Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
File: rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft (raw, json)
Hash identifier: nJLdPaguImHKqrZVwflP0QBjICY/nS0iruij5Z0Cavg=
Subject key identifier: FD:A8:70:E0:7A:1A:7C:02:81:64:15:FE:05:6F:4B:58:E9:AB:74:24
Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
Certificate issuer: /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Certificate serial: 019D9A0743AE67E4C0D1782152CCD0BF0154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:01:00 +0000
Manifest this update: Fri 17 Apr 2026 06:01:00 +0000
Manifest next update: Sat 18 Apr 2026 06:01:00 +0000
Files and hashes: 1: Urm8LGF3nWAC-z0vN8e0GgC0tZI.roa (hash: ExuI2kIDGZzfnph2B5PPw/UGl0nESxyqgqQscTauTwI=)
2: rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl (hash: ySS+ZPe6YeEZ7/Kdb4QjE0HaUgmn0x4d7MGTACr2BS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:43:ae:67:e4:c0:d1:78:21:52:cc:d0:bf:01:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Validity
Not Before: Apr 17 06:01:00 2026 GMT
Not After : Apr 18 06:01:00 2026 GMT
Subject: CN=fda870e07a1a7c02816415fe056f4b58e9ab7424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:53:00:53:17:e2:0a:00:54:a1:38:c4:81:
9b:30:e7:8c:6f:de:a4:51:29:93:58:71:21:8a:f2:
12:c5:ba:04:f7:a3:97:ec:b6:ca:bc:d3:53:ab:0f:
c5:22:fe:8c:e0:29:d5:e8:2e:a5:79:dc:3e:7d:8c:
95:b3:88:c9:c2:20:7a:17:17:06:c9:c4:ee:83:de:
4d:c4:d6:9f:09:91:da:71:ca:b5:ad:ec:39:8c:53:
1a:aa:16:10:b9:0e:e5:c4:f2:97:58:f2:83:55:25:
4f:73:38:b6:d0:8e:cf:02:5f:36:9e:07:b2:76:50:
2e:d0:c0:29:48:c9:ea:42:de:64:e5:17:ca:f0:c0:
0f:1c:f5:09:39:61:8e:5c:21:d4:69:65:cd:94:00:
08:97:41:1f:a8:46:70:1b:a0:56:24:dd:5b:f7:02:
78:d3:ff:29:7e:ed:67:2d:55:e1:b3:55:66:2e:16:
65:c9:f8:18:5c:77:03:a3:12:6f:c1:76:96:72:e9:
12:d4:46:b9:c7:d3:61:cb:a7:35:43:b7:30:26:1e:
b1:76:71:1f:96:ca:c4:83:fd:00:38:a5:a3:da:ca:
77:d3:f6:62:e2:25:92:ca:71:a9:19:ce:89:dd:de:
52:37:9b:a5:29:c9:e1:1c:69:63:2d:e4:77:51:fc:
8c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A8:70:E0:7A:1A:7C:02:81:64:15:FE:05:6F:4B:58:E9:AB:74:24
X509v3 Authority Key Identifier:
keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a6:7a:46:22:ff:f6:f0:91:88:83:71:df:86:b6:e0:ff:9c:
3b:0f:2e:e7:fb:2a:74:c0:7f:2a:0e:6d:d5:a4:6d:94:14:aa:
d3:81:57:a2:38:f6:12:ba:1a:f9:bc:66:16:a8:a9:44:79:87:
4e:7f:2c:2f:c7:e6:27:09:1b:f3:5c:30:54:ea:c1:9a:34:a4:
b0:83:2c:19:74:ec:63:61:ef:e3:05:8d:2f:64:90:62:72:35:
76:a3:71:60:ab:c2:d9:18:55:42:c8:b9:17:86:7d:26:4d:ab:
ba:89:54:24:4c:28:b7:ae:fa:d6:5f:2f:82:1a:4b:71:e8:91:
ce:60:96:f3:9f:eb:be:67:8d:b8:72:27:cc:c5:d9:20:ba:4d:
ca:38:1f:26:c1:43:6f:c1:88:7e:ff:71:b6:5c:ec:1b:3d:bd:
e4:b8:de:76:c0:61:d4:f2:b7:ef:24:04:ed:b1:f9:27:46:05:
80:54:7b:53:8a:3f:8c:03:58:b4:fe:eb:64:5c:2f:80:ba:5c:
41:18:e8:fd:7a:d0:f1:5c:f0:1c:ac:23:3b:96:ac:ec:54:5d:
fe:1a:cc:e1:a2:6f:db:ad:75:3d:2d:53:04:db:98:45:45:40:
10:67:5e:de:d7:8b:8c:74:14:33:4c:82:17:4c:4a:d4:4b:f9:
49:a3:93:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:13:46 2026 by rpki-client