Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: NvOjKKfEUDjELny7/Qu6KC8ZTiEqR2uxwUyTmKFrbN8=
Subject key identifier: 24:62:95:39:11:28:01:D2:7D:62:FE:53:4E:5C:56:92:7F:A8:7E:27
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 019DCC74D447059CAA55A578156A13F6E945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0F94
Signing time: Mon 27 Apr 2026 01:01:41 +0000
Manifest this update: Mon 27 Apr 2026 01:01:41 +0000
Manifest next update: Tue 28 Apr 2026 01:01:41 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: EUcisFLc808bYZAo7JmW7Q/6jXuo8uXBiY0H3KJd6yU=)
2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:d4:47:05:9c:aa:55:a5:78:15:6a:13:f6:e9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Apr 27 01:01:41 2026 GMT
Not After : Apr 28 01:01:41 2026 GMT
Subject: CN=24629539112801d27d62fe534e5c56927fa87e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:16:19:3e:24:04:97:b7:41:1a:d8:20:7b:
a8:ca:26:2a:a9:18:8c:86:1c:99:09:51:d9:44:dc:
e9:eb:a2:19:13:5c:20:cf:f6:ef:a6:45:8c:af:30:
30:52:5a:ee:b9:26:80:fe:b9:75:b2:ff:54:73:5d:
ae:d8:b6:4d:08:df:09:1b:5d:a7:b8:85:2b:e7:ce:
88:d2:3d:ac:6b:2e:16:0f:e7:3c:12:cc:ba:5a:5e:
84:73:3c:49:64:30:fd:a3:f8:0a:7a:50:9a:9d:e2:
cd:19:35:89:a0:b3:07:12:51:9c:12:80:cd:aa:90:
36:8d:24:e5:0a:46:56:e5:06:2f:ec:ec:b8:51:22:
33:bc:a0:2c:47:c2:67:e6:99:2c:3f:c5:fc:19:e6:
1b:af:da:19:b5:74:5b:35:19:0b:e5:19:52:a2:33:
89:62:81:4d:a9:e5:47:d6:17:60:d6:2d:48:4b:3b:
03:d1:2c:fe:bd:aa:01:9d:f5:f0:c6:da:eb:d4:73:
70:67:27:56:0d:e6:33:89:75:85:27:94:6c:c8:1c:
2c:fa:76:46:a2:61:27:ae:0f:4f:d6:4d:9a:04:67:
22:45:47:8d:e7:d4:7e:ba:04:66:cf:3b:a8:28:1f:
9b:fc:2c:69:03:b3:2f:87:37:22:0e:fa:1a:54:29:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:62:95:39:11:28:01:D2:7D:62:FE:53:4E:5C:56:92:7F:A8:7E:27
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cd:00:6a:ce:b7:1b:3e:3f:0f:1f:8c:2c:5a:fd:8f:1d:da:
9f:c0:92:21:2f:6c:8a:db:22:70:72:28:db:09:78:01:d0:e2:
16:4a:67:ef:00:5d:f5:74:a2:ad:8b:0d:ed:4b:8f:73:f7:75:
41:85:c0:6e:d4:de:90:26:37:3f:e9:b8:04:36:ae:39:fb:b9:
f2:e5:da:d9:ae:20:38:26:d9:39:8d:ff:5b:6a:98:65:4b:d6:
3e:21:da:57:e6:b2:10:df:c2:e6:24:4d:01:d9:04:2f:72:74:
52:7c:81:11:32:44:55:29:c3:e9:8d:3f:30:31:2d:49:67:4a:
de:57:47:d9:8b:c4:8a:b2:7e:bb:1a:fc:2e:7f:75:10:e3:e6:
68:75:80:12:6d:e5:ba:31:8a:cd:ae:1f:8a:ee:8f:10:58:08:
94:34:4d:9e:23:2b:18:1e:1d:fe:2a:01:60:c4:07:5f:9a:5d:
07:c8:8e:9b:be:f1:cf:6d:f6:c6:f4:97:e0:52:d5:eb:16:da:
1c:13:e5:58:e0:89:29:2f:96:2d:bb:91:0c:e0:00:34:7b:4e:
3b:70:f3:08:ce:b9:a0:c9:81:8f:9a:c6:53:1c:7a:e5:62:85:
c3:19:12:ec:5a:81:00:f3:05:c8:04:24:4e:e5:6b:66:81:c6:
ff:5b:0f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:15:32 2026 by rpki-client