Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: 49ECXzq0mIIJjZWzH31ar1Uhfv+xFGlotSsJBebaXwQ=
Subject key identifier: 1D:94:97:F2:5C:C7:55:2E:1C:BB:B3:C2:98:E0:7E:05:7D:41:EC:41
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 019D9962758002C5EECB998C731F128B48C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:59 +0000
Manifest this update: Fri 17 Apr 2026 03:00:59 +0000
Manifest next update: Sat 18 Apr 2026 03:00:59 +0000
Files and hashes: 1: BvnR5KCMhsoLCz2hSAnbNfkHGk0.roa (hash: hDwrjYY17s8gLiCt6EYouA8sleyAadnkSLPmIcLH8nw=)
2: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: Czj7Fy7G4MUaCPJaKPu+ScTV4JXIYr1VQ48k2LlyrDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:75:80:02:c5:ee:cb:99:8c:73:1f:12:8b:48:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Apr 17 03:00:59 2026 GMT
Not After : Apr 18 03:00:59 2026 GMT
Subject: CN=1d9497f25cc7552e1cbbb3c298e07e057d41ec41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:51:f5:1f:d9:69:d3:a6:04:36:95:9b:cc:
76:38:b2:0a:29:a0:c5:96:0e:0e:3a:78:bb:9c:3b:
17:82:6e:7e:dc:b0:64:1a:f9:63:b0:c8:dc:22:b9:
89:58:77:a3:69:fc:73:0f:66:1b:2b:d4:26:7b:89:
95:fc:1f:e8:81:ca:5b:44:fb:a7:bc:9d:42:96:45:
f4:04:8e:51:64:7b:7d:10:a8:87:76:10:01:78:c7:
db:44:eb:00:03:54:25:bb:07:21:ec:58:ec:2b:2f:
e3:ca:13:91:2d:26:59:ef:2b:58:08:fc:85:55:82:
2d:89:6d:36:18:51:e9:47:02:2f:3c:d4:25:dc:89:
90:e8:5c:c2:86:77:f3:31:83:23:2f:7b:21:c0:0e:
f6:54:b4:5d:25:65:1e:01:02:bd:a5:7b:52:43:02:
8c:3d:29:84:a0:7b:d6:cb:e3:21:1f:57:45:6d:7c:
bb:7a:48:14:70:08:28:0f:3b:e0:80:b7:da:2c:13:
b8:d9:82:04:00:0c:47:33:02:34:f5:c6:b3:1b:4f:
ff:df:84:da:fa:19:86:16:94:58:cc:64:69:8b:66:
00:74:cb:cf:bf:91:88:00:b9:df:09:e1:29:2c:39:
f0:aa:93:3c:2b:a4:8c:d1:62:e3:5a:4b:ce:35:5b:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:94:97:F2:5C:C7:55:2E:1C:BB:B3:C2:98:E0:7E:05:7D:41:EC:41
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:08:04:3b:d0:e9:59:05:53:b2:9a:5d:8a:4f:68:00:60:26:
d4:0b:9d:d8:09:f1:34:69:22:9e:e1:d2:93:f4:82:48:d8:71:
b2:c7:c2:ec:31:c6:ce:5c:7b:eb:20:00:31:60:3c:0b:ca:df:
22:6a:d5:8c:1f:d1:f8:59:ea:fe:36:e4:88:d8:71:a0:20:9b:
81:d1:e0:3d:07:e3:fb:c1:3d:b8:dd:e6:b0:91:6d:a7:be:f9:
23:dc:34:ad:d4:03:6f:2c:33:54:0f:80:bf:44:6d:3f:17:00:
4b:20:eb:b0:04:51:1d:e3:42:6c:f4:c2:5d:39:76:e4:ae:18:
cd:16:7f:16:2d:9d:e6:19:3f:6a:55:7f:09:50:56:73:cd:c6:
93:a8:59:d9:c4:cc:b9:eb:d6:cb:24:ed:86:78:38:71:29:b8:
f6:ad:25:ad:ea:85:8e:da:d6:67:f1:23:97:36:fd:e9:27:28:
25:d5:ba:c4:66:14:aa:0f:f8:0d:83:ac:a9:af:24:98:d1:80:
c4:e5:98:b7:1c:44:b1:a8:16:1c:d2:50:90:a0:76:73:e8:a9:
60:61:2b:92:fc:a9:b3:19:72:9f:21:45:1e:b7:eb:e9:00:38:
20:0e:d9:d6:f5:f1:e4:d8:25:18:11:70:07:22:00:96:27:6a:
44:f7:7f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:33 2026 by rpki-client