Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: FLT9WqztDhCEJ2WHZdVfzf8s99cDb5+e7sUphERzTbc=
Subject key identifier: 34:43:F5:D2:E3:A1:09:B7:24:51:2D:BA:51:40:7C:C7:AE:93:60:E1
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 019D9999A153D2CDCA840AC2C895A71D20AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 04:01:15 +0000
Manifest this update: Fri 17 Apr 2026 04:01:15 +0000
Manifest next update: Sat 18 Apr 2026 04:01:15 +0000
Files and hashes: 1: 102rhK3hZolwzCt7IJfuq8GdQf0.roa (hash: YO/FD+MWLi1I9ePrVvUS7xZGRfMEMrX2LxQRpa4cPxs=)
2: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: GROQsKgLAVqH2GNJalODQ3dwFbCQlLQnElrWJ8P1LgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:a1:53:d2:cd:ca:84:0a:c2:c8:95:a7:1d:20:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Apr 17 04:01:15 2026 GMT
Not After : Apr 18 04:01:15 2026 GMT
Subject: CN=3443f5d2e3a109b724512dba51407cc7ae9360e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:1a:b1:ed:c0:b6:df:b0:18:a0:e9:ce:92:
1d:06:f1:9b:a3:ad:47:bd:68:5c:aa:ac:eb:f8:dd:
15:6e:10:ce:00:7b:f4:42:3a:9d:ab:b3:7f:8f:f3:
16:37:5e:97:a0:d5:28:1e:37:00:da:63:b6:c6:c7:
c8:64:1e:82:5f:02:6c:93:62:e1:c2:b3:81:ac:24:
17:63:aa:eb:ed:6b:f7:57:17:58:2a:27:b6:3a:b4:
f5:ee:12:64:54:3a:70:f6:4c:57:5c:fd:1f:1c:75:
1e:f8:62:ac:4a:e7:a8:2c:a1:d1:44:c5:fa:64:fe:
40:b1:0f:ab:c8:7d:2b:db:bb:f2:6a:04:2d:08:e0:
53:7e:e9:1b:dc:10:fa:4b:89:89:d9:f1:bf:3a:b5:
98:69:66:6a:2a:9d:12:d3:2f:5d:0a:63:00:6d:77:
77:48:2e:aa:f3:3a:0f:22:4e:4e:f9:c7:fc:3f:ea:
73:45:5a:08:11:8e:f6:20:de:04:de:96:37:d9:89:
cc:9d:8b:43:bc:e3:83:3e:bf:3e:6e:d2:a4:fc:2a:
13:5b:cf:3a:42:24:77:fc:73:ba:21:22:46:12:33:
87:72:6b:2c:09:df:d6:b1:71:26:4f:79:21:fb:5d:
c1:63:05:db:5e:ca:0b:95:de:bb:50:b3:7d:e1:1b:
d4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:43:F5:D2:E3:A1:09:B7:24:51:2D:BA:51:40:7C:C7:AE:93:60:E1
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:35:37:23:24:69:31:7d:28:e0:33:d3:17:25:e7:ca:b7:29:
e6:20:b7:f0:4c:e6:4d:e2:ba:27:9c:24:6e:b8:8b:6d:fa:ee:
49:c8:1c:5c:f2:39:5a:0e:9f:a6:e5:53:11:55:4a:56:80:33:
1f:eb:7a:40:06:66:b2:dd:0c:05:76:36:34:78:33:ec:5d:31:
d8:98:8b:d5:66:29:84:26:8c:f6:51:41:1f:a4:87:61:52:3b:
fa:2b:9d:6d:bf:f9:c2:be:d0:68:d2:e0:fb:3f:d1:ca:c7:0c:
7d:15:2b:b5:01:ae:af:00:eb:98:cb:58:8c:8c:8e:26:75:f6:
07:5b:4d:17:9a:40:0e:a4:44:63:ea:a7:46:09:b2:10:a3:c7:
f6:4a:ac:88:85:c3:83:86:ce:5b:3a:c1:05:d2:7c:1e:51:b6:
a8:40:bf:85:49:40:a4:0f:f2:df:6d:53:21:71:32:2f:10:1d:
82:2d:64:74:7b:49:ef:7c:88:d3:24:75:69:05:47:96:e8:69:
08:41:bd:64:d2:f5:d1:19:3f:71:a4:73:c8:b3:9a:cc:72:1c:
1f:05:1d:b5:e9:2c:a7:a5:a0:de:c0:31:00:be:52:e9:e3:a8:
73:99:32:81:ec:14:03:4a:7f:11:8d:cb:a5:83:1c:a8:3d:83:
be:c4:6a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:55:41 2026 by rpki-client