Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
File: g4fa4eZQhWzIVx5GLr2evrZccDg.mft (raw, json)
Hash identifier: g/fUWKF+yUmBbTH6PLWmt3Nuy7bCYC9cLoEWtQGwZak=
Subject key identifier: 33:B4:BC:90:C5:F2:8F:40:B9:4F:83:64:8C:EA:DA:6B:E2:58:10:A6
Authority key identifier: 83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
Certificate issuer: /CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Certificate serial: 019DCED0446F4DA54468DC0AB33D6E827D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
Manifest number: 18DA
Signing time: Mon 27 Apr 2026 12:00:48 +0000
Manifest this update: Mon 27 Apr 2026 12:00:48 +0000
Manifest next update: Tue 28 Apr 2026 12:00:48 +0000
Files and hashes: 1: g4fa4eZQhWzIVx5GLr2evrZccDg.crl (hash: dkTMVY26DOIOlmyOVyAvgq5WPBH9J15dNY2w4nwlWcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:44:6f:4d:a5:44:68:dc:0a:b3:3d:6e:82:7d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Validity
Not Before: Apr 27 12:00:48 2026 GMT
Not After : Apr 28 12:00:48 2026 GMT
Subject: CN=33b4bc90c5f28f40b94f83648ceada6be25810a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:97:ca:98:2a:ee:24:a4:08:04:b6:1e:7e:
fe:09:60:09:d0:2d:a8:1a:ec:5c:a7:db:dd:ed:b8:
49:4b:52:26:fb:08:1e:da:26:b0:8c:7d:7a:cd:4f:
bd:d7:66:aa:02:8d:6e:13:11:3d:6d:48:e2:10:0f:
75:cd:23:99:e2:ee:3f:57:a6:99:9b:d5:c1:54:9b:
94:6d:ec:c3:70:99:4c:bf:5a:8b:52:4e:6c:16:9f:
dc:8d:69:16:36:7e:74:49:f3:4c:dc:43:2f:e5:09:
3f:4a:26:79:8e:84:97:e9:e1:96:de:c0:99:8b:e9:
78:09:65:00:25:19:30:db:d0:6a:dd:66:18:f2:55:
d9:9d:33:dd:e3:b5:5d:d7:d4:69:fc:34:b1:ab:3a:
52:ff:80:6f:59:e1:d5:fd:d1:02:aa:0f:ce:d5:0d:
aa:0a:56:ee:3f:74:5d:96:46:dd:2c:09:93:c1:ba:
06:6d:00:82:3a:7d:55:13:16:96:eb:77:ec:ef:dc:
82:f2:8d:66:30:1d:04:ec:e3:e4:b4:54:1d:a3:48:
45:c3:8c:d6:ac:59:71:21:29:87:14:79:f5:0b:8e:
0f:4d:c6:ee:c7:35:8d:7a:57:2a:99:90:b6:ac:11:
f4:f9:7a:07:f4:d4:a4:4d:1b:d1:f1:ae:9d:25:c4:
09:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B4:BC:90:C5:F2:8F:40:B9:4F:83:64:8C:EA:DA:6B:E2:58:10:A6
X509v3 Authority Key Identifier:
keyid:83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:96:71:82:d0:26:80:96:d3:c0:49:d5:7b:63:e8:56:d1:6f:
5f:df:f8:7a:80:ba:65:66:2a:71:12:1f:e1:a3:30:23:2f:5a:
aa:6f:79:3c:e3:ea:ab:09:8f:b3:19:6f:27:49:23:ac:64:26:
fa:98:e0:53:e4:09:7c:42:a5:56:9b:d2:12:ae:85:01:fd:ef:
70:4a:80:53:82:54:bc:a8:fe:a3:b1:42:bc:8e:69:37:fd:bc:
71:ef:da:21:f1:66:ea:01:b4:b6:e5:97:e2:b2:14:5c:71:aa:
bd:23:2c:15:cf:a9:30:01:d4:90:9a:f8:f0:e7:5c:39:83:5f:
4f:81:05:20:94:70:de:a7:88:9d:f6:55:95:d7:4a:22:17:95:
33:7a:a5:d6:fb:aa:df:08:44:36:6a:6c:cb:a3:c4:fd:ac:e0:
9d:96:63:2d:12:f2:10:b4:d6:f3:4c:77:07:7a:2b:51:a9:d7:
41:a8:76:dc:6e:70:50:76:db:e6:0e:9a:15:2f:e1:8b:23:26:
dc:1b:41:10:8d:5e:08:d2:fa:8a:ef:d0:4e:a3:b0:b4:3b:a5:
32:15:bb:87:29:74:43:d0:8a:36:86:3c:3d:e6:1f:09:4a:ea:
38:15:b6:20:1f:33:24:d0:d5:08:cd:9a:20:97:17:bf:65:c8:
09:f2:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:03:20 2026 by rpki-client