Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
File: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json)
Hash identifier: w2xbqjXCi8s+uWzsiCi2LYfNuFvRr5dY2dlN9Gme674=
Subject key identifier: 34:2C:E2:BF:A3:64:7D:63:62:1D:5B:AE:E4:49:DB:B4:54:18:38:DC
Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Certificate serial: 019DCE2B8F52409709443CAC24B077D79C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
Manifest number: 1945
Signing time: Mon 27 Apr 2026 09:00:54 +0000
Manifest this update: Mon 27 Apr 2026 09:00:54 +0000
Manifest next update: Tue 28 Apr 2026 09:00:54 +0000
Files and hashes: 1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: /M7gH7HOw35HGdPkoASZGggvZqHA5fWqrac0ogP6pSU=)
2: 6GUIWwZxGI0_11LUAF2nyD6ApTM.asa (hash: o9hRLFlhcdetNherJ5nziP+ejI2p5Hk/AOSB3fzCgR8=)
3: H1UZSacEO7d9gjFi2CGHiwhdpgU.roa (hash: GQXyeX/p8cD4+ifor6lONtOvB+jbAzlVuGNIHuP4FZs=)
4: JMUe3al0pklathcu47XaPUqkjyY.roa (hash: WrIFwPH2vXkQmPfNJ4EO/lLH8xEpJfsA80i818mNAGc=)
5: MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa (hash: 0p22EPcUlrbZ/XQd/L2Yz+06mVzq0rpNkXwnhd7vOv8=)
6: QPupw3rP2f5Jivi4SxaBbGE6eqM.roa (hash: KP++DGfsZGB7GL9ySK3Y6Xgm2FRgB01XieKkXEEpykk=)
7: lIx0KubEd0NAwKbnWvfavDgfMLw.roa (hash: Z1acY8ho4rEFuqnBBBvS7eEzd1qsRchpuvE7DncwSZE=)
8: ql3vqr1zYIaiPZLR54AHsL7ukAE.roa (hash: NYzCia9uixmAZoiKyWTL4nuIIf69H+HSXVKOLeUMj5c=)
9: yIoTvJJYIR2DNvrmk-NbH6cPask.roa (hash: oUH0ut41s6oEH273QOq+dzXsq0k279TftL1vgV4Jygw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:8f:52:40:97:09:44:3c:ac:24:b0:77:d7:9c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4
Validity
Not Before: Apr 27 09:00:54 2026 GMT
Not After : Apr 28 09:00:54 2026 GMT
Subject: CN=342ce2bfa3647d63621d5baee449dbb4541838dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:84:9e:72:59:53:81:82:71:0c:15:c9:1f:
b1:7c:53:60:6a:97:f6:8b:ca:f0:8b:a3:d9:4d:cc:
39:ed:d5:e2:10:19:db:37:3b:26:ab:81:36:4b:6e:
a0:85:ab:09:58:ad:72:35:30:15:32:c5:a7:d5:48:
75:b8:4c:86:54:2c:b3:c1:36:0a:4d:b1:c8:d5:4e:
f1:1c:49:93:27:1f:7b:ad:22:33:3a:3d:54:f1:0c:
e6:a2:21:2b:7b:3e:20:d0:d3:06:af:49:bc:15:a4:
68:4b:f7:1c:48:4d:d7:2b:cf:4d:fd:86:e1:37:95:
b5:1f:82:a0:1e:4e:fd:14:d1:7b:98:00:60:ab:9f:
8e:4b:50:66:ee:34:ce:1e:f0:c3:df:75:b8:a9:5c:
9d:c5:c9:b4:b9:ee:9d:bb:d9:76:f1:a1:c8:13:b6:
08:a0:aa:59:36:36:67:dc:0f:58:f2:d7:24:7c:da:
cd:ee:e6:7c:36:1a:2b:bc:ef:9a:ae:d7:92:fc:27:
30:6e:86:c8:92:77:cf:8e:9f:d8:cf:e5:65:40:73:
ab:16:0f:92:84:cd:b7:bc:3a:91:55:07:a6:74:d9:
08:fa:51:6e:54:a2:5c:58:e9:b2:41:a1:ec:c9:cb:
fd:5e:76:6e:73:24:01:34:03:af:8a:fb:88:c2:91:
c9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2C:E2:BF:A3:64:7D:63:62:1D:5B:AE:E4:49:DB:B4:54:18:38:DC
X509v3 Authority Key Identifier:
keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:79:9c:94:9e:46:b3:d6:1f:06:27:4f:24:33:1d:44:3d:21:
31:8f:eb:dd:b4:3f:dd:ef:50:d4:ca:85:ce:f6:d9:22:ac:d2:
0b:78:0f:86:4c:8f:7d:ca:07:b9:2c:c4:4e:21:c2:86:7e:34:
04:e0:b7:00:6f:9f:7a:be:c8:c1:98:92:bc:71:72:75:7d:e3:
5e:57:dd:0d:6d:21:8f:b1:50:46:8d:b0:8b:c9:af:df:25:8a:
27:d4:4e:04:73:da:af:8c:aa:51:b8:bc:bb:f4:5e:ae:13:65:
b0:1e:7e:da:61:18:0f:fb:b8:e0:7b:09:0d:98:98:d9:a6:78:
96:97:26:c8:19:2e:f6:fb:45:5f:e6:85:be:37:23:f5:c8:0c:
ca:18:0e:d5:bc:cc:e0:fd:0e:c8:1b:04:ec:82:bf:01:7f:c6:
df:48:56:38:4d:f5:1c:da:0d:2c:19:21:4a:e0:08:f8:67:02:
4a:a6:b0:48:d5:de:fa:12:ec:18:3a:e6:d4:87:9f:cb:c3:5d:
4a:53:8a:23:9a:bb:6c:f1:8c:5e:a6:00:29:98:92:16:aa:aa:
b0:9f:fc:99:be:de:b2:16:9a:91:ec:f8:00:87:c6:05:07:79:
0d:e9:25:47:e7:a8:b8:86:9d:41:4f:6e:74:e7:90:83:51:ed:
93:9c:8f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:08:59 2026 by rpki-client