d:43:01:d5:4c:96:13:02:15:b5:be:1c:a0:a6:89:6f:
05:7f:5c:38:10:7f:53:f9:13:20:c3:ca:54:bf:fe:1b:99:02:
f9:98:ad:0f:0d:7b:87:68:ff:ce:2b:1b:c6:50:3d:75:2e:74:
20:fa:73:19:ae:61:5a:68:2a:c3:7e:69:75:ef:bb:3a:54:2d:
64:63:0c:f1:12:91:20:2c:6d:bc:53:9d:f6:79:aa:8e:54:9e:
c7:af:f2:fb:d5:4d:3b:14:a6:2e:8d:e1:eb:0b:80:f2:d4:84:
e4:05:80:8b:86:2b:90:23:1e:5a:ae:68:99:3d:c8:11:3e:7c:
f7:2b:5e:c0:b4:cd:79:5a:93:8f:6a:c6:8b:4a:b3:7f:85:75:
56:c0:c6:a9:2e:ed:29:76:c5:66:ab:6e:59:01:cb:49:4a:c8:
8a:42:7e:eb:7d:20:58:da:1c:74:d5:10:e1:a3:21:1d:36:46:
fe:97:36:c6:85:5b:42:35:c2:82:4d:03:13:39:ac:3d:c1:4c:
f2:42:78:02:05:fa:7f:f7:dd:13:0e:e8:1f:4c:bc:b7:65:56:
c8:56:d5:4c:d8:e0:f6:a8:10:38:ef:c8:1a:04:48:09:93:f0:
a4:07:fb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:50 2026 by rpki-client