Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
File: m4FRrhZKW3grED3n98iolIkyrr8.mft (raw, json)
Hash identifier: kyezakqHvUDbW2u3Bf2JH64kMPtaclvRFh7gQebjz0g=
Subject key identifier: 08:26:B6:7C:98:52:E6:BA:13:09:6A:D1:59:7F:F1:11:4D:B5:31:02
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial: 019DCD4FB80A1316872E4BBDAA0C924F4DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 05:00:46 +0000
Manifest this update: Mon 27 Apr 2026 05:00:46 +0000
Manifest next update: Tue 28 Apr 2026 05:00:46 +0000
Files and hashes: 1: EbW3NvEPl1oV2yNd4gPEWc6IX4k.roa (hash: 6sbRbAzpkVZnbmwGmFls1zgBgBPqZlTzKVvW2qe/0sQ=)
2: m4FRrhZKW3grED3n98iolIkyrr8.crl (hash: amr+9Q0ImocuqXgdk2DNrCNhjfyor1v+gu/BZyQWdr8=)
3: zDQSWzz7tOn5vYrKuzg1MDeiVRo.roa (hash: +xz0fm96upjlrgDEAx1g73R2e8ugBjP0q0ZiamqjzSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:4f:b8:0a:13:16:87:2e:4b:bd:aa:0c:92:4f:4d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Validity
Not Before: Apr 27 05:00:46 2026 GMT
Not After : Apr 28 05:00:46 2026 GMT
Subject: CN=0826b67c9852e6ba13096ad1597ff1114db53102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:a6:94:5a:1f:fd:c9:ef:73:45:6a:6b:46:
1d:0e:29:85:7f:ec:00:ae:32:69:40:5d:a7:d5:ae:
a3:ab:79:f5:88:c6:08:ec:d5:c7:c1:90:d8:4e:43:
bd:ff:ab:99:86:9e:a3:ae:58:62:33:8c:51:ba:31:
64:f7:77:ca:b0:0d:f4:d8:6c:9e:0f:71:9e:2f:f2:
a4:ac:db:85:0d:7f:61:32:24:77:be:e5:f1:dc:ff:
a0:11:96:fa:cc:fe:77:26:0b:49:78:ef:84:ca:49:
c3:53:3a:05:27:55:4e:f0:af:6d:2f:3e:dc:93:4c:
01:1f:13:a4:e2:52:71:94:fb:65:1f:8d:ee:e4:00:
2a:2e:be:5a:d2:24:37:9f:03:cc:c1:2a:79:af:88:
1c:e3:ee:c7:8b:f1:4c:63:ca:6c:6c:45:55:13:6f:
71:7a:c1:55:0b:92:b6:98:49:02:b7:50:16:77:1c:
75:9d:cb:fa:11:ac:12:55:87:63:2c:b1:9e:12:bd:
4a:f1:dc:36:23:a3:78:53:47:14:55:17:ac:11:94:
5e:8a:e4:d3:7d:2c:cb:6f:c8:98:8c:29:e0:08:f5:
24:37:95:d9:6d:ce:d9:ae:81:2b:f4:3b:1b:97:1d:
39:11:19:06:1e:5e:9b:8a:d3:5c:c9:61:22:43:29:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:26:B6:7C:98:52:E6:BA:13:09:6A:D1:59:7F:F1:11:4D:B5:31:02
X509v3 Authority Key Identifier:
keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:41:d6:66:14:3b:f0:9c:8f:c9:d2:c2:18:97:55:be:39:b3:
8d:f3:78:33:aa:ea:7f:85:f6:60:02:26:61:5d:e3:5f:94:2f:
d6:4f:5f:5b:c3:d9:fa:7d:91:96:42:7b:bf:c3:24:62:ff:c5:
eb:fe:84:6b:fd:08:ae:96:47:14:fc:b7:1f:4c:26:7c:39:7b:
91:c9:a6:ee:a6:e3:7b:49:1c:d6:9e:c7:63:8f:c3:5c:8d:47:
4b:20:21:2b:00:fd:c9:bd:c9:80:54:45:e9:1f:6a:92:62:76:
f1:19:30:e6:cf:79:cc:47:66:28:b4:e7:f6:63:2c:7e:1d:e8:
07:92:be:74:a4:da:f7:4c:1e:1c:15:07:60:da:ae:2b:b0:b5:
56:84:12:f9:9a:90:21:1a:6f:32:a6:30:56:9d:b6:29:92:73:
d4:d3:49:46:f9:f2:50:73:a2:5e:25:93:51:04:9e:0e:aa:0e:
7b:65:36:ac:9a:c3:82:16:36:80:3d:b5:a8:fe:06:5f:81:a0:
5c:c1:e0:9d:7c:88:00:b7:34:5f:f0:42:ac:90:09:79:f8:07:
7d:0c:1d:38:c3:88:b5:0e:1a:b5:3d:8f:59:ad:6b:e6:c9:b5:
16:2d:08:c5:c9:6a:df:32:fc:55:1e:ae:09:a8:6e:24:e1:38:
7c:09:a4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:13 2026 by rpki-client