Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: EN1DQTL7c757CCyYI7PCRl1v04UZG0z8IlFfDEjSNnA=
Subject key identifier: 07:F8:AF:49:E0:CB:7A:19:4F:36:76:2F:8A:0B:8C:0A:54:30:59:8D
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 019D9962A4B19BFD465E70CCB35A908E8F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0C84
Signing time: Fri 17 Apr 2026 03:01:11 +0000
Manifest this update: Fri 17 Apr 2026 03:01:11 +0000
Manifest next update: Sat 18 Apr 2026 03:01:11 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: mSCdNAFH1RiEFaweh6SFp0tAgUrwMHs8AgFkoNALUgg=)
2: Zfv_5cAa3ri0Ax5p2vNE36rHpnE.roa (hash: Id3c2s4Nmji3usQrf3+l5D4JNCrYHAfvKHW7XcPkXa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:a4:b1:9b:fd:46:5e:70:cc:b3:5a:90:8e:8f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Apr 17 03:01:11 2026 GMT
Not After : Apr 18 03:01:11 2026 GMT
Subject: CN=07f8af49e0cb7a194f36762f8a0b8c0a5430598d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cb:cf:fd:97:f4:55:12:67:22:de:63:fa:f9:
23:09:52:5b:05:89:52:5a:a7:9b:09:94:e9:a6:56:
7b:9d:eb:af:ab:90:e0:3c:06:7f:ca:41:6c:32:08:
13:a6:ad:ba:54:b9:32:cc:6a:ae:09:a4:f8:4c:1a:
01:16:54:ea:cd:59:10:04:e4:1d:af:ff:68:02:b5:
e9:25:85:61:44:ae:6f:88:17:ef:36:b6:c9:a5:0d:
9e:04:9f:3f:cf:06:1e:7e:0d:ef:ed:05:e6:36:29:
64:3d:a2:d5:32:74:2e:8c:88:67:da:46:bf:35:2e:
54:c3:19:e7:2b:d7:ed:75:63:09:66:f2:3d:6a:06:
f5:ac:49:d6:16:3a:6c:ae:b1:9a:e9:93:30:56:cb:
f1:ac:da:87:d4:94:b7:b4:53:a2:1a:85:d1:d4:8c:
c2:ba:47:98:cf:1d:28:4c:75:24:f1:6d:33:87:2c:
4f:53:68:da:b0:12:59:ba:b8:84:f0:56:df:a7:03:
35:69:e8:d0:73:d5:8d:25:d9:ee:1d:80:d4:58:97:
55:49:07:5c:34:44:3d:f6:f1:7d:e3:51:e8:90:d8:
c3:c7:17:ba:da:9d:ab:91:95:8a:f1:77:38:8c:ef:
29:39:07:db:15:f9:4a:e9:bc:b1:79:10:9e:f2:6f:
01:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F8:AF:49:E0:CB:7A:19:4F:36:76:2F:8A:0B:8C:0A:54:30:59:8D
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:88:a5:db:c4:9a:e2:68:9e:2f:48:34:c6:50:19:40:b0:53:
ea:eb:bf:16:20:25:d8:aa:43:b2:1e:21:cf:f7:35:af:dd:55:
eb:c4:07:68:62:97:1e:fb:6e:22:00:fd:62:5b:63:f3:79:70:
9e:d3:e0:0a:24:e5:1c:55:e8:c1:29:e5:3e:78:ba:f4:75:95:
97:e2:82:b7:53:63:55:8f:6f:05:0e:83:df:b5:e7:07:24:e6:
9b:8a:3a:46:7d:6e:b8:ca:8e:9a:c7:84:47:24:27:b1:2c:2d:
60:7a:bc:85:14:fa:53:5b:f4:4c:6f:56:6d:e6:c8:df:77:55:
68:41:ca:4e:7c:94:1e:e2:07:e5:2a:a9:59:56:9f:81:27:c2:
c6:9a:f5:48:f5:5d:67:9e:42:b6:91:3b:14:cd:dd:41:40:e2:
26:54:ff:e7:ef:59:6a:34:d6:22:74:57:97:fe:cf:28:c9:d1:
b6:0e:7e:c3:eb:4d:49:d7:af:ba:18:3b:b4:31:0b:35:d3:55:
72:8b:82:24:95:00:3b:b7:96:9a:f0:5e:20:c6:32:c0:48:87:
8d:bb:c0:ef:67:9b:2f:51:40:dc:92:9b:76:6d:fe:b7:a9:ea:
89:2a:15:9b:03:5a:35:c2:65:1b:42:88:e1:9a:40:40:1e:d8:
cd:2e:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:15 2026 by rpki-client