Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
File: 4qv2099Tm7fBaE-09GF50NoGsIM.mft (raw, json)
Hash identifier: WGHPUjZ/MJLS+ZlXqnwrOrNHLO308c/Q58/uGe7fJfU=
Subject key identifier: E8:82:25:B9:CC:C8:5B:25:26:DF:36:65:98:7F:EA:07:5D:0A:04:81
Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
Certificate issuer: /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Certificate serial: 019DCF3E414A91DF14CCB25B8AF278C6EBAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
Manifest number: 0FBE
Signing time: Mon 27 Apr 2026 14:00:56 +0000
Manifest this update: Mon 27 Apr 2026 14:00:56 +0000
Manifest next update: Tue 28 Apr 2026 14:00:56 +0000
Files and hashes: 1: 4qv2099Tm7fBaE-09GF50NoGsIM.crl (hash: trFO9XF879xno9lW6ovXNwBZmGbq4KNhuoios9f/f3Q=)
2: GBj2xnkuHNgnAUINodxwL8rUWI8.roa (hash: Hvt6O7hlsMwc4JJYGSfH5m3V5DBbM1bLZ9uAWK2548s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:41:4a:91:df:14:cc:b2:5b:8a:f2:78:c6:eb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Validity
Not Before: Apr 27 14:00:56 2026 GMT
Not After : Apr 28 14:00:56 2026 GMT
Subject: CN=e88225b9ccc85b2526df3665987fea075d0a0481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:e2:14:d6:de:38:bd:73:cc:18:b6:8e:7d:
42:00:96:da:3c:e0:6b:83:f4:28:35:ad:e2:68:21:
21:5a:a7:b9:84:98:e3:29:85:9f:9a:45:86:6e:a2:
c1:2d:3f:30:99:9c:87:ae:6e:58:e5:cb:8f:61:ca:
cc:c1:9a:65:65:99:e9:8c:2f:0a:64:12:d1:cb:3c:
77:5b:57:cf:93:25:62:de:98:3c:b4:fe:cc:f0:72:
c7:e4:ea:39:6f:4b:03:f3:d7:95:e1:91:8f:58:a5:
38:4f:ee:fe:2a:99:0a:9e:e7:8b:09:11:39:07:71:
18:84:d6:24:b7:45:7b:3a:de:4d:3a:68:4e:e3:08:
57:f7:15:a7:40:e7:a0:47:c3:90:4f:80:a3:73:2c:
c7:6a:43:c7:bf:24:b4:78:b7:52:ba:01:b7:27:bc:
de:7a:39:fb:16:09:05:b1:b1:ce:cf:68:e1:12:1a:
ae:5f:9f:ea:ab:2b:66:7d:30:4e:b7:b8:16:4c:c4:
e1:16:49:fe:a9:39:3c:c9:2b:f4:a6:f0:ee:6c:0c:
7d:28:97:32:6b:f2:6a:c2:f9:c6:f9:f6:94:b1:24:
60:88:d4:9a:95:7d:96:de:02:bd:c4:c3:e3:1b:ec:
04:ec:69:a7:fd:e8:35:b0:a5:b8:85:4c:e9:b1:38:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:82:25:B9:CC:C8:5B:25:26:DF:36:65:98:7F:EA:07:5D:0A:04:81
X509v3 Authority Key Identifier:
keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a8:ad:87:4b:4c:77:f8:de:d0:2e:b7:c7:12:9c:83:b9:d5:
a2:23:3d:fb:52:17:b1:7a:92:89:a6:f9:11:cb:d0:2f:b5:04:
ae:33:0b:36:d7:8e:c6:52:50:1c:88:e2:b6:80:5c:1c:d8:87:
cd:ef:05:e3:77:b8:d6:f0:85:4d:fd:d8:49:a2:0b:3e:9e:b9:
a3:59:84:2a:7d:e6:a3:80:cc:6c:c5:08:f0:b5:e1:c2:4e:f2:
4c:b2:ff:18:6f:14:d2:02:2e:da:25:46:a0:be:32:98:8e:29:
0d:75:3e:79:18:5a:c7:6f:db:c0:2b:53:d9:d3:43:10:10:cf:
02:ec:e1:57:b1:cd:b9:7b:1c:86:17:d0:6b:77:b7:48:c5:ec:
1b:47:2f:5b:27:c7:b5:c9:d6:47:b6:c6:38:f0:36:dc:a4:17:
2b:5d:cf:8d:c7:29:02:b1:59:9e:3c:e4:d7:08:e6:2d:92:57:
a2:85:09:1c:a5:2b:9d:c6:93:0a:3f:fb:57:5a:c4:9e:b9:27:
ab:3b:65:95:72:9a:2f:93:6c:c3:88:ba:4e:23:40:6d:68:4f:
d1:8c:6c:89:cd:0a:36:6b:6a:86:8b:7f:b2:e3:14:70:97:e5:
bb:ab:ea:c6:6b:6b:59:ca:47:83:85:c1:c4:61:92:c5:d9:55:
5a:0f:af:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:34 2026 by rpki-client