Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
File: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json)
Hash identifier: 6NtY9LeOxymqNnIB1x6yXRE96eUoaz+8/LrfAatoBp0=
Subject key identifier: 3C:CC:FD:45:9D:0C:43:4D:B3:D6:4B:AC:E0:A5:50:73:7D:7B:04:73
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 019DA152A643EAA7AC2863213C7F35C87544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
Manifest number: 09C5
Signing time: Sat 18 Apr 2026 16:00:41 +0000
Manifest this update: Sat 18 Apr 2026 16:00:41 +0000
Manifest next update: Sun 19 Apr 2026 16:00:41 +0000
Files and hashes: 1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: 1HhxLae4Lk+R/GHixiBT7ZTJaBVDOsX2mwe29oTnEJI=)
2: iJ2dkGge62Vh8toLziz4BBDFsIU.roa (hash: FGUiRuQcTHwY2x/0lhI9Cq7axh0DNfE+YZZ6Pi8PjoE=)
3: yi1fK_-RnGIR53EDaGJ-NbFb4cw.roa (hash: 8qVvUWprWEP3+o1dHxaz8tb18/xPwq5gKAudzTrXXEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:52:a6:43:ea:a7:ac:28:63:21:3c:7f:35:c8:75:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Apr 18 16:00:41 2026 GMT
Not After : Apr 19 16:00:41 2026 GMT
Subject: CN=3cccfd459d0c434db3d64bace0a550737d7b0473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:a6:f4:c6:b3:da:30:d4:f8:93:e7:b9:27:
51:df:a6:53:a9:38:97:30:38:af:db:72:e7:be:33:
1d:c1:b2:b9:a5:c6:bb:d6:70:0b:ea:37:ca:8f:41:
96:f5:71:31:78:52:8c:e3:fb:9d:e1:7d:96:f9:1a:
be:28:fe:37:d7:f2:d4:18:5b:df:56:67:93:79:8f:
e0:ec:e5:c4:03:80:ae:9f:86:61:8a:8f:2c:90:dd:
ee:78:0a:c3:e0:6d:8b:cc:95:8d:6c:f0:d7:62:c1:
34:6e:69:ca:6b:6b:1c:c0:d1:17:33:18:4d:e6:00:
28:1a:ca:c3:eb:9e:7b:8a:40:bf:1e:08:e4:a4:a4:
21:c4:84:99:ff:0a:24:07:c9:57:bf:45:e7:a6:2b:
7d:c3:5f:f3:1e:4b:6f:d5:f1:4d:fb:1f:cb:f8:b2:
07:d2:95:2f:46:d5:ab:5b:95:71:73:07:f8:26:22:
cb:f9:1d:e7:2d:8b:4a:1b:d2:b1:5f:46:69:a3:f0:
9b:67:98:78:d0:f3:a1:c6:8b:83:51:cc:69:cb:d5:
72:78:e9:02:9f:f1:52:5c:f7:9d:61:cf:43:a8:ea:
9f:02:8d:d5:76:77:9b:bf:08:18:62:74:6f:aa:23:
cd:79:db:73:a3:14:75:fe:63:76:d9:e5:50:b9:aa:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CC:FD:45:9D:0C:43:4D:B3:D6:4B:AC:E0:A5:50:73:7D:7B:04:73
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3b:6d:b9:0c:85:fe:b8:5d:cd:dc:86:71:de:b1:be:66:06:
a2:1a:f8:19:20:42:a1:1c:17:98:91:da:b3:88:1c:cb:d8:26:
dc:c6:5c:cf:ae:df:c3:89:f0:72:74:95:82:26:9d:4a:53:c9:
76:30:21:14:fb:03:4c:8a:30:67:e4:88:26:a6:d1:96:43:3b:
1c:d7:ef:9a:ac:0b:8c:95:e5:59:3d:b5:d9:ef:f1:70:39:d0:
cc:d7:f8:ed:38:5c:d3:05:68:bd:17:dc:9f:79:b9:51:d0:56:
80:68:cc:88:6d:ab:d8:b6:db:c0:b5:7d:42:e7:02:dc:26:2d:
f9:8b:05:fc:08:89:a9:9f:1d:02:5d:90:cc:5a:ec:f2:2e:38:
6b:f6:29:a0:ee:a7:11:ff:5e:7e:a3:40:cb:b7:fb:22:80:44:
04:0c:af:bd:10:0d:e3:9b:99:11:f5:b5:c1:20:4d:03:5e:93:
ee:66:9c:73:50:aa:f9:51:f2:33:c9:da:96:63:f8:9b:34:7c:
1e:bf:28:94:9e:15:8d:e5:ea:aa:da:21:66:9d:20:3a:d0:cd:
4a:c6:b2:d5:d9:60:bb:07:6d:63:f5:1e:04:5d:4f:af:16:d7:
6b:9f:e2:b6:c0:d4:1e:a0:94:f1:22:fd:82:67:8d:4c:05:6d:
4a:f9:4c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 19:39:53 2026 by rpki-client