Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier: 6ib5iy40sWUkRyxMO/g2E/SoV5t+p2NzsospKxzGBM8=
Subject key identifier: 8A:64:DB:E5:3A:4E:9B:6B:7A:2D:14:E1:A3:A5:B2:2F:D9:59:C5:63
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial: 019DD087FC3EF8A99F7AF106C4AD9D67A15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number: 1475
Signing time: Mon 27 Apr 2026 20:01:05 +0000
Manifest this update: Mon 27 Apr 2026 20:01:05 +0000
Manifest next update: Tue 28 Apr 2026 20:01:05 +0000
Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: BPOylPEIO2CSTuWgU4P3Qex8V/rR2fYxADbUl6vy6Ww=)
2: Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa (hash: QNb3CvjoOXufsYPkEn/ZOrzMSuEn5o0O6f8GFs+m4Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:fc:3e:f8:a9:9f:7a:f1:06:c4:ad:9d:67:a1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Validity
Not Before: Apr 27 20:01:05 2026 GMT
Not After : Apr 28 20:01:05 2026 GMT
Subject: CN=8a64dbe53a4e9b6b7a2d14e1a3a5b22fd959c563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:e3:6f:4e:ac:0a:c9:cb:71:d1:70:e0:89:
be:4d:0b:11:1e:59:19:43:e8:c4:13:d2:bf:65:f2:
01:bd:1d:3d:2e:ce:fd:36:f4:b9:dc:b8:48:8b:45:
84:d1:dc:dd:97:e9:ad:68:ec:49:7a:2f:b8:d4:a7:
ae:f7:1a:1b:69:03:3c:71:08:2f:4f:0f:57:1c:1e:
e3:e4:dd:95:9b:62:50:52:b6:eb:85:75:da:1c:d9:
25:2c:25:b0:e8:a6:f4:af:c3:85:dc:3c:14:6d:42:
b8:08:9a:ae:8f:6e:42:5f:a8:ce:d7:ff:e6:be:e7:
15:f1:0f:d9:57:60:68:67:73:d3:64:7e:67:49:d3:
5a:f0:60:b6:75:3b:ca:d6:66:da:8d:ce:e9:18:9c:
cc:6e:58:3a:65:9b:f1:ad:31:d7:eb:a2:43:7d:05:
20:74:6a:96:f4:d2:c8:68:6b:f2:3b:95:47:62:ba:
d0:bd:b7:b6:39:ab:63:26:2f:d7:60:7b:be:88:2c:
8d:3c:1b:67:ac:91:32:7e:33:3c:59:d6:ef:23:d8:
85:c5:eb:82:ef:70:cd:ed:4a:89:36:0d:6a:25:e3:
44:0d:60:27:b9:8c:49:55:51:53:cc:78:cb:02:cb:
31:d7:25:40:5f:15:96:aa:71:d5:b4:11:00:66:37:
eb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:64:DB:E5:3A:4E:9B:6B:7A:2D:14:E1:A3:A5:B2:2F:D9:59:C5:63
X509v3 Authority Key Identifier:
keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:92:0d:7b:22:6b:da:c1:b4:8d:ae:bd:2c:9c:77:6f:8a:b2:
aa:8c:b3:06:42:4d:e0:81:2d:43:ee:56:a1:82:5c:e5:6f:9b:
1e:47:6b:60:bb:d8:44:60:bf:e8:ff:e3:a1:c4:a9:d7:d4:28:
41:c0:4d:ae:e4:80:30:b5:b9:f2:e8:09:5d:7b:ed:88:dd:dc:
b8:00:58:cf:af:5d:93:6a:6b:bf:1b:35:6f:20:28:9d:b7:c6:
52:a1:c4:0f:10:c1:f3:81:78:51:ff:f6:de:57:17:6b:b0:15:
3d:2b:01:d3:ca:a8:6b:ee:e2:b1:b6:79:ee:74:a2:e0:60:2f:
2d:05:ca:6d:91:06:34:8b:33:90:0c:2e:11:28:6d:8a:aa:68:
03:98:1e:b2:43:54:20:7f:fa:2c:f4:3e:29:16:5a:bb:8f:d7:
14:b3:f0:47:c0:c5:2c:cb:80:f4:77:8c:12:91:90:d6:f0:de:
7b:d7:cc:9d:87:ad:56:f1:8e:4d:ae:4e:52:17:56:74:a9:26:
3c:c1:5f:16:42:76:df:18:c1:c1:75:76:16:25:e1:87:3e:c9:
c6:aa:8c:6c:73:44:dc:8e:83:c4:d2:6d:4b:b8:b0:0a:e6:48:
af:80:62:e5:1c:c8:84:9b:b9:b2:f0:cc:41:36:3d:e1:81:a3:
09:e5:25:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:53:41 2026 by rpki-client