Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: SmcoTy6NAI0x4G8AXkVA943KhNV3iQ5v9XaTg9IP8X0=
Subject key identifier: FA:33:89:CF:EA:DF:06:01:21:8F:26:65:26:F1:E6:12:4B:38:7B:AD
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 019DCD873C8FDC505E8577F87130C86B9A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 162F
Signing time: Mon 27 Apr 2026 06:01:25 +0000
Manifest this update: Mon 27 Apr 2026 06:01:25 +0000
Manifest next update: Tue 28 Apr 2026 06:01:25 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: OwGtLJwIdggGWKRbJ/8MlZ+Vl+7y5y6NkN7yN/Dr8NE=)
2: ZFPsdpNLJ5l0WxKp0MW2ehft5Vc.roa (hash: 9gNaT5xTEshkzEjpFa3J0fv6CbE+hBJqY5VddI2BOX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:3c:8f:dc:50:5e:85:77:f8:71:30:c8:6b:9a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Apr 27 06:01:25 2026 GMT
Not After : Apr 28 06:01:25 2026 GMT
Subject: CN=fa3389cfeadf0601218f266526f1e6124b387bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:97:98:8e:4b:c6:64:c6:5f:e4:01:9e:0e:9e:
2c:95:da:f0:e0:ad:6b:c4:51:a2:7c:c2:b2:91:08:
3f:de:96:dc:77:fc:ca:e5:6b:91:b8:7f:a4:a7:03:
69:e9:94:06:f0:df:10:43:d8:c2:5b:4d:5f:29:52:
7b:10:82:20:d1:04:59:f8:84:d8:ba:0f:77:1e:ed:
89:c3:79:c6:38:0f:be:da:4c:d0:02:f0:14:9d:fa:
81:85:a9:c5:ae:47:1d:02:0c:3f:da:7c:f2:3a:b1:
1a:79:00:a8:b7:5e:8f:95:f6:f1:01:56:86:46:ab:
05:f6:45:06:3e:cb:41:84:d1:d4:1d:ba:59:b8:7e:
5a:11:9d:b5:db:ff:8d:3a:9e:a9:b7:43:ad:c3:b5:
3e:d1:a2:71:bb:be:41:f1:ae:e9:8f:64:c7:14:df:
b5:33:a9:9a:36:72:32:f8:a2:a3:53:9b:83:1a:b6:
ce:af:a1:a8:dc:11:53:1c:f9:73:de:9e:45:ec:1d:
27:db:84:8b:f0:68:de:b8:67:1f:a2:01:ea:ff:18:
63:21:28:32:d9:69:f5:ea:14:06:c6:26:42:c5:b1:
44:aa:f4:c5:2d:fd:ab:e4:b1:ef:b4:e5:d6:c8:f9:
57:65:d2:0b:bf:70:df:17:47:a7:9e:b9:45:c9:05:
84:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:33:89:CF:EA:DF:06:01:21:8F:26:65:26:F1:E6:12:4B:38:7B:AD
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e9:e6:cb:ec:07:b2:ce:5a:83:2c:ee:e1:3f:aa:17:a8:65:
7e:6a:0c:a4:a1:c9:e1:d5:a7:c2:0c:46:ab:ca:df:98:d8:dc:
29:6a:52:6a:99:0a:59:e8:94:b3:3f:2c:89:28:2d:63:03:c6:
38:ba:cb:c4:73:a8:f3:04:8b:d8:cd:e8:38:cf:ac:bc:b6:9f:
53:38:9f:cd:2f:c5:94:21:f5:ae:70:19:fa:55:c8:9e:71:1b:
49:f2:a6:4a:dc:d9:77:b0:b0:c0:83:3f:6f:ef:37:12:0c:26:
b0:64:42:04:d2:c6:29:4e:72:9a:44:51:76:55:2a:36:d0:8d:
db:82:18:c9:28:7c:31:c9:e5:8a:18:59:d0:7c:04:af:4e:63:
04:93:f9:07:58:42:ef:1d:75:12:ac:5d:cc:f6:1c:ec:ad:82:
b2:de:f9:53:ec:eb:9c:dd:7f:ad:5a:5d:99:98:6c:31:f0:04:
8a:0e:e3:78:24:24:6e:e6:aa:df:a5:5b:72:11:52:24:c8:75:
8e:10:d6:09:81:ee:b3:dc:1c:a3:d1:ba:38:3c:a6:68:57:a5:
9c:6d:44:17:0a:f8:44:7b:52:3f:36:aa:63:54:58:4a:5a:33:
8a:78:3a:b8:f5:3d:83:ae:c7:75:14:7c:a8:9f:18:39:35:a6:
31:17:46:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:54:34 2026 by rpki-client