Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
File: 4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json)
Hash identifier: q5JzCSWZDrqNOYW8drPICwwX4+OuQsI3WLdzROJmdwQ=
Subject key identifier: FA:09:DF:0E:43:E7:13:08:73:A8:60:B5:1E:B9:E8:FD:22:B1:A3:AA
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Certificate issuer: /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial: 019DA94354ED9E883EA1FE27828C734C26B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
Manifest number: 0F60
Signing time: Mon 20 Apr 2026 05:00:55 +0000
Manifest this update: Mon 20 Apr 2026 05:00:55 +0000
Manifest next update: Tue 21 Apr 2026 05:00:55 +0000
Files and hashes: 1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: s9vvtIFhV0rvLUgJ2gafWRoWGg0NpibrhEnm95CDp5A=)
2: DXNfK9iDbAyacvGKo8OhC8gh6Ws.roa (hash: ie8rWldwV9B67n5/EffGRxDtlu39UUHKQ/tSe/j67xQ=)
3: OD1vu1xvYZtuVSOWeWsoiRek5JE.roa (hash: wh893NwS229KIBxcphoahE5rVlzAGosMJTAhq3iAiRg=)
4: kpJpjf8DEZUzbeocou67-xPbGzs.roa (hash: 6kfdp9N3WAjBikoQRDTNTZ1g1ptesnrFillaOS+4UCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:43:54:ed:9e:88:3e:a1:fe:27:82:8c:73:4c:26:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
Validity
Not Before: Apr 20 05:00:55 2026 GMT
Not After : Apr 21 05:00:55 2026 GMT
Subject: CN=fa09df0e43e7130873a860b51eb9e8fd22b1a3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:03:ba:b2:fd:ad:b4:91:3c:cc:16:24:eb:
33:49:88:13:a0:ee:8c:9b:61:41:b6:6c:8e:8d:ec:
f0:01:e9:aa:cd:7f:29:82:08:ad:56:77:05:a2:53:
44:d0:3f:bc:38:97:3b:86:ee:86:91:b6:d5:f0:15:
bd:ef:e4:20:2e:52:70:94:5c:64:c7:77:b5:36:32:
af:d1:eb:01:9e:b2:42:38:dc:5b:5c:87:89:3a:1a:
b2:03:a0:a1:43:5c:b3:dc:bd:75:83:e1:a4:88:dc:
f6:0a:01:e9:9e:16:3e:0e:da:b1:4e:76:25:c5:a4:
5c:68:27:07:13:bf:04:c8:5b:16:c8:d4:53:31:78:
ef:6d:a7:85:49:81:28:04:33:30:73:f8:d3:54:e7:
a6:65:1a:61:bc:b2:59:f7:92:2f:0e:a7:cb:b8:cf:
03:d6:e6:cf:a1:05:f2:e7:66:fe:40:62:b2:df:a5:
13:ee:6d:ec:83:97:20:b2:b1:67:c8:89:41:e6:9a:
da:9e:a4:87:76:11:a1:27:bc:e9:d2:41:d3:2d:d1:
b5:41:b0:67:e7:c2:0e:8b:7c:f8:14:37:a1:3a:8b:
28:3e:08:32:f0:1a:44:8d:3e:d0:8a:b2:33:a2:1e:
92:5f:04:ae:e5:dc:9f:05:83:ea:a3:c4:75:37:6b:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:09:DF:0E:43:E7:13:08:73:A8:60:B5:1E:B9:E8:FD:22:B1:A3:AA
X509v3 Authority Key Identifier:
keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:58:d4:b5:5b:22:4f:6f:7a:36:e6:58:bb:c1:78:c1:02:37:
8d:a3:fc:08:92:58:87:94:28:dc:08:c2:0e:7d:e4:4f:c5:0c:
ab:a1:0d:5f:f4:70:af:8e:4a:8a:e4:7a:ef:39:f0:fa:6d:12:
4e:77:2f:93:79:59:94:c3:1e:5c:60:29:ee:5a:e5:fb:2e:08:
3b:31:04:49:3a:e2:2e:89:23:73:e1:27:07:ba:08:46:6a:0d:
49:0e:c9:bc:27:90:b8:84:17:0c:2e:5e:d6:41:9c:40:4d:c9:
bd:d7:25:84:44:55:b6:30:54:03:fe:bc:bb:59:a3:50:47:75:
ac:e7:51:16:52:45:1f:7d:6a:3b:26:04:01:22:4a:0c:c6:02:
d9:9e:25:41:90:a8:d3:a9:9f:50:04:bf:97:ab:38:3e:90:b4:
30:0b:47:b1:9f:b4:5d:33:e1:72:02:be:c2:a3:c5:cc:a2:43:
cc:85:d8:47:5f:ad:81:9b:57:b8:0b:c4:40:7e:c0:81:f8:79:
8d:0e:ad:1d:1f:37:89:46:5f:51:76:03:e7:32:e5:34:7a:fd:
f3:36:6a:fb:49:22:5c:78:03:bb:a0:6d:ac:32:48:76:4a:ac:
b1:9a:dc:43:3b:50:9b:20:5d:ad:86:32:7d:1c:6a:be:44:4a:
45:66:72:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 13:12:16 2026 by rpki-client