Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: Lh76HaUFLcgBW2XGaf/MBRU6wPA1Dzm1dRtdnQ70oF8=
Subject key identifier: 0C:EB:50:7B:46:63:F0:08:44:8F:4A:3A:12:92:E7:C4:74:D1:05:3C
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 019DCE9937438FB0285A37C692B0C330D416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 11:00:40 +0000
Manifest this update: Mon 27 Apr 2026 11:00:40 +0000
Manifest next update: Tue 28 Apr 2026 11:00:40 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: fePU0vAUrNKF/FOQeW67dfBIB7qUtOe48lBeIE/jjp8=)
2: KUodnXGsFwyNehqN551Z9d54ZJM.roa (hash: 6vmbRe0Gw7jdU6fIKbRaOK9xmSJJHl1pGRS+mY2Td7Y=)
3: RxQknk-i6X3uYtHklAq4xTvLElU.roa (hash: e3Fk8UZszFvxL51DyoJ+zqnCymh1Yk5n+ob0FV7BX9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:37:43:8f:b0:28:5a:37:c6:92:b0:c3:30:d4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Apr 27 11:00:40 2026 GMT
Not After : Apr 28 11:00:40 2026 GMT
Subject: CN=0ceb507b4663f008448f4a3a1292e7c474d1053c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:fd:e3:7c:85:c5:d3:e4:59:6b:13:ca:bd:
ff:90:2d:2e:fa:76:9a:6b:da:19:d9:08:bb:59:81:
d3:fa:ce:58:74:f2:77:57:4a:0b:de:91:9f:92:a5:
6f:39:00:d6:50:ba:22:f6:3c:39:38:7f:2b:ba:2f:
7d:d3:9f:1c:b9:a0:40:3d:5a:1d:d0:33:07:20:61:
a7:40:6a:21:2d:96:0a:c8:61:89:75:4c:4e:11:8c:
fd:dc:a4:94:97:36:fd:60:d9:f4:35:f2:06:5b:a7:
5a:0a:89:c5:f9:81:e6:77:81:55:a4:fb:7b:c5:ae:
5e:6a:a8:16:6e:a8:f7:f6:42:24:d9:e6:df:e8:bf:
d6:7a:fa:d0:e9:05:f8:04:ae:58:11:80:e1:c7:40:
6b:d0:66:20:25:17:c3:b1:f9:53:14:24:84:8f:29:
54:07:a6:eb:ee:99:8e:d2:db:5f:24:6f:55:e0:27:
0a:68:0a:0b:e9:d5:85:71:3e:5d:49:41:96:d4:23:
32:e8:bf:16:cd:a1:2d:1c:80:22:28:74:2c:3e:86:
1c:15:2c:a1:0b:36:fd:5c:29:a5:71:0d:03:35:b6:
1a:bd:15:2a:f6:75:88:b0:d1:da:05:fc:f6:f2:1e:
14:74:67:00:b9:fb:94:a3:a9:13:92:ea:f0:3c:dd:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EB:50:7B:46:63:F0:08:44:8F:4A:3A:12:92:E7:C4:74:D1:05:3C
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:71:2f:e9:a1:6f:5d:33:fa:1a:5e:99:21:c9:8d:72:27:91:
44:fc:be:0a:24:d3:0c:ed:f0:f3:54:2e:26:bf:cb:d4:c6:ab:
67:1f:f7:28:35:c6:d3:fe:2e:16:4c:6d:5e:9c:be:77:ba:7c:
2c:fe:84:cc:14:67:2b:bf:95:c4:33:4c:f7:1a:9e:bd:f6:6d:
5c:f8:25:82:e8:f7:4a:26:3a:63:f8:74:aa:9f:14:66:4e:72:
f1:f4:de:66:34:2a:35:a8:3c:64:b3:a7:b1:bd:f0:fa:13:19:
96:09:b2:ef:5a:7d:ca:8b:a9:32:2c:ee:94:bd:94:25:f2:31:
53:86:2f:c9:c4:3c:5b:c5:e4:83:e3:19:24:cb:ad:d0:5e:e3:
d6:cd:df:d1:5d:8b:46:fe:52:f6:71:41:2a:5f:8e:92:0e:ce:
88:d4:c9:db:11:e6:67:7f:8f:4c:98:3e:3b:f0:57:c4:e1:b9:
b0:4d:a8:9e:e1:11:b7:f1:25:59:b1:d4:54:b1:e7:53:69:37:
c7:c9:29:54:cf:e6:94:65:0a:9d:c8:c9:89:9c:c6:be:97:ec:
ba:5c:9c:55:25:f2:b2:42:88:62:8e:79:93:df:6e:70:ca:a9:
22:01:f3:18:e5:5b:aa:df:8d:84:fb:48:5f:ad:c7:9f:09:87:
74:ab:bb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:25:05 2026 by rpki-client