Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json)
Hash identifier: uKKvhEuGiNJXPMqKsCbHVIy4VvZlX2XXoHGZ5hvk8iE=
Subject key identifier: 8A:02:CB:3D:7B:B5:2D:DE:D9:17:74:69:20:A5:8E:F5:B4:9C:A6:00
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial: 019DCBCF6890579102607EEAFB92A8E97262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
Manifest number: 0B91
Signing time: Sun 26 Apr 2026 22:01:00 +0000
Manifest this update: Sun 26 Apr 2026 22:01:00 +0000
Manifest next update: Mon 27 Apr 2026 22:01:00 +0000
Files and hashes: 1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: qHX4HbtTKR9ywrRxIt1VdRxPgeBVCASvI5lyLMNaXp8=)
2: YTHqy1jXNV7dNzrAO_RbGYRTCcA.roa (hash: zJ9iDYD1yuxkbyK8khRTA4UqxwT49qevZssCV62H0OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cb:cf:68:90:57:91:02:60:7e:ea:fb:92:a8:e9:72:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Validity
Not Before: Apr 26 22:01:00 2026 GMT
Not After : Apr 27 22:01:00 2026 GMT
Subject: CN=8a02cb3d7bb52dded917746920a58ef5b49ca600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:c9:84:86:02:68:d9:a5:b2:66:aa:f0:00:
34:4e:df:57:91:76:ee:47:4c:e1:b2:d4:58:c6:3b:
ad:00:53:6d:34:ef:84:2c:98:8d:a9:72:8d:ee:2e:
4b:a8:a8:48:bd:ba:07:67:9f:06:8a:98:a8:34:5e:
36:b4:33:f9:bc:83:42:b6:40:b3:6e:75:97:8f:ab:
4c:86:c9:f8:73:d2:05:87:59:d7:fd:a2:19:2b:fc:
5f:1d:3f:7d:02:b9:8b:54:03:2e:9a:24:82:a6:ac:
90:9d:02:42:51:71:63:69:a2:01:5e:8c:ef:d0:13:
6e:06:78:2e:3e:26:87:df:3c:1b:72:b2:e6:fd:ef:
53:e4:27:e7:1c:1d:e2:19:88:40:cc:6e:35:7b:8e:
7c:94:f7:32:0b:a0:b9:85:b2:86:39:93:d9:df:d9:
f5:8b:04:5b:5a:88:db:76:9e:e6:a2:e3:22:a8:6a:
f9:17:d6:33:5e:d7:15:14:db:38:9d:11:75:e4:67:
be:a2:71:48:2c:34:29:a3:dc:12:c6:77:b0:5c:d9:
71:c1:a5:f7:58:54:93:96:63:2d:c9:5e:b3:a7:10:
89:8d:0a:3d:c4:80:fb:14:08:58:93:63:d6:83:af:
18:5a:ef:c9:42:5d:23:c5:1a:1d:99:a0:3d:8d:c2:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:02:CB:3D:7B:B5:2D:DE:D9:17:74:69:20:A5:8E:F5:B4:9C:A6:00
X509v3 Authority Key Identifier:
keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3a:63:6d:3a:c9:8f:38:69:6d:e7:29:e9:f0:85:21:5a:22:
a1:5c:45:22:32:e6:24:2d:71:00:98:db:b7:7b:6e:38:26:3a:
e6:91:cc:2c:1b:aa:0a:7e:d3:a9:6a:2d:a3:28:e7:5c:af:9f:
09:da:86:7d:32:69:77:84:55:10:7e:b6:33:d0:99:78:9f:9c:
c0:0d:82:a3:c1:3a:3f:af:d2:ee:87:0b:8a:ad:ab:3c:d2:1e:
85:f2:9d:1c:54:31:5f:93:82:e4:b0:11:56:95:b9:38:3a:67:
1d:e9:97:4a:27:3f:1b:b5:d9:1b:7e:de:a0:98:a8:3e:8f:bb:
6d:3a:5b:e9:34:40:df:f1:64:c9:cb:e2:46:86:25:e7:97:31:
fd:e8:b9:6c:30:e5:26:53:9e:84:bd:af:e4:01:cd:03:fe:2f:
80:78:2e:e9:56:0c:35:69:02:9b:5f:ef:9e:d4:8c:d5:56:ba:
d0:c0:a5:92:6a:6d:06:a5:eb:a6:70:1b:c8:29:37:1c:ae:5b:
55:78:94:95:7f:38:44:1a:97:d6:09:e6:c4:e4:aa:7f:db:70:
aa:05:dc:dd:8a:75:20:8c:2e:f4:0e:b3:a2:f7:56:4e:6e:bf:
cf:b2:3a:fc:0b:ee:57:a7:8c:82:d4:56:44:70:a5:69:a5:cb:
62:57:4e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 05:22:52 2026 by rpki-client