Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
File: 4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json)
Hash identifier: NJbQIfAmDGSZYdA9DVgYKyLNMAi0LqnHOAbv1T/xTls=
Subject key identifier: 2F:A9:D7:2C:A2:82:44:F3:E1:FA:ED:A0:36:EC:60:7E:87:22:CC:65
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Certificate issuer: /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial: 019DA754E8C98B3AA37617A36A3FCC774ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
Manifest number: 0F5F
Signing time: Sun 19 Apr 2026 20:00:52 +0000
Manifest this update: Sun 19 Apr 2026 20:00:52 +0000
Manifest next update: Mon 20 Apr 2026 20:00:52 +0000
Files and hashes: 1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: fXEwWoqLnbuRW1f/Nl25IeK6r4xzVhB0QkfoiA6rp/g=)
2: DXNfK9iDbAyacvGKo8OhC8gh6Ws.roa (hash: ie8rWldwV9B67n5/EffGRxDtlu39UUHKQ/tSe/j67xQ=)
3: OD1vu1xvYZtuVSOWeWsoiRek5JE.roa (hash: wh893NwS229KIBxcphoahE5rVlzAGosMJTAhq3iAiRg=)
4: kpJpjf8DEZUzbeocou67-xPbGzs.roa (hash: 6kfdp9N3WAjBikoQRDTNTZ1g1ptesnrFillaOS+4UCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:54:e8:c9:8b:3a:a3:76:17:a3:6a:3f:cc:77:4e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
Validity
Not Before: Apr 19 20:00:52 2026 GMT
Not After : Apr 20 20:00:52 2026 GMT
Subject: CN=2fa9d72ca28244f3e1faeda036ec607e8722cc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:e3:01:60:82:fb:09:a2:48:4f:68:00:d5:
18:08:53:7f:d1:97:ef:ae:08:cf:c8:45:ec:f1:db:
ce:e6:09:e6:f1:3d:95:c2:1f:a0:37:5f:04:ae:6a:
dc:bf:38:fc:70:02:7f:56:86:20:80:c4:15:08:7b:
99:7f:93:16:34:38:c0:29:52:b7:2c:5f:dc:bc:f4:
72:20:61:65:94:f9:6c:34:ff:cf:87:a4:14:ce:55:
d5:c3:32:40:fd:e0:ae:55:92:c1:e2:a0:cc:4a:8c:
84:9d:3c:ec:61:1d:d6:00:52:6f:54:7a:83:7e:18:
d6:61:af:6a:35:a1:ff:21:39:2f:ff:46:3b:a3:35:
fc:6e:87:47:7a:3c:ef:8e:1d:c1:94:a5:11:1e:e9:
48:ac:4f:d6:26:15:bf:5d:d7:39:30:17:82:82:6d:
56:45:c0:91:b9:3b:cd:ff:54:22:95:cb:83:ac:3d:
6a:fc:16:9c:c1:72:2e:14:74:f5:32:af:64:8d:96:
42:df:57:a8:29:c5:ed:47:e4:24:e3:af:d4:98:cd:
19:4b:a7:74:11:2f:f6:7b:4f:8e:bf:5a:a8:53:37:
00:72:47:4e:ef:28:04:01:07:05:d6:64:90:a4:d9:
b1:45:a2:31:31:21:86:33:4f:06:34:da:26:ca:e5:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A9:D7:2C:A2:82:44:F3:E1:FA:ED:A0:36:EC:60:7E:87:22:CC:65
X509v3 Authority Key Identifier:
keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:fb:87:87:96:18:c9:e5:03:33:54:05:b5:0e:0c:a9:1a:88:
d8:0e:93:89:b0:01:8c:51:9d:a8:33:9a:0a:bb:ed:c7:3f:89:
d8:8d:e9:a8:cd:64:0f:6b:89:d9:70:27:d0:05:a0:4f:9a:9d:
67:bd:a2:de:cb:b1:d0:76:42:00:38:ec:af:7a:2e:73:0f:78:
7a:bb:3c:10:d5:62:6b:9b:5b:40:1e:ce:4d:5a:78:f1:1c:0d:
f3:fe:e7:73:0b:c2:44:94:63:1c:a6:d7:71:95:04:e1:3e:5c:
3b:18:b5:51:36:37:90:ed:41:12:b9:d7:73:49:39:58:d6:15:
09:d9:19:61:9d:e9:01:20:f3:f5:cb:ca:b7:e6:8c:0c:5f:8c:
fd:c8:07:f8:1a:3b:a3:47:d4:b8:a5:75:db:8e:76:94:ff:c4:
4d:e2:8f:39:56:de:40:be:0d:b8:70:ba:52:05:28:93:85:c2:
91:b2:73:2b:6a:20:48:29:78:df:e8:e2:09:df:15:fc:e9:c1:
b3:40:04:c4:23:c0:33:d3:e7:9b:45:f0:98:c4:c7:60:ef:be:
69:3e:a3:23:4d:5f:d3:45:1c:30:31:08:68:14:46:c8:ae:a9:
bb:8e:df:06:6a:da:3c:6e:40:f5:99:aa:95:1b:87:bd:75:51:
69:95:63:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:50:53 2026 by rpki-client