Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File: 4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier: Dj+H0/fBBmc7/HxliMf5D6buvQKlmwUO0vX/N96Huis=
Subject key identifier: 2E:0A:32:36:96:88:D5:30:2F:E9:D5:5A:9D:93:BC:86:7B:06:BD:E2
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial: 019D9D3FA16D03F3E7291459DC8F7A36079D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number: 0803
Signing time: Fri 17 Apr 2026 21:01:26 +0000
Manifest this update: Fri 17 Apr 2026 21:01:26 +0000
Manifest next update: Sat 18 Apr 2026 21:01:26 +0000
Files and hashes: 1: 1-EjMX3YRkacpuKYO2FH7s4TaoIk.roa (hash: 5s0riiJVWdi9HHDl4S6viqfJpzTBR9zdtDH9C+DcLJc=)
2: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: zHxtNl+VLEk9XfhVbKN8wu30bsm2hA8x98F0Ry0XPxo=)
3: OBbXBCvcqIaXdkpP01srqqNumYQ.roa (hash: tOeKjUztrQmZUOK5tSU3z7kVcfpLnbmQDA6Js+6Ulgo=)
4: odjrkNL4Yq2CXUVTQsXxPdl9ENs.roa (hash: kP+uJe1dyrOkqr9O36VTGq109yqCnpr2QUsWWtiUKws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:a1:6d:03:f3:e7:29:14:59:dc:8f:7a:36:07:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Validity
Not Before: Apr 17 21:01:26 2026 GMT
Not After : Apr 18 21:01:26 2026 GMT
Subject: CN=2e0a32369688d5302fe9d55a9d93bc867b06bde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9c:d3:a9:ff:00:cf:bc:29:b8:cb:4d:0c:44:
8c:80:7b:dc:ef:59:1b:b3:1c:8b:20:7c:36:52:4e:
f3:51:4b:03:2c:0d:aa:75:08:c8:bf:c1:9c:bf:05:
d6:9a:4d:3b:1d:e7:e9:8d:4d:cd:08:61:97:a3:e5:
de:c7:e2:45:e8:65:e3:b1:cc:6a:23:75:26:4d:e3:
0d:7d:81:9e:b7:fc:ca:65:53:0b:69:3a:d4:d4:34:
dd:0d:88:77:e7:a1:98:c9:2e:01:35:f8:ad:d3:05:
a2:bf:34:54:11:a9:59:11:2f:1c:04:8a:61:a4:12:
a4:3b:7b:4b:22:20:62:83:48:87:ad:11:eb:e3:b6:
3f:df:60:43:61:d4:e9:a3:73:c0:d0:c1:13:ce:d5:
82:ef:38:b1:41:8a:bf:8b:89:26:1b:4c:49:6c:c9:
a7:f4:92:aa:0b:8e:d9:ab:fb:9e:a1:2c:bc:2f:b4:
af:0f:4e:b4:d5:67:50:29:d4:cb:95:5f:2f:6f:f9:
ce:b3:47:56:95:cc:2e:c1:26:1f:1e:df:56:c7:ca:
e4:48:05:20:b3:ba:09:b6:5b:cd:0d:04:08:13:32:
65:27:a3:8f:c0:4d:da:38:23:b6:67:7c:ff:66:81:
a7:d5:f4:fb:f5:41:ee:d6:87:91:83:24:ba:ca:ef:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0A:32:36:96:88:D5:30:2F:E9:D5:5A:9D:93:BC:86:7B:06:BD:E2
X509v3 Authority Key Identifier:
keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b1:10:10:e8:13:c0:a0:45:1b:6a:a9:68:6c:6f:a8:e0:d3:
51:7a:31:e1:55:31:86:79:b5:e0:0f:82:9c:34:47:89:a4:2c:
ee:02:48:f5:b7:de:58:28:08:68:89:1f:33:92:e0:b3:b9:29:
80:50:b0:1d:86:98:f9:86:98:a3:fa:19:57:ca:c9:51:d6:93:
af:06:9f:66:cf:05:d6:d8:26:28:26:bf:e0:bc:fc:d8:09:3f:
84:bb:e4:a4:b0:5a:ca:bc:c6:dc:7c:37:cc:b9:e9:ea:4a:61:
6b:77:65:d9:3c:d8:43:ae:8b:11:79:81:9d:4d:e0:9b:22:2d:
24:db:e1:a9:a7:af:3c:28:d2:fa:35:a7:32:2f:d0:8f:0b:ef:
0c:68:10:6e:37:3a:f6:f8:57:96:0b:ab:30:ed:1d:fd:3b:f6:
34:c8:af:a6:39:ea:9d:21:9b:d5:5c:7b:db:b7:79:00:fc:c9:
76:56:2b:de:59:d8:1b:5d:f6:a1:12:96:a5:0f:3c:d8:8c:71:
c9:f8:21:21:ff:92:af:ee:9a:c2:0f:60:61:83:25:b9:45:80:
c4:b9:db:a5:3c:cf:0f:ab:2c:ed:41:10:d2:da:40:3d:73:6d:
4a:85:fb:e0:08:6b:c3:e4:51:90:7a:5b:80:6f:09:86:fb:53:
b7:b0:33:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:41:13 2026 by rpki-client