Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
File: 4RlTX6w_pId5V5vOj8O0At7yy0Q.mft (raw, json)
Hash identifier: IjEJigQqT6NKiiovmkiZfmoxXoruv/TQLLhnHNk/YvU=
Subject key identifier: 7C:33:02:21:2E:FD:08:CA:DB:9C:3E:11:F1:7F:DE:06:54:78:69:86
Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
Certificate issuer: /CN=e119535fac3fa48779579bce8fc3b402def2cb44
Certificate serial: 019D99D041CC3E0DE855906EAC495B7DBC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
Manifest number: 0899
Signing time: Fri 17 Apr 2026 05:00:55 +0000
Manifest this update: Fri 17 Apr 2026 05:00:55 +0000
Manifest next update: Sat 18 Apr 2026 05:00:55 +0000
Files and hashes: 1: 4RlTX6w_pId5V5vOj8O0At7yy0Q.crl (hash: xm2qX6NUKl5mFBEe/pGEmP6r7q+7jlGiICP7sm4I1Yw=)
2: xsczLZy6vYyowOb8czcl6wqwt9w.roa (hash: Mvlo5cxvh4qQACxtbdlZhswtrG2sScu72g8Sl/rtq7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:41:cc:3e:0d:e8:55:90:6e:ac:49:5b:7d:bc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44
Validity
Not Before: Apr 17 05:00:55 2026 GMT
Not After : Apr 18 05:00:55 2026 GMT
Subject: CN=7c3302212efd08cadb9c3e11f17fde0654786986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ab:4b:c3:cf:51:fc:cb:0b:b3:7e:34:39:e3:
18:83:61:4c:50:b4:0a:92:88:95:7e:ea:7a:cc:e8:
6c:78:7c:b9:10:89:e0:51:38:72:83:1c:6a:a8:a1:
dd:b0:ba:c6:c5:e7:d2:37:ba:83:55:c7:b5:2f:7a:
c0:ee:2b:01:7b:4b:0c:d6:a5:56:e9:90:52:c3:d0:
de:a8:2a:c1:4a:83:ec:96:43:a2:6c:6c:13:f4:a6:
78:e4:b4:98:b7:94:06:19:35:7f:c0:bc:00:cc:22:
a3:47:24:1a:fe:e1:50:8d:11:65:c4:eb:01:3b:3a:
4c:41:35:aa:79:f6:37:1e:29:df:33:30:db:51:c1:
81:48:96:09:76:b5:45:a1:59:88:92:0b:5f:52:77:
24:52:2e:e0:04:13:d7:e7:35:da:c8:1c:d7:cb:b0:
6f:7e:45:3a:10:41:2a:38:a4:c4:ef:de:d3:5f:f6:
50:eb:bd:29:23:80:b0:46:3e:8a:1a:53:01:d5:5f:
ae:46:2b:d0:b7:3b:b4:36:50:87:26:7f:d5:79:bc:
18:ca:96:51:ec:c3:ec:f9:87:69:ca:8a:71:96:74:
93:12:69:44:72:2f:b4:5d:06:8a:e8:31:80:c8:5c:
a2:ae:90:ab:9e:56:41:38:c6:3c:e8:92:ae:df:c7:
c8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:33:02:21:2E:FD:08:CA:DB:9C:3E:11:F1:7F:DE:06:54:78:69:86
X509v3 Authority Key Identifier:
keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b7:cb:f5:25:25:04:bb:14:e6:ea:c5:21:90:98:15:62:d2:
f3:16:e4:a7:86:9b:e7:4d:ea:91:de:0f:6a:99:1f:1d:91:fb:
fc:0d:76:09:0d:6b:54:a4:7f:fa:c9:0d:32:f1:f7:3d:b2:c3:
87:2c:64:99:19:99:4a:e8:e7:7d:e1:ae:60:77:6e:5d:51:b4:
ef:b6:fd:59:2e:26:51:87:8f:ab:37:77:f1:56:e5:41:df:9c:
f2:c0:57:98:ab:75:11:ac:03:ca:2a:00:3b:60:66:03:e0:58:
37:3b:ee:4c:82:63:53:6c:7e:59:d0:2b:15:11:85:c7:7e:2f:
1a:70:1f:72:e4:e6:53:e5:0c:bc:93:69:60:08:3e:88:86:af:
98:17:75:51:bb:bf:a1:7d:1a:f6:dc:58:89:99:a4:67:44:9c:
2b:ad:94:f4:cd:60:2b:5c:97:da:da:4b:da:37:13:21:33:ae:
25:93:bd:ea:bf:cd:a2:f5:53:03:3d:9b:37:93:b5:42:08:ac:
f6:e2:32:b3:a5:72:d4:82:cc:86:1b:c1:39:2b:4b:4f:3f:d6:
5f:87:05:c4:84:e7:d4:bc:32:f8:e4:e1:12:37:a4:5d:51:5e:
4b:f9:6f:ff:dd:80:1f:d1:47:ec:92:1a:0c:0f:20:1a:d9:91:
8a:99:0c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:14 2026 by rpki-client