Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: GFzq3INt7hC33/4pJYcCanLi8DOUzCA+KBsFbcH7pqY=
Subject key identifier: 4D:63:D2:0C:CA:EB:A3:B6:C2:A1:5B:B6:9B:BE:C2:76:49:39:F8:35
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 019DCF755B79E6BC687F1C8EC6019CA2BF79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 0EF5
Signing time: Mon 27 Apr 2026 15:01:07 +0000
Manifest this update: Mon 27 Apr 2026 15:01:07 +0000
Manifest next update: Tue 28 Apr 2026 15:01:07 +0000
Files and hashes: 1: 28qciXJsiY_HinbmOHfVFSyJkQk.roa (hash: UYVCwyOsNlY276CdR8TOzS4Rj720VMSX5696EeMarho=)
2: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: oHVfEDtvUK/rdBktA21ortIl6MadX/CJWeZtn3q1Y/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:5b:79:e6:bc:68:7f:1c:8e:c6:01:9c:a2:bf:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Apr 27 15:01:07 2026 GMT
Not After : Apr 28 15:01:07 2026 GMT
Subject: CN=4d63d20ccaeba3b6c2a15bb69bbec2764939f835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:48:fa:46:a8:67:35:99:f4:d0:a8:d5:99:0a:
c3:66:55:f8:c8:73:66:38:d0:d0:ce:d6:4d:83:ea:
08:07:9e:4e:be:5f:88:da:bb:88:3c:90:42:b3:3f:
dc:02:5f:b3:bb:3b:a0:7e:3d:62:17:50:c4:f1:80:
76:03:19:d2:7e:83:ee:ee:61:6c:da:66:8e:a8:95:
85:94:94:d0:e1:4d:d3:51:4e:8a:79:f9:c4:5a:0b:
9f:07:d5:da:0d:20:60:2f:4c:22:a9:56:76:3a:59:
96:ec:4a:a4:4e:60:75:38:f2:d3:a0:93:ed:e2:3b:
b7:a5:d2:9b:98:29:84:94:7e:f7:3f:43:55:2a:5f:
80:b9:c2:86:dc:96:3a:37:bd:e4:1a:48:91:46:ba:
eb:4e:fd:9e:ca:b8:c8:00:38:d3:1d:05:4f:37:f4:
71:92:af:7b:1f:d8:93:67:f8:dc:47:07:9d:63:ae:
02:72:01:db:3b:15:a8:56:10:a3:21:37:2b:0d:dc:
65:9d:16:0e:f0:be:84:f3:f7:5b:58:96:1f:a2:e8:
4d:27:96:b5:b5:c5:66:08:c8:c4:a6:41:cd:60:e1:
f7:3f:9f:51:7b:9e:ec:a5:2f:a8:61:ca:ea:a8:31:
34:5d:b5:10:c8:6d:0a:94:85:d0:f0:15:f1:9a:6c:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:63:D2:0C:CA:EB:A3:B6:C2:A1:5B:B6:9B:BE:C2:76:49:39:F8:35
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8a:da:75:03:ed:40:9b:7b:5e:c8:60:b1:60:e5:9d:6a:f1:
f8:74:91:aa:a2:e2:8b:1c:b9:5e:9c:fd:ef:38:c0:23:b4:92:
7d:05:cf:7c:da:38:ea:ec:ab:fc:81:56:a6:2a:44:32:96:db:
a9:d3:a0:80:80:ec:fb:65:80:ef:9d:08:af:cb:24:7c:cd:95:
bf:84:d9:e3:aa:d3:a6:25:07:17:ee:ff:e7:d4:04:4f:72:10:
a6:04:0e:bc:b8:47:40:68:4b:9a:fb:99:d1:14:3f:fd:e8:b1:
5f:45:fd:11:df:fd:3e:bb:14:39:f5:63:fe:60:32:b0:bc:b5:
7e:60:22:0a:36:3a:6d:1d:5b:ac:ca:2b:50:f4:7f:c1:3d:99:
9e:6b:23:a5:2e:d3:ad:c8:39:b9:51:d8:cb:bf:eb:00:40:23:
86:b7:89:aa:aa:19:66:08:10:7a:ee:97:c2:97:91:76:43:95:
48:8b:a6:23:99:9d:b2:2f:5a:a0:1c:db:ae:c6:0e:9e:74:3e:
59:1a:93:1f:0f:03:97:ce:dc:f1:f0:09:9d:cd:b6:a7:b1:f2:
91:3b:ba:79:94:6d:43:d6:90:d0:42:05:8d:24:e5:1c:08:c6:
51:bc:49:70:9a:17:23:51:d9:1f:58:f5:6c:97:ed:93:28:65:
74:06:c7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:14:13 2026 by rpki-client