Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json)
Hash identifier: CLtjbpILnGf61eLmVbzNRvl9OdvVhaNpbVLFuny/8As=
Subject key identifier: 14:E0:7C:0B:B6:FC:11:25:B6:3D:4C:02:52:C5:E5:DF:8E:11:17:33
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial: 019D99D090AD78C437D214E1427EDCEC26CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
Manifest number: 0D66
Signing time: Fri 17 Apr 2026 05:01:15 +0000
Manifest this update: Fri 17 Apr 2026 05:01:15 +0000
Manifest next update: Sat 18 Apr 2026 05:01:15 +0000
Files and hashes: 1: 2mbNbpusYk6iw7nI_ZoVXkx25Kk.roa (hash: jECrA0GxGXQNN5tkvnTh0W3htAuhM6FaT6MhUte5d2Q=)
2: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: pskSunHm4+XAQzABmeGpWS6wrahbKxlwxzKRF7CrQcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:90:ad:78:c4:37:d2:14:e1:42:7e:dc:ec:26:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Validity
Not Before: Apr 17 05:01:15 2026 GMT
Not After : Apr 18 05:01:15 2026 GMT
Subject: CN=14e07c0bb6fc1125b63d4c0252c5e5df8e111733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:1b:24:40:b1:b0:89:33:e4:ff:a7:42:e9:
4a:aa:16:ca:c2:c6:28:8b:bf:de:f7:08:77:ac:f4:
2d:63:e3:c2:0b:35:8b:ae:ba:8c:0f:86:d6:67:91:
f1:46:f7:5e:48:20:b7:ef:4a:55:b6:02:ea:66:4d:
57:26:96:87:af:51:d2:76:e4:18:bc:78:99:fc:9e:
c1:d7:0f:bc:8f:ed:42:db:10:3c:ac:7c:f1:ad:a8:
a4:cb:c9:63:d3:18:41:d8:43:e8:82:53:fb:3a:0e:
07:f8:b9:cf:1e:05:d4:e8:7b:67:5e:30:e5:e5:bd:
30:b0:1a:f8:a2:e8:f6:d8:c2:29:cc:e7:7d:70:e7:
8f:24:49:84:07:2d:68:8c:54:06:a5:bf:7c:bf:fb:
44:f0:5b:2c:dc:2f:b9:2b:63:98:aa:24:b3:d9:aa:
6c:b1:a5:2a:55:38:4b:88:b0:25:96:72:3b:8d:b3:
f8:f0:e1:be:1e:8d:f2:da:ba:a0:a3:75:71:c5:e0:
7b:3e:c0:e6:0e:db:19:14:02:8b:8b:b4:41:a3:b4:
d6:d3:ae:32:29:06:46:66:9f:f5:35:e1:fd:19:8d:
ee:d6:1f:ab:8d:58:ac:fa:18:6f:4c:b6:81:e7:c9:
35:ce:8a:48:72:09:3b:c8:9d:61:c8:fc:f7:5d:09:
af:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E0:7C:0B:B6:FC:11:25:B6:3D:4C:02:52:C5:E5:DF:8E:11:17:33
X509v3 Authority Key Identifier:
keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:14:0c:bd:cd:4c:91:6e:a7:aa:7f:2f:a9:b1:33:7b:6a:7b:
9f:3a:9a:2e:50:0d:fa:aa:1f:d6:8e:19:27:3e:56:3a:bf:90:
c1:4c:bc:9e:a4:40:b2:1f:c6:39:c2:2a:76:66:d0:73:a9:43:
c0:11:06:f6:b2:4c:3f:8c:68:1c:53:20:99:61:19:bd:dc:e1:
e4:7a:f3:b4:6f:ed:b0:a2:6a:26:e8:6c:e9:b8:8f:e3:86:33:
45:a5:fd:d8:ed:a8:44:6d:49:db:ae:5c:37:46:c1:cd:41:75:
50:70:12:e5:eb:ad:84:ea:85:d3:8d:c8:7d:53:29:69:fb:1b:
bf:85:dc:a4:b3:31:9b:d1:15:87:3f:51:00:40:cd:f2:b8:7c:
e8:6e:eb:a2:98:d8:49:bc:cd:73:40:1b:e8:2f:9d:2c:1d:19:
ec:06:44:c9:51:78:6c:33:5e:0e:a6:d0:1d:5a:68:af:eb:79:
f8:43:06:07:74:ce:8e:58:a2:a3:af:19:62:49:29:77:e7:c6:
44:b1:38:b5:b7:b9:4a:6b:da:b2:a9:9e:13:3f:cc:1b:9e:c1:
1d:e3:77:d1:58:fb:cd:2f:47:cc:a9:fb:59:9e:1c:a5:61:21:
9a:aa:78:b2:55:47:6c:5a:59:55:54:38:c8:ae:d3:cf:8b:87:
54:08:ae:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:28:59 2026 by rpki-client