Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: bELLJHswjuAN+SrLGtDpJHHtGDH5bjn0gZNgvyVUPEU=
Subject key identifier: 0F:87:CD:88:CE:71:21:E9:22:33:27:CA:D9:95:A5:9A:C9:FE:D5:70
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 019D97E1FF9C8AB0B5458B7604FA04167518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 20:01:03 +0000
Manifest this update: Thu 16 Apr 2026 20:01:03 +0000
Manifest next update: Fri 17 Apr 2026 20:01:03 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: Jv93mg9FI0ixq0CNGC+BWppdww9xwmobpE2UnBi4UjU=)
2: BfP2bGOW8HthUfuXXggXfcuAbvE.roa (hash: dmLHFskk9KIm4+573JvglcI2K8WR/PAM7m+/RW2L1vs=)
3: Gqd_X9Cp3EkyhF_XljM8cJVBjSo.asa (hash: J5j3yc/QFcGihvZazzwI8F9VHttAgOTYUiy+DL6NbuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:ff:9c:8a:b0:b5:45:8b:76:04:fa:04:16:75:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: Apr 16 20:01:03 2026 GMT
Not After : Apr 17 20:01:03 2026 GMT
Subject: CN=0f87cd88ce7121e9223327cad995a59ac9fed570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:66:56:11:97:b3:f6:b2:94:c0:e3:b7:b9:
89:46:5a:ea:f1:7b:81:2a:e4:0a:9c:0e:b5:db:66:
80:a8:05:11:50:5e:e9:97:e5:11:7d:09:4b:3a:d0:
dc:b3:88:ee:bd:11:3a:bd:6c:8c:8f:82:06:02:3f:
29:af:d1:91:0f:0c:fb:0c:c0:23:30:e5:d5:92:e9:
8c:d6:5c:c2:1d:8d:25:88:0d:ec:5e:ec:56:84:0d:
f7:a0:73:7d:3a:f0:ff:68:5a:0c:b7:b4:3b:b7:f5:
63:04:12:2d:a5:57:92:23:32:6f:01:35:50:0e:46:
33:2f:bd:f3:c4:fd:7c:bf:ac:d0:87:54:5e:bb:d5:
3f:be:34:3f:5c:06:29:33:d9:24:7b:62:1b:17:9e:
cc:58:02:fe:7c:7c:58:d2:e5:97:a3:40:a1:19:64:
65:af:a7:5f:09:57:de:5f:3f:da:e9:82:fc:d4:73:
00:9b:74:a8:ce:ce:d4:7d:4f:c5:e6:33:45:81:1f:
18:9e:b8:0b:3d:33:ae:cc:28:b8:1c:1c:44:ee:a9:
71:a8:ce:cf:2c:ad:c6:8c:c1:c3:9e:e6:84:c2:b0:
c8:12:10:dc:be:25:0b:c9:9a:4a:27:d5:34:c9:64:
68:3b:b5:3e:6a:3c:1b:53:8b:83:61:94:3b:f2:a8:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:87:CD:88:CE:71:21:E9:22:33:27:CA:D9:95:A5:9A:C9:FE:D5:70
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:98:70:48:1e:30:ed:28:3f:7a:28:3d:0c:94:53:80:a0:91:
2a:d1:b1:33:c4:d4:dc:63:ce:3b:8e:05:3f:99:37:79:6a:2a:
b2:eb:01:f1:5f:93:18:f5:1e:ac:6e:d8:37:e4:90:53:20:ce:
af:6b:41:91:39:fe:6b:4f:0a:67:67:c5:3a:d7:d1:2b:e9:63:
79:3a:c0:9a:45:80:20:82:70:44:b5:66:06:8c:50:45:db:27:
e6:ec:48:df:0a:a2:64:4c:7a:9d:62:2c:1c:1b:ab:5f:9b:cb:
63:84:12:0d:2f:d5:89:ff:40:5d:18:0f:69:21:db:9b:da:59:
13:c3:8d:38:3c:cd:15:3d:24:53:95:11:4c:17:04:d5:b8:72:
4f:a5:c1:40:74:90:fc:5b:e3:f8:aa:e9:43:a9:85:bb:13:cc:
86:7d:eb:f0:55:9c:98:bf:c9:ac:dd:f9:6a:28:38:9a:c9:ce:
f2:78:d0:8e:32:66:18:0c:0e:3e:17:18:b9:95:55:eb:0b:bc:
37:88:4b:5b:af:bd:5c:ba:58:f6:dd:1f:75:a4:eb:b3:8f:27:
fe:ab:f7:45:b9:60:b3:a4:60:8c:45:31:00:ba:2c:36:1a:84:
8e:c4:2c:2a:b8:4a:dc:2c:ed:df:64:c3:1c:09:b5:5e:a4:06:
dd:d7:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:19 2026 by rpki-client