Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier: hOTdjRXk/97vpWpFf0HnRYLJHTzD9k3ChsWMuvVEHhk=
Subject key identifier: E3:B7:6B:14:7E:61:01:4D:44:25:9C:29:5B:4D:48:5B:5E:AC:8B:2F
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 019DA2D30535838FEEE8916A8A423DE7DF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number: 0821
Signing time: Sat 18 Apr 2026 23:00:31 +0000
Manifest this update: Sat 18 Apr 2026 23:00:31 +0000
Manifest next update: Sun 19 Apr 2026 23:00:31 +0000
Files and hashes: 1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: S1s7bWXWl0cAcnCbICj4R+2CtyEI79naCkSAb/yRgyg=)
2: DyOCcgAv5D-uzn7WjreG_-yIw6k.roa (hash: G50a8YU+mQy2n/BSNcqw5qa7N7PvvorHs7UE1i40Fig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:05:35:83:8f:ee:e8:91:6a:8a:42:3d:e7:df:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Apr 18 23:00:31 2026 GMT
Not After : Apr 19 23:00:31 2026 GMT
Subject: CN=e3b76b147e61014d44259c295b4d485b5eac8b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:25:b4:ac:92:61:1b:50:0a:3f:04:d9:5b:
e1:5c:5d:88:75:84:fa:78:7b:b2:10:8d:19:fd:51:
a5:d2:dc:36:dc:1e:ae:d6:94:05:3c:37:5d:50:13:
c3:4b:fe:e0:2d:34:87:65:ba:2b:9a:3a:a5:f4:51:
c9:47:8f:ac:8d:59:17:80:8d:78:7d:aa:02:24:92:
61:e5:55:53:20:18:55:36:c3:f8:15:77:13:e5:74:
a9:b3:03:6d:ef:f6:d0:d8:22:c0:90:c3:b0:0b:35:
b3:b7:63:c9:7d:eb:79:7a:4e:53:cc:bc:9d:b0:44:
29:b0:59:0e:00:d4:61:b8:9b:8b:89:e8:14:77:09:
23:63:cf:7d:c4:c7:7f:82:50:ef:4c:69:dc:e3:7f:
1c:7c:40:fd:93:37:86:b3:6a:84:0e:31:a4:cc:75:
7d:02:3f:0d:04:50:23:8c:fe:79:50:39:de:ba:28:
b8:a2:9d:21:7e:4b:46:a8:4c:e4:8b:fe:8c:24:5b:
8c:89:33:be:53:e5:42:d1:3b:a7:72:c6:0f:7d:2d:
d4:69:c8:71:e0:4f:85:e5:e0:3d:4d:0e:fb:91:9c:
8e:b5:a7:d9:1b:92:b0:b4:3d:cb:c0:2a:d0:23:5c:
06:7a:f2:8b:c0:6f:e8:0d:76:f5:fe:9c:a1:b1:d7:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B7:6B:14:7E:61:01:4D:44:25:9C:29:5B:4D:48:5B:5E:AC:8B:2F
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3b:62:bb:4d:db:c0:7a:5b:f1:34:be:17:41:13:73:80:1c:
56:4c:7f:46:41:c2:a3:0e:3c:9b:54:5b:f5:34:69:5e:1a:49:
26:69:e7:ca:b5:b8:9e:96:00:6e:d5:cb:45:1d:61:5c:e9:60:
6c:4b:3e:5e:b5:8e:a1:c8:8f:50:f4:dd:8e:f9:e8:00:a8:87:
9c:c0:12:e8:33:7c:d0:6c:bf:80:3d:a9:79:b4:5b:4a:20:fb:
41:d6:15:2c:80:ed:79:d1:cd:67:40:24:f1:03:80:42:bb:c2:
b2:fd:5b:0e:63:16:aa:b9:a1:55:6b:5f:78:d7:dd:2b:89:41:
4e:0f:05:a5:8b:c4:ca:5e:89:af:68:56:05:c4:52:cd:e6:f0:
df:01:a5:f7:c1:a2:e6:d7:93:af:cc:e9:67:25:82:41:ae:01:
75:bb:47:ba:9f:36:65:b2:a2:53:de:f5:d4:4f:52:b1:5b:f1:
df:e2:a7:45:20:c0:6c:4a:b2:19:77:ce:be:4f:f7:61:74:01:
26:bc:57:19:7e:17:10:e4:e4:30:a4:9b:01:02:bf:fe:72:f5:
d5:43:81:9e:48:a9:9f:3c:cf:ee:92:8a:59:48:75:16:b4:7a:
87:dc:99:fa:10:41:78:1c:d3:bb:f1:36:a0:96:26:8a:0a:94:
ec:4c:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:53 2026 by rpki-client