
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
File: tHRnMbQxArluui3l04w9zShLj-Y.mft (raw, json)
Hash identifier: RO7BXgIGCkA0LOJ9Zy8BPr5CgGHSNf+Fx3W+bk3CDL8=
Subject key identifier: C7:BD:A3:69:18:41:8C:4E:7C:25:AD:B8:C0:FC:59:AD:C1:10:B6:A3
Authority key identifier: B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
Certificate issuer: /CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Certificate serial: 019DCD4FFDFE78B23174EF1D915F8F3D9C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
Manifest number: F4
Signing time: Mon 27 Apr 2026 05:01:04 +0000
Manifest this update: Mon 27 Apr 2026 05:01:04 +0000
Manifest next update: Tue 28 Apr 2026 05:01:04 +0000
Files and hashes: 1: fpHEmukzCf8sEZN1-1ROK3M58Hg.roa (hash: VqNpGMHhla64QbrRVajda2AOnqhRXGh5QpCi8IhSSCc=)
2: tHRnMbQxArluui3l04w9zShLj-Y.crl (hash: Im+FyPCB1eVU5vk63ywxVnoDfrE9+Makd1Bfobam9BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:4f:fd:fe:78:b2:31:74:ef:1d:91:5f:8f:3d:9c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Validity
Not Before: Apr 27 05:01:04 2026 GMT
Not After : Apr 28 05:01:04 2026 GMT
Subject: CN=c7bda36918418c4e7c25adb8c0fc59adc110b6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:17:d1:f2:9b:7a:40:15:2b:34:cf:0a:6f:
3c:e5:c5:98:9f:7c:b5:ac:45:c2:0e:b3:9c:12:96:
f4:8f:d6:22:27:e3:4a:14:19:82:7a:50:a2:cc:d3:
67:c6:09:b7:b3:45:b1:d8:7d:a6:48:eb:f5:2c:f1:
6c:d0:44:57:a4:33:a2:85:a3:de:0a:21:4f:90:7e:
59:54:fc:1d:45:00:4d:d3:70:3e:f1:64:33:d2:62:
98:ae:f9:05:de:d5:dc:24:ba:c6:51:9b:d3:a3:df:
2d:79:be:74:f9:a7:9b:f7:2a:53:26:0b:48:2f:20:
15:ac:a3:8c:fb:90:40:4f:d7:ed:7d:cd:f2:73:4c:
19:0c:62:10:23:86:f0:a8:45:ea:a9:f1:10:a1:f8:
cf:3c:08:76:25:04:36:6c:ff:b6:0c:cd:2f:85:77:
67:80:9d:ed:53:83:31:ff:f3:c1:37:bb:a0:d4:a7:
68:dc:fb:af:14:f5:04:1b:11:05:7e:b3:cb:7b:20:
a7:2d:33:b3:28:5d:09:ad:be:9d:dc:98:ff:98:af:
45:0c:44:bc:6a:2d:b9:64:78:3f:3a:d8:05:fe:2d:
b4:00:8d:a7:85:03:c0:56:89:80:15:a2:64:f9:96:
49:79:4e:e9:a6:95:23:18:92:01:96:16:c2:6e:72:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BD:A3:69:18:41:8C:4E:7C:25:AD:B8:C0:FC:59:AD:C1:10:B6:A3
X509v3 Authority Key Identifier:
keyid:B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b3:b5:7d:56:da:c5:df:75:fb:15:94:6f:30:88:04:85:d3:
13:65:c1:aa:6f:2f:d2:26:30:d1:a9:ce:7d:ef:ba:4c:da:3e:
fa:41:cc:3d:cf:be:9d:a8:6e:8c:85:9d:18:05:c5:1d:d0:af:
53:63:60:8a:67:0c:b9:13:f3:48:14:1a:a7:f8:60:0d:40:8b:
3e:17:c4:e9:e4:57:30:89:e3:6b:05:18:d3:dd:d5:db:c2:ce:
db:76:18:60:80:b9:21:b7:5c:75:cb:80:38:b3:44:6a:55:a4:
d0:93:7a:36:e8:04:4d:3f:c0:d6:66:e5:55:3e:ee:ff:c7:9b:
5a:2c:dd:f4:16:ce:16:62:7a:10:e3:bf:5e:79:a6:2f:62:36:
91:f3:dc:aa:d8:9e:a9:16:95:3e:ba:42:b4:27:bc:8f:cb:0d:
a7:55:55:a5:b7:fb:52:43:e3:e9:0e:66:d4:14:fb:25:76:d5:
65:4a:e0:28:bf:d8:72:d4:9f:35:1a:26:56:b8:a0:a8:e4:48:
74:fe:af:05:57:e9:ed:bc:ac:96:8d:da:e6:52:35:14:db:28:
83:69:ae:89:e8:3c:8d:78:5b:d5:ff:69:d4:51:65:fa:a5:98:
9c:36:68:21:60:87:7c:50:e6:fc:3d:fc:4c:02:4f:a1:bc:80:
15:ca:bf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:20:00 2026 by rpki-client