Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: ak6uAb7QZunfFBTXGO6eyRr0ixyGp9iBbsaaPUmL850=
Subject key identifier: 4B:65:4D:4A:A4:20:72:B8:4B:3F:57:FE:79:9C:FF:9D:42:48:C5:ED
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 019DCED08ED07F8CF29F113A1DB0C844146F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 06EB
Signing time: Mon 27 Apr 2026 12:01:07 +0000
Manifest this update: Mon 27 Apr 2026 12:01:07 +0000
Manifest next update: Tue 28 Apr 2026 12:01:07 +0000
Files and hashes: 1: FyBdBnnCpKvwLLKFiribJRB37w4.roa (hash: 5DLx1xDcX045/FKz8VI0Qh7oVFbB+uzkeft+z/1uHvI=)
2: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: X5U68JteZCt5ekvDOs5BSQ6VNKBFBlXxNun9duA0UkE=)
3: TkBggeEIG38cTqgeQZJyjYdfERw.roa (hash: TVtGwEq6QFTLzR+0I1131Dy7n+e87d5rFxxyq5eLPbY=)
4: WEVqV3-Rp-d0LXAX2D5pD9lVyK4.roa (hash: /YFcmAE3f+SI8C115sE0xgY4yWWtCJhMHzRULYVE/Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:8e:d0:7f:8c:f2:9f:11:3a:1d:b0:c8:44:14:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Apr 27 12:01:07 2026 GMT
Not After : Apr 28 12:01:07 2026 GMT
Subject: CN=4b654d4aa42072b84b3f57fe799cff9d4248c5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:b9:b2:d8:16:8f:17:5e:2e:b2:d1:4a:89:
04:e6:b4:5a:df:03:25:c2:f5:54:8d:e7:dc:dd:1c:
ce:14:92:09:bc:68:13:0f:f4:29:ec:ea:b0:3a:42:
bd:a4:d9:c8:cf:08:6a:8e:6a:5f:18:f0:a3:6a:2d:
cc:3c:78:48:bd:1b:f0:81:a1:2a:6c:a5:68:a7:b7:
04:e0:95:62:50:6d:45:33:83:fd:aa:3a:4a:1b:9d:
ea:36:7d:40:a2:7c:b4:45:bc:e3:f9:42:b6:8f:94:
c6:a4:ae:0b:59:57:18:8c:71:8d:41:a8:fa:94:10:
5b:24:c6:66:be:67:40:88:94:c7:a7:42:dc:5f:5d:
b3:2e:a7:84:e9:0a:86:19:77:98:20:ff:cd:2a:6c:
e0:96:81:1a:77:91:cf:9a:85:9c:59:b9:9c:de:10:
6f:d3:6d:73:3a:8c:9a:1c:64:37:72:3d:2b:6c:4e:
08:26:c0:02:01:90:52:b9:d5:06:3f:2f:a2:b5:5d:
09:97:62:c7:07:b9:c3:1f:c4:8d:65:97:4c:f8:eb:
f8:a9:a9:3f:75:ae:bf:02:18:8b:7d:f3:e3:d8:39:
a9:0c:b0:b8:d5:0f:fa:38:e7:37:79:a2:5e:be:1d:
a3:a6:05:b0:0f:df:8a:26:21:bc:be:ec:30:24:47:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:65:4D:4A:A4:20:72:B8:4B:3F:57:FE:79:9C:FF:9D:42:48:C5:ED
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:57:34:cb:3a:55:4d:c6:32:16:f1:21:ef:5d:ff:ab:36:ea:
4a:65:ce:4e:6e:9c:f5:39:4c:96:5b:c5:aa:96:27:52:2f:fe:
c0:18:40:2e:74:16:9e:c4:34:d4:15:7f:a5:9f:d5:5b:1e:ea:
f7:8e:cf:6f:7e:23:9a:3d:91:2c:20:4b:23:d6:ae:23:39:47:
83:d0:aa:ac:50:ab:38:67:c4:ea:c7:56:da:ba:c2:1e:e7:ce:
59:19:36:2e:85:74:35:3c:ee:d6:96:a0:e4:d1:43:aa:3b:92:
e7:2d:8e:97:0b:b0:50:c9:1d:db:72:8e:48:70:22:7d:1b:c2:
d9:64:d2:47:d7:4c:c7:78:c2:26:9c:41:5d:bc:be:0a:4c:56:
0e:3d:62:df:58:10:5a:5b:39:44:ae:8e:ca:bf:87:69:ff:ee:
cd:51:f8:1f:ea:d1:0f:1a:28:2d:a3:bb:65:1f:0d:64:53:e8:
73:e6:cd:98:e4:e1:79:28:dc:af:b9:f9:6f:28:60:15:85:92:
be:af:9b:62:23:d1:62:5a:83:96:c3:68:37:0e:77:37:d7:34:
71:89:97:09:80:34:50:d8:ad:fc:67:3c:6a:28:98:7a:3a:f3:
01:79:1e:f8:dc:8b:c4:21:40:97:04:2f:a8:d1:3f:66:11:77:
8c:8f:8e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:41:04 2026 by rpki-client