Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: boe8Kd5nmwP/WgSmpOJDkCno8ZRDx2Y0rMZKyQ6KdEM=
Subject key identifier: E6:2E:78:47:D8:CF:CF:1E:BF:98:54:1D:33:BD:1B:06:21:12:BE:D2
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 019DD019EB288BA57E326CB540FF1CE8D405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0E4B
Signing time: Mon 27 Apr 2026 18:00:52 +0000
Manifest this update: Mon 27 Apr 2026 18:00:52 +0000
Manifest next update: Tue 28 Apr 2026 18:00:52 +0000
Files and hashes: 1: Eo8KA9T6HD9p4ZSTDc0r_PeW2ik.roa (hash: 6EGWa/823S4j3qzNZzVNi7+aLxh9oMMF178PdW3UF1g=)
2: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: AKn01QZZM55Pcvs3on/m94oU6sPRUMuSQXabYXD3VzA=)
3: uR6qk5DeglUWNbzyA8X_zxBn_Us.roa (hash: 7cX65e6MFwNlQSj+gYDD5WGRNzvo97dTNPuyxMqN7k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:eb:28:8b:a5:7e:32:6c:b5:40:ff:1c:e8:d4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Apr 27 18:00:52 2026 GMT
Not After : Apr 28 18:00:52 2026 GMT
Subject: CN=e62e7847d8cfcf1ebf98541d33bd1b062112bed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:71:9a:6e:fb:06:6f:a8:30:05:ff:e4:e8:
96:de:87:32:73:34:f7:f1:7c:2e:50:78:76:da:68:
17:36:4e:03:ef:b3:7c:fa:27:87:68:d3:85:13:80:
ef:e7:28:c0:f5:8a:5e:69:16:da:00:a2:d8:4f:2a:
87:69:05:5c:03:51:a9:a4:ea:8b:26:ff:c5:0d:ed:
3d:fb:7c:cc:f2:16:fe:27:32:9c:8d:30:e9:c9:49:
34:c6:03:73:ef:0d:7a:3f:52:fc:6d:0a:eb:bf:8c:
be:52:97:b2:33:f6:e8:fd:3d:da:35:d7:c5:13:d5:
e6:61:ec:d1:37:a7:b4:e7:c5:47:6e:d9:01:ac:0d:
8a:17:64:9c:7d:18:21:eb:78:15:75:1d:6c:36:5d:
ac:6c:28:29:7d:a9:68:70:9e:66:c3:9b:84:f5:ae:
61:df:93:1b:aa:e6:4a:f8:d1:fc:1a:db:2b:2e:dc:
4c:34:69:73:1d:bb:ad:88:a9:95:b6:87:3d:4f:98:
d5:37:5e:7c:1d:e8:6e:f2:68:48:57:82:01:bd:2d:
41:f1:eb:77:61:ca:f0:c0:f1:b6:27:14:ee:45:04:
30:47:c1:1d:44:16:a0:93:9d:87:08:45:f0:b7:ce:
22:d0:f7:50:d7:69:ac:24:5d:c0:10:c0:cd:0d:84:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2E:78:47:D8:CF:CF:1E:BF:98:54:1D:33:BD:1B:06:21:12:BE:D2
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a4:3c:f6:9f:aa:30:cc:79:07:4a:93:51:d5:a5:f9:32:21:
5c:24:48:b3:c0:dd:4b:6e:bc:a5:3f:54:08:62:7d:32:0a:48:
56:58:12:fc:05:02:14:c7:00:e2:76:f9:0e:74:e5:b5:66:72:
d0:b9:cc:10:40:1d:60:eb:7c:c5:dc:2c:12:d6:d4:e2:25:96:
7b:26:00:fc:a7:e9:20:2e:2f:51:50:5d:cb:8f:3b:7c:b6:3b:
76:41:13:7b:e9:45:56:26:ae:aa:d0:13:d8:37:76:df:61:19:
03:0a:07:01:47:8b:ec:1f:54:89:bc:c2:4f:98:ff:80:42:09:
fc:98:7d:7a:f1:c9:17:ca:5a:6d:30:7d:32:69:67:84:0f:91:
15:89:42:45:b5:e7:dd:ff:48:39:d3:5b:5b:72:37:87:2a:e3:
72:88:0f:fb:96:24:23:e6:10:da:a6:ea:34:c7:32:ae:c3:77:
67:b9:d6:31:d6:2d:5e:06:fb:6e:bb:b6:84:73:9f:9d:42:d8:
c2:d4:1e:e3:d8:64:d1:5c:68:5e:f8:30:22:2f:89:4b:10:dd:
01:3f:1e:ee:52:2c:c7:b3:04:6a:c7:de:c9:18:80:ae:65:81:
ec:a7:ef:43:85:a8:67:3c:f5:83:0a:21:b3:b7:7a:ce:70:b4:
b9:7b:a0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:52:01 2026 by rpki-client