Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
File: p4kEQNrxw6w4dz6FIVES90twYjI.mft (raw, json)
Hash identifier: 4DinHKwccPK17ePwVjTX1Te1JvQC3yAorBz9Fx5lK5A=
Subject key identifier: EC:F3:DD:37:5A:84:5B:36:E8:19:32:EA:83:C0:3B:7F:D0:43:53:09
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 019DCE62F3D627ECD4BDCC35AA9E0E908BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
Manifest number: 94
Signing time: Mon 27 Apr 2026 10:01:24 +0000
Manifest this update: Mon 27 Apr 2026 10:01:24 +0000
Manifest next update: Tue 28 Apr 2026 10:01:24 +0000
Files and hashes: 1: U3lhosWDCWkOpFdsH0InZo3L2So.roa (hash: cA9YSxfYf8puSlmrAh+xgnlh5hfoxYmLxjTNe6lxvv0=)
2: p4kEQNrxw6w4dz6FIVES90twYjI.crl (hash: zZ+voHC4h9Yem8r+AMGVsbh1ElYoojtts1ul2Et/dPg=)
3: rbySto4bwasyCSyfLG3tTaOVj_s.roa (hash: wd1Ap/uduw/P7yoJlzMsKGRJqc4D/dsTIBcvCHP1qZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:f3:d6:27:ec:d4:bd:cc:35:aa:9e:0e:90:8b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: Apr 27 10:01:24 2026 GMT
Not After : Apr 28 10:01:24 2026 GMT
Subject: CN=ecf3dd375a845b36e81932ea83c03b7fd0435309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:27:c0:23:a8:79:5b:12:b6:dc:7a:4c:db:
15:5c:f8:2c:a0:1b:fe:44:12:64:ab:13:9a:04:eb:
53:d0:eb:1d:07:9c:c6:dc:e6:ae:df:5f:a4:bf:61:
98:9d:b9:1e:dc:9f:a1:6c:5c:98:66:65:9d:be:5e:
c7:ab:8e:d3:80:27:44:5b:30:8e:a9:c3:a3:89:cf:
e8:0f:8a:aa:66:b0:68:dc:e2:97:9f:ef:e5:52:45:
c4:78:dc:70:d6:9a:1c:23:93:f8:0e:ac:30:72:1b:
5b:52:8c:11:cf:48:d3:6e:27:cd:f4:cb:bd:1e:72:
fb:4e:cd:82:4f:1c:20:cd:88:6d:68:56:0e:75:87:
09:76:5c:86:a3:1a:2b:69:cb:1c:c3:f5:c4:59:df:
8d:e0:6e:2f:3c:25:2a:38:b5:fb:ef:64:2c:73:ae:
26:65:92:41:11:1e:1e:c3:4c:7b:4f:50:07:45:48:
c1:0a:54:66:14:69:ab:ad:65:3e:33:7a:c6:bd:4e:
41:b9:45:dc:bd:d9:1b:fa:fd:49:b3:05:aa:56:7d:
22:84:47:03:e7:22:e0:ec:f8:a2:44:23:70:f5:7f:
02:c0:b9:1c:a4:3f:0a:1b:27:f9:50:f0:1a:5b:46:
5b:49:0d:49:73:ed:da:58:f8:7e:48:de:c2:2e:a1:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F3:DD:37:5A:84:5B:36:E8:19:32:EA:83:C0:3B:7F:D0:43:53:09
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7c:82:7c:68:d6:a9:62:5f:ca:b5:11:92:97:ad:7a:1e:33:
6d:e5:e1:b5:3d:2a:b2:91:7d:f9:2f:bc:b2:45:6b:96:33:5e:
d2:5e:33:0f:da:51:cb:ae:ec:90:09:da:0e:33:16:18:75:08:
3a:23:44:c6:a5:6e:96:75:4f:25:a8:32:66:57:5b:8d:bd:24:
9a:a1:eb:fb:44:c2:70:55:41:98:65:b2:6d:50:00:8c:bd:95:
a8:ca:f9:53:09:c6:a9:98:75:26:fb:4a:c4:7f:d0:e6:e1:30:
88:f3:9f:8a:12:db:3a:5b:83:2f:fe:b2:12:59:ae:e2:8f:9d:
9d:a7:9d:61:c3:9c:a8:c3:49:75:4e:79:b6:a0:51:d3:80:7e:
0e:69:08:4d:73:9a:c5:ed:d4:c5:10:92:7f:21:21:12:e9:5b:
ac:16:05:74:fc:bf:07:16:62:8a:57:81:7f:50:82:31:85:00:
aa:4c:b9:e1:a5:c7:a9:93:17:5d:3f:1d:ad:5d:d6:25:3d:41:
95:cb:f7:f9:46:03:b5:30:9f:1e:16:6e:50:96:2c:09:5f:54:
15:64:2f:f7:46:f3:57:cc:12:97:f6:f2:8b:5b:b0:c4:36:fa:
31:03:32:88:dc:ef:09:b6:db:ec:c8:ab:64:e8:48:6a:45:0c:
e7:60:a1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:30:55 2026 by rpki-client