Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier: BT/pimakMIRI8spQNuFoXnqYTUIRZT2ZL5tBLeYRvfE=
Subject key identifier: EF:57:F1:5C:9E:9F:C7:FC:5F:70:72:78:7C:87:66:B9:1D:5C:7F:7B
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 019D9A3E9965A819BC174ADF7FFA7C8E028D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:01:26 +0000
Manifest this update: Fri 17 Apr 2026 07:01:26 +0000
Manifest next update: Sat 18 Apr 2026 07:01:26 +0000
Files and hashes: 1: 1-No8JnCXoZmNvwGOuPwKrmYYJ6c.roa (hash: 2kZ069SCXyvjYNeKIO+pvEFPTW/9AX8f/8u5tWS3u3U=)
2: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: vaH9eT2o1NbZE77Oi55OJclGplAWpWz6Wvw99Q10CVQ=)
3: BW5S5s1xvxdYeismlznCSfBL2yI.roa (hash: EtWeWpCD+suUmysPule/ohTEye/jj6Q4dBOVaR6L3gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:99:65:a8:19:bc:17:4a:df:7f:fa:7c:8e:02:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Apr 17 07:01:26 2026 GMT
Not After : Apr 18 07:01:26 2026 GMT
Subject: CN=ef57f15c9e9fc7fc5f7072787c8766b91d5c7f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:ca:a4:2e:40:dc:12:1c:75:c4:8e:37:a8:
9f:9f:2f:13:32:06:62:ab:2c:70:c9:01:5c:97:39:
2b:02:91:e7:ce:8b:60:49:24:a7:b9:93:8b:bc:09:
98:12:5b:0d:3f:cc:8e:aa:ff:fc:d9:63:49:85:26:
bc:08:f1:21:0a:81:69:41:e1:69:27:df:6e:3c:95:
eb:1f:2c:a1:74:6b:d3:66:1d:5d:58:6b:a8:63:6b:
73:83:ad:22:b0:a8:f7:8e:a2:a4:90:29:5f:85:59:
0f:8f:de:3d:4b:af:c5:b3:68:7f:c9:88:5d:b6:a5:
c8:47:2a:7a:98:f6:b2:98:fe:a4:e1:5b:b9:2c:19:
7c:0a:eb:1b:bb:2d:32:80:59:b9:71:91:ae:04:c3:
3f:29:11:15:ae:98:42:0e:4c:59:1d:75:ef:4e:cb:
0f:34:a9:46:25:95:4c:f9:db:47:4f:26:1b:6c:a8:
b2:67:59:fb:06:7f:e6:d6:27:fd:db:99:d3:d4:35:
9f:35:92:ba:c8:9a:fd:c0:c5:b4:f1:64:7b:9d:2f:
b6:2c:e9:de:ba:e0:94:99:fb:29:67:c2:31:74:d9:
38:59:86:b4:a6:fa:c5:c3:04:4f:93:6e:19:a9:2d:
90:81:69:41:89:1d:95:b9:8e:12:93:96:16:64:d8:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:57:F1:5C:9E:9F:C7:FC:5F:70:72:78:7C:87:66:B9:1D:5C:7F:7B
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:34:8e:07:a5:65:5d:a7:7d:54:42:e1:a0:6f:65:c2:21:d0:
fa:59:d9:df:fc:8c:88:12:1f:57:d3:40:53:b0:98:80:ac:b1:
40:30:59:49:f9:23:7d:3f:a1:85:c6:74:a2:56:77:1e:2c:a8:
0e:7e:df:6b:a5:bc:0f:be:68:f8:25:8f:36:5c:72:f1:8c:e9:
4c:36:02:3e:83:f1:19:80:bb:a7:9f:35:e7:44:f5:d2:a5:d2:
08:c5:54:e0:2b:23:19:43:4f:93:d4:8c:cb:f4:3a:29:f1:95:
2b:32:94:4e:c6:01:97:2b:e5:3c:a8:43:86:c8:8c:4b:9c:be:
c8:50:61:2e:fd:24:e4:3c:44:35:4b:dd:c2:7e:3f:5b:04:44:
5f:6b:44:9d:ca:a5:db:a0:b4:78:32:54:41:8a:83:a3:e9:a2:
11:08:89:1b:49:09:14:3b:f7:26:24:17:88:68:c5:b0:e7:b8:
d3:6f:26:f5:73:f3:0b:fd:fe:56:d4:70:4c:17:43:92:d7:bf:
d6:4a:00:b0:63:fc:41:bb:fe:4c:27:12:55:be:3e:83:1e:76:
a1:3c:f4:f3:bb:8c:a8:98:64:b1:2a:b2:a3:70:87:61:7c:b4:
a5:61:3d:0d:e7:a3:a9:fa:5b:ac:fb:c6:a2:ae:2a:4e:cf:f2:
95:5f:c9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:53 2026 by rpki-client