Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File: 4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier: As3Rmx7UF/Lg/e1I+k+x3cgg4121O5dsDRPIFuTtN2c=
Subject key identifier: A9:9F:4B:FC:61:B1:9C:1A:86:44:1A:31:DD:2C:36:49:59:0E:D4:79
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial: 019DA3E64F01B7BF11D5B575C7DECB1E0025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number: 1188
Signing time: Sun 19 Apr 2026 04:01:12 +0000
Manifest this update: Sun 19 Apr 2026 04:01:12 +0000
Manifest next update: Mon 20 Apr 2026 04:01:12 +0000
Files and hashes: 1: 1OjQOklemE1c2Ofd7sEbtV6WCLQ.roa (hash: p8zMORBp4EwLrEV0pwePL8HYOl4fQLM1ray936MhnIo=)
2: 3gKR0cK9QoxfvHnSIiqY4bcG8ww.roa (hash: ZcGaXU4YPznoibhlbyhjzKqhwZf4BJJECm4SI2hoD/U=)
3: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: +vEcIv45b7bSq6wZfy+97C/Z6uaFmfkdiQMjBiHQNaA=)
4: 8tAmUasl9shJmzVr02QyR9gf1yg.roa (hash: 56dLPJcjlB89ljFKBrlBrzN9saKBJC9XHbbe4kgHJpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:4f:01:b7:bf:11:d5:b5:75:c7:de:cb:1e:00:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Validity
Not Before: Apr 19 04:01:12 2026 GMT
Not After : Apr 20 04:01:12 2026 GMT
Subject: CN=a99f4bfc61b19c1a86441a31dd2c3649590ed479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:a2:e7:a1:87:06:b2:7a:0e:f6:af:1b:b9:
ae:5c:d4:70:49:2b:e2:f5:7b:ed:99:cb:b6:13:8b:
5a:26:ce:14:a4:af:79:9f:ce:70:97:07:1b:9d:d5:
52:13:60:45:b0:7b:4c:74:05:10:5f:6b:b8:00:82:
ba:eb:bd:aa:78:da:6a:5a:c0:0a:ed:cd:eb:6e:7c:
f9:f4:ad:bd:03:f3:bf:0b:31:6f:82:43:00:75:a5:
3a:4d:07:ab:c2:71:03:c7:75:e0:8e:5b:8a:19:40:
33:48:af:66:4f:58:19:19:6e:00:2b:53:53:73:cc:
30:0b:40:4d:7b:c7:21:d9:67:0c:16:94:97:93:6e:
7d:9b:f0:5e:dc:11:69:b0:e1:a9:9a:78:e1:59:a3:
53:7a:33:3e:2b:20:33:a7:1f:29:9f:64:3c:92:d0:
6f:9b:aa:07:49:67:a8:93:ef:73:90:1c:1a:41:db:
b3:23:17:ee:d7:fa:ff:3f:7a:15:c6:4b:5c:02:d7:
fb:bd:a3:99:e2:93:46:83:95:36:9e:68:2c:9e:79:
f3:76:2b:39:4a:c8:8d:f4:ca:60:b0:5c:6a:12:b8:
12:f1:86:9f:c4:05:98:03:79:1c:a9:f1:ef:00:0d:
c5:da:9d:85:4e:7b:88:c9:db:37:58:ba:a2:9c:45:
36:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:4B:FC:61:B1:9C:1A:86:44:1A:31:DD:2C:36:49:59:0E:D4:79
X509v3 Authority Key Identifier:
keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:28:4b:01:91:b0:a6:7e:bb:8d:57:a3:0d:92:ad:ba:43:4e:
22:d2:89:75:50:44:0a:1a:2c:9b:5e:9b:9b:2d:79:28:c7:a9:
74:56:1c:6e:45:56:a2:86:e0:c5:2f:94:f4:d7:fd:08:1b:ce:
bb:b6:67:b2:52:61:38:47:e7:c9:16:d7:6d:f9:b1:f0:f0:c4:
23:ed:d7:b8:a3:db:f1:bf:70:87:67:cc:c8:9e:a4:94:f6:e9:
45:bd:d1:05:9c:0d:8a:89:80:af:e1:66:f8:a0:2f:6e:0e:f5:
01:90:11:05:93:45:6c:a0:00:7f:53:24:64:18:ec:3d:25:51:
21:cd:82:59:cc:ab:24:9e:ab:33:9a:2a:eb:41:47:c1:da:8e:
30:3d:0d:d8:3a:c9:5d:08:bd:9e:df:af:f5:46:d0:6a:ca:f2:
0d:51:82:2c:ad:12:2c:d1:a0:c6:32:83:06:9e:73:e4:5b:06:
fd:55:cc:40:de:22:bb:0a:69:75:4b:27:9e:f8:2f:4e:8b:40:
fe:38:01:7b:57:34:08:ee:c5:e7:66:67:b7:ae:5c:fa:fc:5d:
f6:4a:25:75:cf:87:be:0d:db:e8:ae:76:6c:aa:80:3c:b5:e7:
51:24:fb:3a:1c:f0:95:18:44:33:49:c1:d0:04:6a:f9:cd:03:
07:93:70:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:13:32 2026 by rpki-client