Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
File: 4WgoY-mYep64ZougfJbJmhst_mk.mft (raw, json)
Hash identifier: f/3W+2ub1HKlAMvwpkBmJgYY6CWsNq9D1XoCjsE+mY0=
Subject key identifier: C4:24:1C:7B:70:53:8A:81:D1:EE:FB:EE:08:88:B1:E0:22:DB:E2:FB
Authority key identifier: E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69
Certificate issuer: /CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
Certificate serial: 019D65E277EF26F95CCBF98CA093645FAA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
Manifest number: 0219
Signing time: Tue 07 Apr 2026 03:00:33 +0000
Manifest this update: Tue 07 Apr 2026 03:00:33 +0000
Manifest next update: Wed 08 Apr 2026 03:00:33 +0000
Files and hashes: 1: 4WgoY-mYep64ZougfJbJmhst_mk.crl (hash: PIoIPYr/tMmfE8Jmj9ghMAOebuqfjnYoJga9s+hchlw=)
2: Ac2bylIr7B437ec52nmYNkxcBLU.roa (hash: NVzCCl4oqQBqLlnzk4NHLtjdOZIYGTwFiCs0i6US8YQ=)
3: VurYQADeNAyQZfVqHtE93Y07CDc.roa (hash: zo7Q7XfiMqpPBNsTQ58E9qm/cSZ4esMUjH52zOEyenA=)
4: ey-McRgW79AZU_fzpE-27yI2jAk.roa (hash: pO+sInd8rxx8H+MS6Ps1T/UlLYjOIIjg8OASDn/RsGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:65:e2:77:ef:26:f9:5c:cb:f9:8c:a0:93:64:5f:aa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
Validity
Not Before: Apr 7 03:00:33 2026 GMT
Not After : Apr 8 03:00:33 2026 GMT
Subject: CN=c4241c7b70538a81d1eefbee0888b1e022dbe2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:40:72:19:31:c1:dd:07:b8:ea:c9:e6:1b:08:
ba:d6:14:5f:7b:5a:75:2c:ac:6d:24:17:5a:77:14:
c5:9c:aa:77:f2:a7:d7:86:6b:5f:b5:13:b3:21:ca:
f5:09:66:2d:44:ff:12:1c:56:9c:ff:29:4f:b1:7a:
ef:66:b9:2a:19:78:45:14:a9:52:8f:b2:4a:1f:f1:
8c:4d:6f:ac:32:5a:8e:a3:ff:25:6f:42:a8:0e:55:
1c:4b:09:f2:8d:db:fd:0a:ac:2e:86:95:70:c6:c2:
6f:80:1b:84:a6:70:c2:5f:ee:ad:13:b8:58:22:54:
09:bb:a0:c3:76:34:31:68:f7:85:60:84:53:de:58:
d7:93:80:db:79:e0:e6:fc:82:94:3a:a1:5a:ff:53:
8c:fc:37:99:01:fe:af:73:ec:7f:71:df:e5:67:37:
a8:74:df:d9:b7:72:cf:31:fc:06:84:1a:1b:50:a7:
1b:8a:76:dc:ff:c8:ce:a5:64:f4:a5:6b:3a:fb:d6:
95:ed:0a:e3:ff:e7:9d:05:60:cd:a4:41:c3:39:71:
9c:8b:2b:15:07:5d:0c:7c:6b:7f:c7:c3:24:e8:a6:
d8:b4:70:c8:b6:33:24:41:d8:f5:66:7b:19:1b:ec:
94:03:28:73:49:06:27:6e:9a:5c:a7:5b:d6:9b:1d:
66:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:24:1C:7B:70:53:8A:81:D1:EE:FB:EE:08:88:B1:E0:22:DB:E2:FB
X509v3 Authority Key Identifier:
keyid:E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fe:ae:6f:77:53:0f:b4:42:cb:34:cd:17:a3:4e:62:0a:0e:
38:ce:2c:01:a3:f9:8b:bb:91:45:a1:ec:1a:03:6b:15:2a:84:
ff:0c:46:01:3f:3f:6e:8d:ca:ab:4e:80:65:a4:f8:a1:4b:77:
dc:31:d5:0f:08:71:e3:a1:6f:c3:56:db:e7:8d:96:ac:c1:2a:
7f:18:58:36:7b:aa:bb:0b:b4:70:40:40:51:5f:0c:f1:db:c9:
f8:b6:de:69:86:1d:90:16:85:0f:b3:b8:fc:22:3b:d2:88:f0:
2e:99:4c:b7:49:30:64:f2:f2:a0:9f:5c:ab:f0:d4:f5:67:b6:
07:5a:a1:59:cd:8c:9e:6e:0c:eb:2b:8d:f4:d8:0e:83:ed:8f:
5d:2b:2a:34:9e:3e:1a:84:3e:9d:a6:22:a7:c0:b7:61:11:55:
cc:35:78:19:f0:b3:0f:2c:2a:42:ee:84:b8:9e:35:fd:15:42:
63:f4:ec:38:3e:48:9e:c9:90:28:85:a7:2f:7d:87:c6:49:87:
59:1b:67:33:7b:5c:02:6d:6f:61:e3:e2:40:d2:75:13:1d:a0:
c6:80:c6:fe:3d:55:5f:82:9e:e8:4a:cd:b6:aa:27:a2:55:7c:
5d:d8:b9:6e:0f:ec:a4:c0:ff:41:8d:3e:df:31:c1:5d:a1:09:
0a:b7:68:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:05:06 2026 by rpki-client