Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier: JJ5nOnbKVhR8ZuSy/FzrywSocUE1+lRdgFCq1xSCxwI=
Subject key identifier: C4:6D:7C:C4:1B:3E:5D:E4:D4:BB:E3:D9:B1:2D:6A:66:DE:6A:DC:5C
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 019D992B31C3F6577C0FC74A6C1C9DCD7112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number: 11D0
Signing time: Fri 17 Apr 2026 02:00:37 +0000
Manifest this update: Fri 17 Apr 2026 02:00:37 +0000
Manifest next update: Sat 18 Apr 2026 02:00:37 +0000
Files and hashes: 1: Br3g91W4evf2A8FX4-nPHSqH7Oc.roa (hash: gTgHpNU+s78J1A+sPr7pjfV/Fs0kKMeRldiNIgByjo4=)
2: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: qKuzGiKXTj6do51FZCi6KOwYdvMdQtDLnqvwsagsZVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:31:c3:f6:57:7c:0f:c7:4a:6c:1c:9d:cd:71:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Apr 17 02:00:37 2026 GMT
Not After : Apr 18 02:00:37 2026 GMT
Subject: CN=c46d7cc41b3e5de4d4bbe3d9b12d6a66de6adc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:af:25:c5:3c:47:04:1e:99:d6:8c:ce:a4:2e:
b5:1d:6c:69:43:89:8a:6e:08:a6:e1:4a:82:b9:3e:
ec:ed:7d:d5:cf:61:15:fb:85:1e:c0:e0:37:02:dc:
bb:40:00:15:63:b2:01:63:8b:26:1c:25:0e:98:ee:
fb:b9:12:64:b6:0c:70:82:24:af:d3:9b:97:70:53:
dc:2f:80:5b:92:e6:b2:b3:01:8b:c0:a2:c4:db:9f:
3e:0f:dc:c1:94:6f:64:81:d2:ca:57:bc:f7:bd:15:
45:fb:2d:c0:2d:46:08:0e:e8:f6:aa:6a:f8:e6:52:
41:66:59:10:62:cd:f1:bd:f5:22:b7:3b:98:04:12:
98:d5:d1:07:0d:09:d1:f2:7e:68:c7:32:11:d1:c6:
b0:d1:e5:2f:ef:06:ee:e9:a1:8b:c3:92:14:75:b7:
fc:f3:10:f5:54:42:73:73:d4:b2:d5:8e:54:5a:f8:
e7:58:bd:d7:f0:d1:20:ba:8b:df:d3:63:f4:24:e5:
67:74:30:40:fe:50:a6:94:a8:05:45:bd:dd:5d:f7:
0f:f5:92:de:04:91:3d:07:6b:0f:49:6d:e5:83:22:
5a:82:c6:8e:aa:1e:09:3e:32:34:25:36:97:1a:2a:
a7:7f:16:57:89:19:2c:cf:70:74:13:c8:d3:ac:ad:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6D:7C:C4:1B:3E:5D:E4:D4:BB:E3:D9:B1:2D:6A:66:DE:6A:DC:5C
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:07:36:a2:af:36:ab:8d:c0:66:70:8a:cf:73:0c:b7:29:32:
a6:27:62:71:41:44:70:3e:f3:04:4b:f2:c8:8f:63:6d:4f:41:
f1:4b:53:64:6b:94:19:61:cd:29:c8:97:48:63:ee:0b:e1:1c:
e0:9f:7d:b7:98:f1:ef:39:b7:2e:f3:ff:2d:47:52:7b:81:6c:
83:e4:0a:de:48:58:35:53:80:6f:22:98:a6:88:b0:af:91:fd:
ae:28:ec:97:31:d5:d0:6c:39:58:dc:a3:d0:02:ea:5e:56:23:
8e:4d:19:21:2d:44:58:b0:81:a2:a6:75:7f:e8:e3:37:9a:54:
df:cb:d5:a1:ee:88:87:41:d1:f3:fc:9b:8e:67:9c:7b:01:9c:
a7:30:e7:1e:8c:4d:0c:02:8c:6d:ba:bf:0e:c1:56:7d:29:7f:
a3:5b:fb:c3:4b:60:6a:8a:b8:67:ef:90:b3:85:23:4f:08:d5:
a2:54:16:5b:c8:8d:c8:ac:20:e2:32:80:f7:e7:90:e8:b5:94:
d8:3d:78:f9:0c:be:af:6f:be:8f:d6:8b:c7:bf:58:10:f0:f6:
f3:50:ed:d4:e1:ee:34:3f:74:9e:f0:d4:8e:f9:13:b8:70:1a:
c3:7a:8c:57:8a:f5:8a:89:d0:34:d7:a5:f6:aa:ff:68:2a:6d:
06:f4:d8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:57 2026 by rpki-client