Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: 09zn78Mfzn8Jr0gXLKymAFeiUx0+3hC9yVeTeOcnvSs=
Subject key identifier: F6:60:7D:EF:3A:18:18:2F:7A:BB:AA:FB:7F:CE:F8:87:63:AA:69:3E
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 019DCE992B9F2E86E8931BB45C8E9CAF0480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 16ED
Signing time: Mon 27 Apr 2026 11:00:37 +0000
Manifest this update: Mon 27 Apr 2026 11:00:37 +0000
Manifest next update: Tue 28 Apr 2026 11:00:37 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: 7dagNmvXn/Eu9G6z88aWxdig74bNHyB4tdgS2gnGFHs=)
2: E582u3b_wirr6G_w4u9uogz74z8.roa (hash: 81B6PrtCWAN/tZ4dAD4doQginsu0czWU20EU6ygqMqw=)
3: XzHwdc8CnV6b37aUuwbB9K5aCVg.roa (hash: Ajp8GTPxK9A3C7R9uHBAngG8he1JSPPWTWmru9BuMHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:2b:9f:2e:86:e8:93:1b:b4:5c:8e:9c:af:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Apr 27 11:00:37 2026 GMT
Not After : Apr 28 11:00:37 2026 GMT
Subject: CN=f6607def3a18182f7abbaafb7fcef88763aa693e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:2c:be:d8:f8:4e:3a:91:13:78:b0:b8:b5:
dd:35:01:18:45:5c:4f:a6:4b:9e:6e:d9:26:1d:68:
9e:7f:71:71:cd:52:90:e8:b7:9f:f5:d9:08:c9:80:
ff:49:61:d4:87:89:48:45:58:11:9e:43:22:99:e3:
68:ba:66:0c:2f:68:a8:34:76:78:1f:48:b7:5b:7f:
7f:71:75:61:ec:12:34:27:ab:a9:9f:a9:84:8a:d0:
2d:88:10:3a:a6:28:98:d4:29:ef:66:c4:62:39:6e:
c0:64:ec:4f:a9:9b:6e:e8:b6:9c:f5:08:28:ac:d0:
ca:89:a3:96:e0:f7:0e:06:20:e2:4e:74:f1:6b:29:
1c:c7:0f:92:23:ae:87:1b:1a:5e:a5:c7:bc:04:09:
ae:1d:ab:02:22:0e:f4:06:10:67:40:ab:43:17:27:
7e:7f:d3:38:82:a8:17:9c:b2:d3:ad:69:9e:45:39:
b1:a9:1a:1d:cd:88:c4:8b:ef:ab:c9:b4:f3:ff:6b:
52:5c:6c:bb:62:ea:51:3f:75:3a:99:d3:ce:1e:7c:
00:49:4c:32:93:74:99:ea:fb:d2:e4:5a:14:b0:6d:
28:25:76:ea:9c:c1:c0:c5:a5:99:5e:2b:83:c5:1c:
9f:72:f6:b5:e3:98:ec:93:fe:7d:37:a0:ae:8d:6b:
2b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:60:7D:EF:3A:18:18:2F:7A:BB:AA:FB:7F:CE:F8:87:63:AA:69:3E
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:98:b4:ab:6f:b2:15:10:dc:7b:72:05:cc:a4:53:e3:9c:a9:
7f:b2:16:c0:13:93:23:86:94:c1:e6:0f:37:6e:12:d9:70:05:
62:59:eb:e2:21:d7:bd:94:46:1e:14:57:2f:25:d9:39:09:e9:
c5:fa:49:20:c6:49:fb:29:b4:0b:76:7b:85:69:69:ef:59:ea:
1d:2e:14:e9:f1:c1:3a:83:83:08:40:22:03:2e:7f:a0:56:84:
e9:d0:69:91:7f:39:82:51:d8:e7:51:e0:00:4e:43:2d:9a:6b:
15:30:e4:96:6b:75:00:3a:f0:64:d9:58:db:74:fb:56:48:f0:
6d:aa:c8:b5:43:bc:36:85:b0:60:a5:d1:87:3b:53:a9:60:94:
1f:4d:ed:7a:63:65:61:90:2f:b9:c2:5b:36:82:86:52:14:04:
70:76:2e:b3:c2:bb:15:69:74:5d:3e:8e:21:a0:17:ce:e8:55:
6e:ae:20:36:53:57:99:6b:21:a4:3e:59:07:a4:70:33:65:31:
8c:5f:bd:af:5d:8f:be:fa:d4:1d:09:8f:52:11:ec:0c:a6:3d:
96:7a:53:50:27:49:10:c6:41:12:0e:7b:03:00:e5:75:45:9f:
05:67:c5:57:58:38:d0:ce:93:97:04:89:14:c6:a6:22:44:a4:
1d:eb:b3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:38 2026 by rpki-client