Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft
File: p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft (raw, json)
Hash identifier: 28vWHQXNJhrH25TsvpVN+n913S1Ds60WVY9j4gq/cOE=
Subject key identifier: EE:64:E9:B6:4F:C9:14:83:2C:82:FD:B6:8D:8E:55:33:74:A0:32:31
Authority key identifier: A7:B4:87:BE:4F:27:C9:1A:E3:2A:17:BA:2D:ED:67:C3:D5:15:3D:3C
Certificate issuer: /CN=a7b487be4f27c91ae32a17ba2ded67c3d5153d3c
Certificate serial: 019DA378CED8D117B0159AAB39C2DB0E7F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft
Manifest number: C4
Signing time: Sun 19 Apr 2026 02:01:36 +0000
Manifest this update: Sun 19 Apr 2026 02:01:36 +0000
Manifest next update: Mon 20 Apr 2026 02:01:36 +0000
Files and hashes: 1: F4WIL5lRn1e8KEX9ZaKzwbn8OK0.roa (hash: fsVPNfzwVtcxP1d7ng53S1s+p3QUE/oW7iQYmnK5p84=)
2: p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl (hash: qaG8GUgL1fwTo5dSDtqAcVS1cfpKAWN/Fpf+70KM1F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:ce:d8:d1:17:b0:15:9a:ab:39:c2:db:0e:7f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b487be4f27c91ae32a17ba2ded67c3d5153d3c
Validity
Not Before: Apr 19 02:01:36 2026 GMT
Not After : Apr 20 02:01:36 2026 GMT
Subject: CN=ee64e9b64fc914832c82fdb68d8e553374a03231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:38:99:6f:2c:14:17:d2:c6:64:1c:b4:d9:ae:
c6:7a:8b:96:3c:21:90:1a:f7:ae:77:c8:05:4b:57:
3d:6d:e7:15:b1:c4:7b:e7:25:9b:72:19:83:31:98:
e1:63:d7:6c:f5:f5:ff:2c:99:2f:4f:08:6e:58:7a:
1c:c3:06:4b:6d:79:e7:4d:c2:24:91:90:3c:16:99:
79:57:06:bd:37:c4:d5:7a:d1:e4:df:ee:41:23:fd:
93:21:03:cf:26:12:7b:6f:9d:1d:e5:99:55:98:b7:
c4:c6:1c:44:ef:e0:d7:11:53:01:8b:7c:a6:03:58:
96:d9:cc:3a:95:0b:64:e8:c0:a5:30:4e:f1:a9:22:
42:d0:c6:47:b3:60:41:f3:14:31:e5:3e:d9:6a:30:
a1:8f:08:cb:15:5a:54:77:9a:9e:af:bc:b5:98:51:
08:01:7a:91:cb:47:86:22:ff:58:93:85:5e:68:bf:
8c:26:33:60:2f:33:81:aa:b1:f1:7a:60:09:cd:d0:
a8:34:6f:17:d2:4c:32:e3:32:b5:fe:ff:18:00:7d:
6b:2c:80:00:36:93:3f:f8:4f:87:8e:0c:5c:ad:d6:
5d:57:f7:90:03:20:59:49:ad:c7:fb:f6:78:5c:6d:
17:52:e6:24:2c:fe:44:6d:69:45:1d:13:0c:f0:26:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:64:E9:B6:4F:C9:14:83:2C:82:FD:B6:8D:8E:55:33:74:A0:32:31
X509v3 Authority Key Identifier:
keyid:A7:B4:87:BE:4F:27:C9:1A:E3:2A:17:BA:2D:ED:67:C3:D5:15:3D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7SHvk8nyRrjKhe6Le1nw9UVPTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a4ae7-3e83-4ce9-a9f3-86bdbf790121/1/p7SHvk8nyRrjKhe6Le1nw9UVPTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:38:a3:56:fc:b8:7b:df:06:a0:05:b9:bd:16:32:a2:b7:6e:
ad:0c:51:e0:f4:cb:db:48:ca:59:2f:c8:6b:f5:84:b9:d3:85:
03:e6:66:ad:b4:95:e5:71:d2:09:be:84:f7:2f:c1:81:54:04:
7c:ca:16:57:27:20:7a:3b:f5:57:ab:f4:f4:1f:f1:dc:ba:8e:
f8:fa:fa:dd:cf:f4:b3:0f:5b:87:ec:21:a9:91:0b:90:ea:46:
ed:69:ff:e1:d9:14:5a:a9:09:94:37:46:b2:7d:0c:e3:44:e2:
b6:e9:a0:c0:64:35:46:3a:77:ee:b1:ac:69:07:23:46:0f:e9:
f5:b1:c3:3a:04:3d:27:cd:9a:68:64:55:df:d8:e9:6f:d2:c0:
30:d5:b6:e3:2d:bb:06:cd:33:d0:46:3d:32:ad:b1:9e:1c:35:
36:75:4e:ef:5c:d6:45:ec:40:6c:aa:6b:7d:e7:ce:88:47:92:
ee:11:e4:6b:e9:b0:c0:22:c5:09:15:f6:20:da:ea:25:3a:f2:
76:63:d8:7d:2d:84:1a:45:c8:d3:8c:a1:1d:ee:e2:39:c3:58:
fc:c5:cf:15:9a:7a:a4:bc:4c:96:ee:65:ec:7c:6d:2d:bb:3d:
2a:3d:d4:49:32:f2:8d:2d:11:b5:93:3b:37:51:e3:85:77:48:
0b:38:10:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:18 2026 by rpki-client