Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: Gj94ZeZosrMEKD1I1bGVAkZYt1xEe5I0eEiYXvA2KBI=
Subject key identifier: E0:51:E7:97:64:66:3F:1C:66:26:E9:F4:B9:FB:62:38:38:D1:E1:AD
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 019DD9C2487BA209793416B38DA34ACAEB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 0FF1
Signing time: Wed 29 Apr 2026 15:01:21 +0000
Manifest this update: Wed 29 Apr 2026 15:01:21 +0000
Manifest next update: Thu 30 Apr 2026 15:01:21 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: DuYCS6Qt6cT5LmyvOfwM69QooGP0giUWbXAMhmyYkB4=)
2: C2p4m5oAHBR4b9U98n94_vKEpDw.roa (hash: k7x5kSsiwndiFj3n5RLjj9QM21o5JvrjtmVJtRBC0sk=)
3: _Swl5gHDR66TZCO_pkS1vQ9SqpA.roa (hash: 3hG7Kqg7tej55cxB4vcGvkTLY6M+LbT5b2wG9YFhS4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:c2:48:7b:a2:09:79:34:16:b3:8d:a3:4a:ca:eb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Apr 29 15:01:21 2026 GMT
Not After : Apr 30 15:01:21 2026 GMT
Subject: CN=e051e79764663f1c6626e9f4b9fb623838d1e1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:c5:f9:15:18:50:b3:66:be:fb:a4:05:a7:
c2:97:ef:91:62:2e:64:84:c1:e5:c4:3d:3b:82:0d:
71:5b:94:47:f3:70:a1:5a:e9:1f:93:72:c0:71:b8:
ae:81:c0:91:36:77:4b:6d:4d:b6:8f:23:73:0f:d9:
1d:94:b3:91:54:57:60:c0:97:d6:7d:c4:d6:a4:9d:
20:75:5b:ef:48:cb:19:cd:ea:6d:5d:0c:88:47:6c:
19:92:f0:bc:fa:23:bc:cd:bd:1e:8d:46:e4:10:62:
2f:39:e0:29:fc:1a:95:cb:26:a9:5d:98:4b:33:9c:
48:57:c5:ce:bb:5d:03:7a:65:fa:96:c4:46:d8:6f:
96:fc:fb:06:29:1f:be:86:36:98:82:aa:d3:10:f7:
fc:70:c1:20:5f:17:8b:61:16:7d:4b:db:d2:bc:8a:
0b:7f:06:af:a3:91:87:a8:c5:2f:63:64:0d:ce:a7:
4a:98:74:13:8d:f4:5a:90:06:29:83:0b:57:a3:2d:
4a:81:e1:5d:55:09:5d:c8:d7:53:5b:ee:7a:64:83:
8d:08:f9:01:24:7c:a7:1d:8b:4e:63:84:24:2e:22:
d8:1b:2b:bb:bb:af:b1:2f:b3:51:28:6d:0a:fd:50:
b9:a8:fc:72:8e:e8:ca:01:c0:82:79:de:43:d9:f1:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:51:E7:97:64:66:3F:1C:66:26:E9:F4:B9:FB:62:38:38:D1:E1:AD
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:76:cc:14:a4:6a:d5:39:da:43:80:97:ec:cd:b3:cf:b2:26:
2c:6d:d5:e9:3f:67:c1:d4:58:76:a4:01:5b:8a:e5:02:3e:2a:
0d:1c:ee:fc:23:e3:42:0f:4e:2b:18:09:d7:e5:f5:1a:8a:1c:
19:78:5d:c7:9c:90:ba:53:ca:3a:48:a1:d6:de:b0:86:46:ce:
ed:b2:d7:c8:5a:c3:9a:e7:79:42:59:9e:27:0e:43:9d:e9:cf:
84:a5:dd:ee:ca:89:92:0c:8c:13:9a:23:01:d5:f5:d4:1a:aa:
ec:20:95:bf:db:94:cb:23:cf:91:d8:95:99:03:0b:32:21:72:
8b:74:d2:1e:ad:74:cc:1f:ff:f7:ec:d5:a5:d0:de:de:d4:2b:
fb:a7:3a:fd:68:3c:77:30:04:90:5c:54:e2:15:79:b5:e2:77:
aa:4d:39:1e:18:a9:9c:2f:6c:a6:29:d9:d3:b9:90:14:d1:f1:
20:a2:28:55:08:ea:06:7a:8c:04:05:e1:b7:ef:84:86:09:05:
33:49:ae:d3:92:66:9f:65:85:77:dc:62:4f:09:aa:55:00:51:
5c:bb:49:9e:7f:8d:63:0c:ab:1a:8f:85:7f:81:e5:e7:f7:af:
67:99:8c:79:cc:b4:bd:bd:d6:ab:73:ce:c8:17:e0:b6:a2:6b:
dd:bd:02:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 00:12:35 2026 by rpki-client