Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: HXIhRxhm4/EnGG2SRUah4iaGgRt4vbAvieUs2QOr+ks=
Subject key identifier: 4C:77:E1:3A:B3:31:15:38:9C:65:1C:ED:84:E0:91:41:A9:B3:4B:EC
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 019D98BD98916C41C9A3BACE671424EB1806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 079B
Signing time: Fri 17 Apr 2026 00:00:55 +0000
Manifest this update: Fri 17 Apr 2026 00:00:55 +0000
Manifest next update: Sat 18 Apr 2026 00:00:55 +0000
Files and hashes: 1: ksyxmkCrf7A-eqxZmQy3trm7sLM.roa (hash: 6/V3wIua4oerREHtxJ93cqHXKCXGaJBotU9pYRKVNog=)
2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: Pmu2ZBNUFKtDazbqYwsfpE8o8SJtr6glNfczZr9hXaI=)
3: o07AL4hoPWhIQ_PilCKmUZTA81o.roa (hash: dz2qz7xDuDCVAKsXdQvYhNbSC2RVScmT9UhnlSmU23E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:98:91:6c:41:c9:a3:ba:ce:67:14:24:eb:18:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Apr 17 00:00:55 2026 GMT
Not After : Apr 18 00:00:55 2026 GMT
Subject: CN=4c77e13ab33115389c651ced84e09141a9b34bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:b8:46:8c:47:89:05:f0:20:d5:a2:14:25:
e6:92:99:0c:86:02:7a:c9:79:1e:49:a0:11:fb:a4:
fd:5d:68:e5:ce:7d:c1:a6:2c:86:b3:3b:bc:82:68:
ea:91:a3:94:cd:01:41:7d:7e:34:e1:63:ab:28:a8:
b2:b0:7a:fd:42:ec:56:05:19:f6:6b:94:a5:95:19:
96:7f:0d:5a:b2:2e:8d:9b:b1:54:00:fb:95:3c:76:
0e:51:3f:bb:53:8f:ac:bd:64:e4:9f:a1:9c:48:73:
88:d9:df:e6:00:aa:d9:b3:8e:91:05:a7:b9:49:82:
2e:a2:47:0e:c7:10:99:86:12:23:df:1a:67:5a:a4:
d4:cf:39:66:07:e4:9d:d0:b7:a3:c9:8d:50:74:b7:
60:07:72:a1:ed:f4:11:ac:1f:fe:66:f1:67:ef:49:
09:50:83:06:84:4a:54:3d:4f:a8:bf:ae:dc:1e:01:
f6:04:56:6d:33:f1:3b:43:60:ea:5b:89:21:66:9d:
5a:82:e9:92:17:89:99:7f:70:98:26:ef:7d:f7:05:
5e:81:37:c2:3f:52:0e:2f:e8:bc:7f:8d:1c:af:86:
fc:d8:f7:46:a1:c1:2e:21:24:2a:f8:05:5c:ae:64:
4c:84:4c:b0:fc:f7:a9:ba:9a:62:b6:22:10:76:93:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:77:E1:3A:B3:31:15:38:9C:65:1C:ED:84:E0:91:41:A9:B3:4B:EC
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e1:bb:52:24:ef:a7:e2:3e:fc:09:f6:1b:88:09:14:48:73:
24:c8:4c:70:01:7c:92:3d:8d:12:70:b5:83:68:95:b7:9f:19:
37:9e:ce:1f:76:60:ed:94:85:57:3d:7d:ac:45:76:02:b0:19:
94:83:e7:cc:16:2e:5f:18:07:22:a1:f8:66:74:ec:ff:30:fa:
4c:0a:39:d6:b3:72:46:b2:26:eb:d9:7b:9d:b3:f3:9a:61:86:
a2:9c:67:75:a3:16:c1:bf:3f:f9:8e:8a:a3:c3:64:25:b3:23:
7e:de:8c:f3:25:3c:b2:27:2f:19:b3:42:a1:b1:6e:4c:56:c4:
a3:c8:dc:9b:ef:50:d9:ac:6d:4d:59:6f:67:1b:9d:aa:53:87:
e0:59:ce:58:64:f6:55:8d:6b:35:82:e8:44:66:7d:da:ed:77:
5c:d6:68:71:9c:06:f1:e8:18:6d:86:e5:d3:ed:c3:eb:1d:d4:
01:2c:ed:f9:50:53:74:3a:09:d0:7f:a7:68:2b:09:70:e4:5e:
90:af:f9:b0:ad:89:39:7e:f2:48:98:1b:9c:97:90:64:53:a6:
ad:da:f3:dd:6e:a1:59:a2:6b:7d:65:fb:dc:70:a2:73:bf:84:
ab:9d:19:70:55:90:29:ca:fb:4d:38:9b:4a:5e:2d:75:26:d6:
ad:d1:bd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:31 2026 by rpki-client