Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier: bh1Gs7zCYKJU/DE/GvPFojvZla7oE6EV8DQmQtcHfE0=
Subject key identifier: 82:6B:9F:A8:84:11:78:93:8D:C4:34:EC:28:AB:47:47:22:97:DE:F0
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial: 019D9A073FD0D95DC2D4C37B8DC49B27AF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number: 0597
Signing time: Fri 17 Apr 2026 06:00:59 +0000
Manifest this update: Fri 17 Apr 2026 06:00:59 +0000
Manifest next update: Sat 18 Apr 2026 06:00:59 +0000
Files and hashes: 1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: yckxzfyyg1At+krSicuBTh/kyP0HtCdoOuMlwWG464o=)
2: kAQRnXnn1bepnTjDte_6dOnnntw.roa (hash: fvCT2Eh+lUDVebIFnLuZITE86ooUogC2tmwd5l7+wO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:3f:d0:d9:5d:c2:d4:c3:7b:8d:c4:9b:27:af:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Validity
Not Before: Apr 17 06:00:59 2026 GMT
Not After : Apr 18 06:00:59 2026 GMT
Subject: CN=826b9fa8841178938dc434ec28ab47472297def0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:a2:19:d7:4b:d5:10:b3:85:f8:7b:78:8b:
1f:75:04:c7:38:87:b5:aa:0d:b4:9f:5c:28:d3:25:
12:09:c9:80:f4:e7:f2:07:0f:8d:ac:3f:8b:5a:e8:
54:ad:3b:4e:d7:98:33:43:6e:08:3e:8d:72:5f:99:
22:7d:0f:70:04:f3:05:dc:7c:b2:a5:7d:86:ae:b5:
42:7a:36:b7:6c:7d:38:d9:1a:5a:db:94:b9:22:d4:
8e:b2:6b:72:da:ab:6e:28:72:f4:dd:13:8c:58:33:
85:39:59:19:95:cd:5a:10:91:de:f8:c0:15:73:6b:
7e:7e:eb:bf:42:3a:f5:d9:76:c0:8c:6c:99:4c:83:
c6:cc:90:75:9d:7a:41:e1:ab:11:5a:f4:22:7e:63:
93:23:c3:57:70:d2:ab:7b:ed:5e:72:53:96:7a:63:
24:58:6a:c2:5f:74:fe:4a:9c:a7:08:d0:59:a2:20:
00:ce:ae:4e:98:84:0c:9b:1c:ae:24:bd:7c:e6:c4:
aa:95:95:bd:e3:89:8f:19:48:ff:46:33:a3:ed:7a:
fb:88:e0:65:de:0e:8b:e8:cc:bd:d5:71:90:40:21:
1d:90:5f:1a:d4:ae:86:dc:57:ac:18:98:90:2e:c1:
bc:bb:6f:1a:11:44:09:fb:27:d4:f8:3f:4e:a7:d6:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6B:9F:A8:84:11:78:93:8D:C4:34:EC:28:AB:47:47:22:97:DE:F0
X509v3 Authority Key Identifier:
keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:34:cb:c2:29:04:17:14:54:0e:43:e9:9f:43:eb:9f:4d:68:
f9:c6:d1:8f:c4:e9:7f:93:a2:68:d1:9a:6c:0b:ce:0f:78:ab:
0d:31:2a:cc:1a:1c:7b:62:52:15:44:eb:47:5d:d9:c3:a0:7e:
4a:36:48:e9:0c:d0:5a:26:47:df:72:05:45:65:fe:9e:ce:f3:
1a:40:dc:04:5d:13:47:07:5b:7f:4f:49:87:9e:91:2d:fb:74:
2d:46:70:b3:50:e7:96:46:c5:38:44:3b:2b:53:f7:7b:0d:77:
ae:31:cc:48:f6:d2:f6:9f:13:79:a8:48:ae:51:cf:38:ce:62:
14:af:d2:a8:50:15:4c:b3:70:2b:19:01:37:69:05:b0:38:bf:
39:d2:6c:01:52:8e:18:cc:43:8c:f0:8b:ca:2f:2d:11:f4:11:
62:1d:04:97:87:e4:14:66:ef:5c:30:e0:20:13:59:52:f2:9e:
a8:d9:88:20:7c:9d:f3:e4:f4:26:4d:a8:58:eb:55:e7:bc:c3:
42:3e:ee:02:f7:2e:5c:f3:9c:45:52:bf:95:a6:54:08:8c:99:
12:92:2e:6b:9b:4d:8a:f3:9c:9f:8c:54:01:48:e4:d6:d7:04:
4e:b0:87:f4:28:ac:3b:14:70:44:7a:eb:4f:10:ad:d0:5f:f6:
1a:90:39:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:36 2026 by rpki-client