
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json)
Hash identifier: 7eyT3T41M6AojuEVv73E0juHGRmXMAMMfAH1f/CC6ko=
Subject key identifier: F6:49:23:8F:A7:48:04:64:3A:20:50:96:9A:E4:32:8A:1F:C0:37:B4
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial: 019DDDD591F46639DC3C87C8945B53035AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
Manifest number: 159E
Signing time: Thu 30 Apr 2026 10:00:54 +0000
Manifest this update: Thu 30 Apr 2026 10:00:54 +0000
Manifest next update: Fri 01 May 2026 10:00:54 +0000
Files and hashes: 1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: Vq9rKExI9GcOCK8qDiUbPN0yJYpq18FCzJ6p+0NoYDw=)
2: fJgYZ4ej2JhPoX-SwafXWVTllE4.roa (hash: oBfl5sq0NvI5C3NZdb3K0ESRoAncOv9TLGKLm+7rmlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d5:91:f4:66:39:dc:3c:87:c8:94:5b:53:03:5a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Validity
Not Before: Apr 30 10:00:54 2026 GMT
Not After : May 1 10:00:54 2026 GMT
Subject: CN=f649238fa74804643a2050969ae4328a1fc037b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:14:46:8e:d8:9e:4e:51:e8:b0:a1:62:d7:
15:57:a1:6c:3c:30:10:91:6e:e7:27:fc:fa:22:fc:
42:8a:f7:05:09:9f:3c:23:e9:29:10:43:c8:14:a3:
4c:a1:2e:22:84:86:59:e0:26:11:b6:2e:9f:d7:e2:
08:62:8a:2a:2c:11:dc:8e:ac:0e:67:43:1a:20:79:
9b:54:f4:b7:ca:99:76:d5:63:89:ab:0f:40:44:89:
66:93:6e:9b:40:60:5d:c7:d6:26:09:20:55:ce:9e:
52:73:71:2c:e4:dd:02:51:ac:14:fe:b8:c9:0b:5b:
05:0e:b1:23:0d:ab:bb:a4:ce:8b:0c:8b:84:cd:7d:
b7:d5:4b:f3:d0:e0:c5:51:b5:3c:e0:e3:23:51:cc:
53:02:9f:79:68:48:9c:7b:3c:ac:e0:e0:d6:22:59:
b6:f7:e3:6f:bd:96:b5:44:b4:3f:30:ff:ba:02:ef:
29:91:a5:aa:7a:f5:f0:f6:45:ed:37:ee:d4:37:2e:
18:9d:6d:d9:72:64:95:f7:0c:39:f4:d4:68:f1:53:
c4:e1:51:60:91:53:9d:62:99:0f:d8:5c:1a:3a:16:
f6:e0:24:8d:ec:62:c2:92:93:7b:40:3c:cd:0c:d0:
31:3d:0b:bd:a1:db:7d:e2:74:1e:32:fc:a6:ce:cf:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:49:23:8F:A7:48:04:64:3A:20:50:96:9A:E4:32:8A:1F:C0:37:B4
X509v3 Authority Key Identifier:
keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:05:eb:80:7d:9f:c3:e2:64:18:68:56:c9:dc:a6:bc:ce:ae:
a7:de:3a:d0:36:e9:f4:3a:0e:e8:37:a4:41:9e:74:03:fa:d1:
37:1f:4e:81:8f:59:37:b5:b1:70:bc:64:51:40:37:d2:97:9f:
76:98:17:22:0c:62:ce:e2:e9:79:01:1f:8a:bf:e9:31:1b:eb:
d0:02:f8:0f:58:86:67:4a:a3:de:b2:b2:4b:c8:cf:b6:7f:67:
34:1f:56:35:6f:a8:8d:de:31:93:63:72:4e:a5:da:bf:55:c8:
3a:37:16:58:ce:4d:35:52:0a:c6:c9:01:75:39:85:2e:b4:c8:
a5:0f:26:e2:db:d4:d4:95:f4:28:a8:31:69:e4:0a:7e:04:1b:
95:cc:51:2e:a4:50:c9:55:81:28:03:c6:27:41:f5:9d:16:f0:
93:7e:b5:c3:19:89:66:d6:36:94:6c:2e:4e:5a:2a:e7:4c:56:
c8:20:45:00:f0:4a:24:e1:03:77:4a:42:d4:79:db:af:f6:0a:
a1:3e:74:cd:75:34:6d:7f:e0:e0:84:06:c5:a4:71:e3:5c:b2:
23:19:72:9a:28:21:23:10:d5:39:8b:98:95:fd:b6:69:9e:61:
bd:7b:49:54:11:70:91:62:25:44:58:a0:db:5d:79:13:73:94:
87:24:e9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:31 2026 by rpki-client