Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: yOn0QSvBEZMF+7jpOKKRCdkXRmXaCZEkCJjuFQSzzF8=
Subject key identifier: E0:D7:82:81:36:F7:75:CC:AB:94:C1:8F:FA:2C:EF:1C:51:7E:56:C9
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 019DA78C3A0A0117FB5411C2815C64B47638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 0F6A
Signing time: Sun 19 Apr 2026 21:01:17 +0000
Manifest this update: Sun 19 Apr 2026 21:01:17 +0000
Manifest next update: Mon 20 Apr 2026 21:01:17 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: Gx+fjOVP+dPWVV7YEndK5Nq62BYhSmCDbTkynML2GLs=)
2: BNM6KeFql-Ydq8vGXlt0w78-LM4.roa (hash: oiMAtbZ/3lDs7unsOpMUR0rJkCLWv1SgFkYJBCnCeLQ=)
3: tBScmKuEM3CY-0j6UOJC8exaQRY.roa (hash: 9gJqYwprFzWOCPewHOcv/LCR44zjyS1oQM6ha0bacY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:8c:3a:0a:01:17:fb:54:11:c2:81:5c:64:b4:76:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Apr 19 21:01:17 2026 GMT
Not After : Apr 20 21:01:17 2026 GMT
Subject: CN=e0d7828136f775ccab94c18ffa2cef1c517e56c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:e0:7f:7e:64:fd:a4:f9:ee:f3:76:a2:8c:
63:7d:75:76:c6:39:5f:1e:a4:8b:dd:22:4a:33:ea:
30:91:aa:85:f6:22:5a:1a:c2:fe:bc:db:42:52:5c:
50:1f:83:bb:35:d3:f8:d5:8d:31:40:9d:7b:07:d7:
d3:70:39:da:c3:e5:90:a6:8b:05:0a:0e:91:0f:12:
b7:d5:89:8f:3d:c2:6b:6c:15:1b:12:ec:9f:fc:6e:
0d:88:9f:69:46:8f:18:71:4b:ae:29:ee:20:8f:92:
90:16:47:0a:14:2e:95:bd:27:e1:7d:6e:18:b5:bf:
3c:ac:ec:55:54:99:d7:96:91:01:e7:3c:b5:49:ab:
4e:81:31:2d:f4:cf:d9:22:5b:9d:3b:5e:13:48:a5:
21:c3:6c:b0:1d:8f:31:b6:33:4b:79:e1:d2:3c:41:
e3:0f:c1:09:60:63:4c:41:a6:39:39:c0:0b:ce:7c:
6c:29:56:5d:be:7a:d7:49:f7:bd:93:43:90:6c:82:
fa:08:02:9c:e3:e9:a1:77:69:8d:ec:b5:28:a4:b2:
b8:e5:d7:2a:6e:87:78:ac:ac:0b:d9:19:46:cc:7e:
6e:b1:93:b0:70:03:25:62:cf:a4:e2:fa:e5:73:8b:
66:cd:d2:c3:a5:ee:50:f3:e0:4e:42:25:fe:c9:f7:
9d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D7:82:81:36:F7:75:CC:AB:94:C1:8F:FA:2C:EF:1C:51:7E:56:C9
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f8:5e:a1:1a:2e:ac:ee:b5:93:d5:eb:e4:f6:de:92:ae:a9:
c3:7a:8a:d9:0c:86:a2:d9:2a:b1:65:96:b5:ac:fd:ac:43:9a:
5a:0f:de:6e:57:db:5c:c8:c2:74:d1:02:26:9d:1f:6e:cc:cf:
2c:1c:7c:db:89:93:5f:30:67:dd:ac:69:00:f9:a9:0b:50:cf:
df:2f:25:ac:fd:81:7d:b7:ab:28:6c:2a:43:3c:8d:f4:f1:d6:
28:ce:fe:98:c2:c6:50:dd:4c:67:63:80:8f:95:9c:e4:77:17:
5f:f8:a8:a4:dd:83:ae:0c:89:80:72:ca:f1:75:47:b5:28:7d:
23:76:dc:e0:78:ae:ab:86:ea:8a:f5:d3:30:55:d8:0c:14:3c:
b6:fc:a1:f3:f5:bc:3c:ab:84:83:b8:47:2c:2e:77:52:b5:81:
2b:09:92:60:2f:82:68:00:ce:4f:48:04:80:cd:f5:1a:35:50:
c2:3a:3e:f6:53:c6:19:2d:fa:af:dd:8b:2b:6f:24:ad:f2:80:
37:6e:3a:e4:8d:66:ac:9d:cb:75:24:80:3f:0c:d0:84:b7:3b:
58:d5:22:ab:c6:22:52:8d:cf:ba:d2:d1:36:5d:a5:85:e9:91:
93:ed:fc:17:a1:10:ef:4c:93:23:bd:a9:c2:34:1f:81:39:21:
4b:58:35:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:27:16 2026 by rpki-client