Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: sANy8O9oie+YUtEF92Qio48K2rW1THjLBDFGxQqP/LI=
Subject key identifier: D2:F8:3E:99:1D:B8:3E:10:78:48:BF:B5:15:B4:4D:9A:3B:55:26:72
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 019DCE2BE9AABE509D78B5386100A1BCB72F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 0943
Signing time: Mon 27 Apr 2026 09:01:17 +0000
Manifest this update: Mon 27 Apr 2026 09:01:17 +0000
Manifest next update: Tue 28 Apr 2026 09:01:17 +0000
Files and hashes: 1: 1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa (hash: /XeBvwgyOqHyg56chvGRDFMd+7ExlJpVYmiAYZyhDGM=)
2: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: M67Bhn7vTrZrmSJvEKNg5pKhFwL7jjAxgG8NP8rSY4o=)
3: cgkSjyInxeBAfsrMtADKQej1dQA.roa (hash: NJBBWIxm8P9FWZLPw5DFC5dmcCI2sjb8UDnkU7sydo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:e9:aa:be:50:9d:78:b5:38:61:00:a1:bc:b7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Apr 27 09:01:17 2026 GMT
Not After : Apr 28 09:01:17 2026 GMT
Subject: CN=d2f83e991db83e107848bfb515b44d9a3b552672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:d1:1b:7d:4b:02:84:c2:2f:19:59:01:9e:
cb:77:a6:9f:00:b5:14:cd:9d:c7:64:89:5c:fa:39:
e2:43:f2:b6:41:9d:d6:f9:21:7f:73:91:23:fc:be:
18:49:5f:8f:20:a5:ae:78:03:f8:20:a9:c3:ed:8e:
02:0c:4d:f7:1b:a5:91:24:65:75:6a:8e:26:69:3e:
54:dd:04:c2:bf:5d:33:28:df:a8:b6:e2:bd:05:15:
32:f0:bb:b6:08:b5:c7:51:0b:b0:d6:f9:69:0f:43:
a5:ed:25:ce:6c:c5:0f:9f:28:6c:ef:b0:a9:6e:43:
6e:34:8d:24:5b:1c:a1:ef:72:50:e4:0f:10:69:ae:
6d:ec:02:29:25:ca:2b:5a:46:0a:da:a8:09:12:28:
2c:70:e7:dd:bc:da:ab:5e:a4:09:1d:26:ff:9f:6c:
81:4d:d8:33:8c:50:94:4f:6d:4a:22:c1:77:9b:09:
f2:b6:9a:95:42:e0:99:56:a0:ae:9b:b2:36:77:76:
46:ba:43:b2:e0:96:5f:ce:31:fb:1f:11:89:4a:2b:
5f:6a:0b:2a:a9:b1:8b:5e:e9:65:e4:c0:4e:bd:48:
bd:08:2b:8d:14:31:52:5a:5d:3e:f8:92:12:b6:2b:
e1:12:59:73:75:e2:ae:30:44:78:ec:dd:d1:5e:ef:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F8:3E:99:1D:B8:3E:10:78:48:BF:B5:15:B4:4D:9A:3B:55:26:72
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6e:0e:fe:34:b1:31:91:cf:65:fc:4f:ef:e9:99:bc:7c:c9:
cd:93:27:84:9e:65:d1:23:76:13:3a:57:13:ba:88:32:b2:cd:
2c:2f:a5:41:94:66:81:79:d8:20:24:bd:a6:49:e3:9a:d9:d1:
4f:ad:8e:23:0b:81:23:a1:b7:4a:82:0b:c5:68:df:4d:48:c1:
dc:d8:44:f3:59:4b:69:e2:0b:d7:6a:62:5e:97:44:b9:3d:44:
8c:8a:7b:44:c1:b1:93:69:d5:b0:79:c4:f9:a8:da:84:f2:c9:
34:12:9e:41:c3:b5:ab:49:21:77:78:d3:d2:2b:e2:71:02:84:
87:de:9c:63:56:86:fa:91:54:f1:31:01:61:03:f5:00:8f:84:
8f:c6:02:0e:e6:c2:16:7d:4e:e2:73:bc:5d:ba:44:6f:ae:df:
ad:a3:bd:fa:7c:95:d7:8e:a6:c2:11:6e:43:68:cc:8f:50:63:
4a:01:7c:99:93:41:c9:57:fa:93:1c:9b:06:c8:29:fc:91:45:
d3:8c:82:59:5c:9e:1e:92:86:50:22:61:38:7b:9a:24:4c:b8:
26:b9:15:4b:c7:9e:3d:c9:46:46:86:5b:3e:a0:b9:4a:38:a8:
f3:33:16:45:37:39:a4:52:79:6a:60:9e:77:7f:3e:de:94:23:
9e:4e:36:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:28:23 2026 by rpki-client