Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File: 4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier: kZ3aiSnyYRUjovfvtN8Gw7AKDBYmwVolBAxu1xzC2Qk=
Subject key identifier: FB:A3:FE:21:19:B2:DB:CE:26:C9:4A:EE:65:9B:30:AB:FD:E7:7D:C6
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial: 019DA341059585B7C0921D1F37B22BAA532B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number: 13EF
Signing time: Sun 19 Apr 2026 01:00:40 +0000
Manifest this update: Sun 19 Apr 2026 01:00:40 +0000
Manifest next update: Mon 20 Apr 2026 01:00:40 +0000
Files and hashes: 1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: NP3rsm6v8fu08Nqz4uVodQetOai8ICD9hhv5kRlhbMQ=)
2: 4xl3tok9SorpWFsyI4hTWRVgL8I.roa (hash: D/WQvDz0YD7aThz9pG4ZIXECMXp1ea6y/G/Bk0u0Mqg=)
3: vzJwebJ7E7PLEVf89eADV1dlWKk.roa (hash: Yr+W4PaEcUNg/gK3cVZEvL18EsHfc2QVQ1cTqMJ7HMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:05:95:85:b7:c0:92:1d:1f:37:b2:2b:aa:53:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Validity
Not Before: Apr 19 01:00:40 2026 GMT
Not After : Apr 20 01:00:40 2026 GMT
Subject: CN=fba3fe2119b2dbce26c94aee659b30abfde77dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:b2:3f:4b:7e:c0:62:c0:b8:41:e3:7a:69:
fb:f4:c1:ce:ed:b7:e3:25:2f:73:0f:54:f6:60:1a:
20:bf:29:a8:b7:d9:f2:1e:16:b5:13:aa:f0:fc:da:
10:4a:97:79:fe:0c:6e:02:62:ef:05:2e:26:b5:85:
d5:49:93:61:10:86:14:3d:a3:e3:66:ec:2c:24:2d:
75:39:60:14:53:ea:6d:2a:a2:ff:a6:24:e7:61:5c:
eb:7f:f8:ff:d2:a9:ac:fe:0e:74:34:ed:dc:ed:7a:
6c:e7:4f:78:9d:e0:f1:e9:0b:6e:24:02:81:b2:24:
d3:48:15:91:ae:fa:8b:4f:b8:f1:49:9f:7b:f0:5d:
67:7a:38:8f:82:e2:44:0b:a8:7b:bb:a1:8b:0c:b9:
18:25:80:65:cd:3f:56:23:c2:58:ec:4e:6b:8e:e0:
9f:7d:1a:74:39:8d:e7:35:3d:d6:97:5d:27:d1:2d:
fc:d6:e5:f3:01:84:a5:fc:da:17:72:1c:ed:ca:6b:
d1:23:42:5a:89:a8:ba:69:e1:55:e7:b8:04:47:f7:
90:82:61:db:65:a4:19:28:3c:d5:f1:b1:1f:1a:a4:
21:db:23:c8:23:a3:65:fe:95:23:cc:47:f7:09:83:
ab:84:98:08:82:f2:de:a5:59:aa:e8:cb:93:e2:36:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A3:FE:21:19:B2:DB:CE:26:C9:4A:EE:65:9B:30:AB:FD:E7:7D:C6
X509v3 Authority Key Identifier:
keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c5:f2:cb:b9:5d:28:aa:60:e8:16:13:d4:e2:f6:c7:f7:f7:
1c:c5:4b:07:9d:7d:04:55:ac:08:d2:5d:1c:1c:67:aa:e7:85:
02:84:0e:74:25:f8:3e:e7:f8:e6:10:17:41:12:34:c1:b5:ad:
48:13:0c:8f:f5:14:7d:bc:29:c3:97:85:d5:49:c0:24:3a:a7:
f8:1a:4d:ab:fb:6e:67:74:3d:52:05:ed:39:be:7f:0e:27:31:
57:90:4a:e6:65:86:98:20:5e:f8:b6:54:73:63:06:e7:d0:09:
f3:35:80:be:8d:e3:7f:40:94:28:80:c3:0e:4c:33:ef:2b:0e:
59:f7:af:30:43:e4:bc:6d:78:3c:b7:a8:93:d3:fe:cb:42:68:
82:af:f9:d4:0e:38:7e:a1:ee:fe:61:65:6f:89:57:93:39:97:
83:11:d3:2c:5c:56:8a:b0:13:03:b4:d6:0d:4c:6f:fd:dd:1c:
c3:58:b2:b7:d8:b6:88:96:d4:af:78:d0:33:7b:7a:97:8e:d5:
d7:9e:3a:37:ef:8b:06:17:d0:22:73:90:f4:cf:05:44:52:da:
2e:83:4c:f0:ed:fd:70:0d:82:5d:04:77:22:97:fc:33:e3:1f:
07:24:65:2b:ec:6b:54:02:ba:0f:a8:34:2e:ef:e1:15:7c:eb:
a1:2f:79:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:59:28 2026 by rpki-client