Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: qVx69+s46d1R8t/KARrMyPHYcgz8dry0V3ziH2CJGHM=
Subject key identifier: 2B:B4:D1:61:3B:B5:59:2F:F9:C9:6C:CA:4B:8B:AA:FF:F4:FD:6F:AA
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 019D97E230E8E37732E86B55FD4F3944D92F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 20:01:16 +0000
Manifest this update: Thu 16 Apr 2026 20:01:16 +0000
Manifest next update: Fri 17 Apr 2026 20:01:16 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: JRMXv7qrQM7jGHgbL6k3SXct552fvrmKdY8nakGSnbk=)
2: j6eYXTGIPK6gsz2syCvMaVTG-yE.roa (hash: 91e+kynlaPtGnq7c6oIlywSzsBYw97PzDquhkqe4ygw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:30:e8:e3:77:32:e8:6b:55:fd:4f:39:44:d9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Apr 16 20:01:16 2026 GMT
Not After : Apr 17 20:01:16 2026 GMT
Subject: CN=2bb4d1613bb5592ff9c96cca4b8baafff4fd6faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:48:2a:80:b8:be:e6:fc:65:78:1e:cd:ac:
4e:64:8f:70:66:1d:da:ee:e1:a8:d8:9a:9b:ff:95:
16:2b:b8:43:fd:51:3b:1b:0c:ab:94:31:89:28:3f:
86:6d:13:d3:00:d8:7a:2d:83:5f:01:69:ef:82:5f:
e3:0e:10:a8:c1:bf:68:ea:d5:a1:ac:c0:be:fb:09:
61:b9:a8:9d:1f:0a:58:02:0d:60:17:93:07:72:32:
2b:28:aa:ca:3c:97:58:5d:b1:46:74:39:ae:8b:52:
4b:cf:6b:74:2e:39:f7:95:b1:e6:24:d1:59:49:a3:
5b:d3:97:15:08:87:8b:23:0d:60:60:e9:50:09:ad:
d2:69:06:d5:6d:f2:75:fe:e5:12:1e:ed:9a:a4:3b:
08:a7:e3:42:70:b3:7c:8f:cd:e9:f6:b2:e1:8d:80:
b2:b9:6f:88:f7:d3:7f:a9:ec:cd:9d:37:57:b0:43:
da:e5:a9:de:cf:83:6c:1a:7b:69:1e:61:0c:58:46:
a6:2c:c2:c3:7f:15:62:63:f1:11:cb:64:8d:cb:ee:
22:76:71:1d:b9:30:1b:ba:ed:49:82:18:29:10:d5:
3b:71:d4:70:f0:fc:b2:52:75:5c:2d:ec:7f:13:92:
d4:d3:24:14:f2:06:af:20:72:b0:b6:d9:b1:04:ee:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B4:D1:61:3B:B5:59:2F:F9:C9:6C:CA:4B:8B:AA:FF:F4:FD:6F:AA
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8b:1c:52:8c:e5:93:71:e4:00:06:70:21:95:8a:b6:32:51:
59:b5:8c:ca:dd:f6:5e:19:7f:d3:c7:b2:e6:2b:d9:95:64:93:
c2:fd:24:9b:4e:3e:98:19:4b:3e:22:dd:94:03:84:b7:08:ac:
6e:75:af:3a:f0:24:38:9c:ff:fe:1d:ee:89:e7:81:c9:b2:d5:
b3:8c:38:6d:46:a1:94:24:27:83:41:38:64:64:c4:10:95:47:
52:c7:31:c4:3b:c3:55:88:27:02:f6:ce:a8:e9:75:77:21:c1:
ce:29:2e:e6:15:bb:13:9a:d2:3b:64:3d:c4:af:a6:ad:65:47:
56:cc:34:73:9f:d5:93:18:92:3e:40:16:df:43:92:13:04:71:
64:c3:1c:f2:34:ef:ab:d8:da:88:0d:ba:22:d2:a2:a2:1f:6c:
4c:51:53:4a:6a:e8:b3:7c:3c:44:5a:f3:67:49:b3:ed:69:1d:
12:23:d2:f0:b9:bc:27:6c:38:21:88:bf:bb:8b:d0:b7:a4:52:
51:d4:89:5b:2d:3f:fc:b0:bb:24:fa:98:e9:87:d8:21:56:d5:
60:fb:f2:ba:6a:71:d0:cf:21:d9:dd:92:0e:8a:b4:31:a6:7d:
23:5f:df:ff:af:ef:82:5b:8a:cb:12:6a:ea:55:48:43:f4:62:
af:29:e6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:00 2026 by rpki-client