Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
File: c4DHWfVY-ca-iN0iakOdmcnqzww.mft (raw, json)
Hash identifier: 2Xe49QcdwQklbFycoXwSrI1ZKMokasmx1fh/6F6QK/0=
Subject key identifier: 01:AC:83:0F:68:77:9D:15:7B:C2:AB:21:36:95:14:94:48:6F:85:3B
Authority key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
Certificate issuer: /CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Certificate serial: 019D98F47AB9D7F20928FBAA87AF9BA15774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
Manifest number: 0FF3
Signing time: Fri 17 Apr 2026 01:00:52 +0000
Manifest this update: Fri 17 Apr 2026 01:00:52 +0000
Manifest next update: Sat 18 Apr 2026 01:00:52 +0000
Files and hashes: 1: SyzDr7afLaGB0eh8BGltmqw92Ho.roa (hash: 050EI4bgC2uJSD8MPwN8yNb/BaQ/4SeM3IGk1KBixYk=)
2: c4DHWfVY-ca-iN0iakOdmcnqzww.crl (hash: R3OVzNPA24oNjpt0BJ3ac80xCanpGdvjvuwsPDLjACE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:7a:b9:d7:f2:09:28:fb:aa:87:af:9b:a1:57:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Validity
Not Before: Apr 17 01:00:52 2026 GMT
Not After : Apr 18 01:00:52 2026 GMT
Subject: CN=01ac830f68779d157bc2ab2136951494486f853b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:59:38:d3:92:55:f5:52:a6:4b:d4:94:48:
c5:ee:88:0b:5e:3b:78:11:b1:f5:9e:c1:1a:9d:df:
87:65:fc:24:ba:af:60:f1:25:7f:ca:b9:fb:03:ba:
5b:e6:01:63:2d:cc:b8:92:67:41:44:fb:1a:f2:dd:
57:6f:ad:d8:11:c7:58:52:1a:59:2a:7d:82:53:13:
a6:53:37:96:b2:80:ed:9a:76:1c:4f:81:e3:19:1b:
03:b6:b9:ca:17:23:c5:c0:c2:f7:0d:e5:e7:9e:8d:
35:8f:8c:2a:eb:20:5b:d8:af:86:f3:70:ce:7b:23:
67:8d:6f:07:63:ad:4a:bd:60:14:cf:63:17:76:ac:
ed:3a:a6:20:13:47:49:f6:63:4b:4a:26:8d:f8:c9:
ee:5e:a5:fe:23:ca:05:f9:b9:8b:c1:8b:8b:dd:17:
ae:00:6e:93:40:52:b9:cc:f8:60:11:7c:40:a8:db:
cb:86:c9:0c:21:95:d2:0b:9f:e4:b8:6d:57:95:d3:
44:cd:6c:cf:36:ea:53:5f:bc:a8:6d:e5:59:8b:c7:
24:37:d5:26:21:51:7c:d6:44:86:a3:ad:34:9a:4f:
07:63:4a:b8:a1:62:31:cb:e4:59:a8:78:e7:80:94:
c3:c6:33:30:9f:bc:ac:cc:ad:06:40:f6:ef:ee:13:
aa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AC:83:0F:68:77:9D:15:7B:C2:AB:21:36:95:14:94:48:6F:85:3B
X509v3 Authority Key Identifier:
keyid:73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cd:5f:ff:9a:9e:12:05:65:f3:2b:a9:94:72:ad:51:92:df:
21:cd:59:1f:c5:38:86:a3:71:e4:3f:ee:01:d4:70:78:e9:8a:
fc:7f:8a:23:39:8f:9f:28:15:28:99:10:29:a4:4a:1b:85:1a:
1a:7e:14:78:3c:8b:95:ad:c8:bb:39:40:9d:19:2c:2f:ad:b2:
be:c6:d9:98:94:b5:8e:aa:11:12:0c:cd:3f:5f:ac:46:3f:e5:
1e:8f:83:ff:4e:c2:7e:27:d2:f5:63:12:1a:c0:6c:06:c1:1e:
31:18:7a:5a:8f:88:b8:27:e1:14:b4:db:1e:4a:88:6d:be:dd:
bd:94:f9:d3:0c:85:81:14:27:e6:c2:e1:15:e9:db:f5:8a:38:
df:a9:52:d6:18:d6:81:85:36:b5:ca:d9:e8:d2:42:81:7f:df:
6b:d0:22:bf:06:13:fe:8b:2b:09:85:c5:c1:46:e5:46:ef:86:
f8:be:23:29:58:f5:e5:11:81:d0:88:6e:a7:7b:79:ec:51:c1:
1e:70:7b:bb:02:1e:dc:64:16:d8:8e:8c:c3:8d:5c:aa:c2:1a:
1c:a9:6b:87:f7:4f:4d:c7:a6:18:12:e2:19:b7:6f:99:c2:36:
28:52:42:35:6f:ca:9e:5c:6f:42:d8:14:e7:11:53:1d:3b:df:
cb:f9:34:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:21 2026 by rpki-client