Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier: G3pdk44OKuLc4U6zmxLzNgRrTtKjappwzvsOldgUM7w=
Subject key identifier: 50:F2:DC:05:9A:3F:EE:92:41:03:85:6E:E9:F5:98:33:A3:E3:F7:9B
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial: 019DCE62DE136C13D18D3AC42017F0829D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number: 18EF
Signing time: Mon 27 Apr 2026 10:01:18 +0000
Manifest this update: Mon 27 Apr 2026 10:01:18 +0000
Manifest next update: Tue 28 Apr 2026 10:01:18 +0000
Files and hashes: 1: 1-nIDHjjDOfK0qkT3T38aF1CybZo.roa (hash: wfNaZ1sAvLj/BXad973SBMXYEOp2AK12GK1yxn0qtHA=)
2: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: R3TanXi3wrVwk9wemnAFczvC6kJ8Wi4L/1K5QYKdn28=)
3: 7cNt7nS6Ga02pEEvUGwXFcclfa4.roa (hash: IhtCXpz8Ziv5ADSE80GH1TqeWkIm73cJMRq8OxzR0jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:de:13:6c:13:d1:8d:3a:c4:20:17:f0:82:9d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Validity
Not Before: Apr 27 10:01:18 2026 GMT
Not After : Apr 28 10:01:18 2026 GMT
Subject: CN=50f2dc059a3fee924103856ee9f59833a3e3f79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:f4:5e:a8:66:ce:4b:85:a6:21:21:9b:5d:
77:c2:11:08:b3:2f:9e:34:5e:2e:5a:dd:82:cd:61:
c3:36:c8:f9:24:6e:b3:19:28:76:e9:44:c1:06:48:
11:11:4c:52:6c:36:39:09:13:16:8e:99:64:06:90:
1b:80:f7:07:74:99:73:2a:7b:bc:25:b9:5b:5d:bf:
95:0d:64:da:78:dc:92:cb:e1:ab:a9:f7:86:bf:dd:
9f:c2:0c:80:d1:9b:a3:5c:40:7f:a8:9b:94:89:fb:
bc:96:ae:5e:c8:f8:89:91:2d:ae:dc:13:da:0a:9c:
80:40:90:4b:9e:80:05:d5:70:ca:61:19:b9:b0:5b:
1f:7e:9e:0d:af:5c:7e:5d:48:70:bd:35:48:91:55:
03:f9:f3:d3:19:90:c5:bd:10:c0:87:db:20:d5:67:
a9:22:a4:a7:84:9b:f2:93:81:30:3a:3f:d7:cb:e6:
66:43:01:57:bb:ae:dd:2e:cf:fd:d1:15:9b:2c:27:
52:c7:05:f0:db:25:9f:35:0a:ff:dc:6c:4c:81:4e:
f4:f0:ab:fb:51:52:c5:2d:ad:c2:d3:ca:83:e4:e9:
df:30:ca:7d:d7:c0:86:b3:08:77:de:ac:2f:62:02:
ae:4a:ff:f0:11:59:18:eb:a8:cd:74:a8:a5:a9:5e:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F2:DC:05:9A:3F:EE:92:41:03:85:6E:E9:F5:98:33:A3:E3:F7:9B
X509v3 Authority Key Identifier:
keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7f:b5:71:61:5d:07:3d:19:f9:2c:61:e1:6f:5a:a4:81:c7:
62:8e:5e:ae:ac:26:3a:62:ce:bc:db:d5:6b:a0:ec:22:d0:e9:
41:95:82:45:d6:67:6a:f8:2a:e4:fa:6e:d9:73:da:43:34:ba:
8f:0c:49:d2:79:e1:ea:e0:26:55:ce:96:5d:37:11:e7:66:ba:
a8:51:46:4e:b4:fa:22:5e:ed:e7:35:c3:6e:fc:a1:5d:22:55:
d9:a1:46:8e:d7:35:2a:a9:9a:53:6c:77:65:e1:c5:9a:f1:88:
8c:a8:fb:b3:16:97:5f:15:03:07:fe:4d:35:c4:54:7a:06:64:
06:c2:e4:76:79:a4:7e:ac:63:aa:6f:a9:db:7d:db:cf:ed:82:
d1:39:44:4a:b0:45:95:de:2a:6a:e2:2e:4b:33:11:a0:c6:06:
6d:d7:b5:02:fb:89:ce:03:32:23:a7:12:b8:42:db:0c:ca:3f:
0e:4e:25:02:6f:73:fe:4d:b8:20:c5:9d:c2:85:a6:d0:67:ea:
b1:6b:7d:32:c5:68:c0:8e:df:25:f3:93:5b:c9:9e:f2:5d:96:
2d:33:75:a2:c2:54:f3:bc:1a:65:f6:3f:fe:cb:8f:02:18:c9:
36:34:99:dd:a4:25:a5:17:79:6f:5d:fe:ca:20:9d:68:8d:a2:
7f:2e:ed:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:44 2026 by rpki-client