Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
File: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft (raw, json)
Hash identifier: nRYNMMsah4r2W8T+oBjv1OA2/uj2Iwd4+VcknnZd17k=
Subject key identifier: 81:C8:1C:5A:B2:0E:56:51:75:A0:B6:79:38:93:0A:F3:1A:F0:68:EC
Authority key identifier: E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
Certificate issuer: /CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Certificate serial: 019DCF3E39A42D8341AC09A45557155A8660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
Manifest number: 82
Signing time: Mon 27 Apr 2026 14:00:54 +0000
Manifest this update: Mon 27 Apr 2026 14:00:54 +0000
Manifest next update: Tue 28 Apr 2026 14:00:54 +0000
Files and hashes: 1: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl (hash: Hp6ZTfXGvIvsYhEmQuTA14VDEAikHuZO2713GUQyaHA=)
2: x9acHITrBbqOx2e9ypYS952QsxQ.roa (hash: b6zhtsIkjF/mT1JMxCSolgKQVZ0ngXMbV1MvghbUubE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:39:a4:2d:83:41:ac:09:a4:55:57:15:5a:86:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Validity
Not Before: Apr 27 14:00:54 2026 GMT
Not After : Apr 28 14:00:54 2026 GMT
Subject: CN=81c81c5ab20e565175a0b67938930af31af068ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:04:2b:8b:50:04:b6:ce:e5:a3:0a:fa:97:
d8:ef:ff:65:92:33:01:0e:4c:61:af:4b:db:be:af:
bf:e8:b1:c0:fe:c8:b8:fc:03:92:e1:75:c6:80:4c:
97:9c:a6:05:8a:dd:c3:e0:42:a1:20:70:bf:84:24:
19:44:1b:e0:51:df:ca:7f:19:a3:22:84:3b:f5:2d:
51:31:0e:a3:d2:bb:86:57:99:9e:1f:22:63:59:4b:
f8:cc:62:4f:e2:01:fc:4f:b3:2d:13:02:62:df:aa:
b1:93:64:14:b2:fb:35:a7:79:5c:fe:da:bc:64:98:
e0:8b:b6:8e:dc:ff:71:a2:c4:25:96:6b:e2:d8:83:
a5:b1:a8:f9:4e:70:dc:c4:a4:e7:22:34:2c:fe:5f:
0f:02:28:b9:32:07:d2:39:16:a8:66:79:19:07:1e:
5b:3d:9b:f3:4c:31:ef:31:d6:c8:0f:c4:a5:c3:cc:
aa:35:e7:6e:e0:22:70:d9:7e:7a:08:53:04:de:19:
3e:36:17:c7:2f:1e:a7:17:fc:0b:9d:82:76:6d:57:
2d:7d:dd:52:36:ba:c5:8d:fb:95:ec:b6:9e:18:2b:
d1:dc:d2:60:5f:79:36:ea:76:3f:a7:e6:2b:70:44:
74:71:b8:a7:27:f9:20:dc:51:10:d4:b7:01:22:e7:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C8:1C:5A:B2:0E:56:51:75:A0:B6:79:38:93:0A:F3:1A:F0:68:EC
X509v3 Authority Key Identifier:
keyid:E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:75:30:ca:83:31:08:98:f0:7d:09:d5:f4:f3:2d:00:1b:2a:
31:5b:77:1a:4b:6b:e2:bc:4f:ee:c2:82:28:57:9c:d5:b7:74:
ae:5b:f5:f0:6d:d4:b4:dd:74:00:22:b9:f6:b7:85:e9:c9:ae:
38:a2:29:d7:af:33:8d:94:76:9b:7f:66:70:48:30:38:97:3f:
ce:b2:2d:10:fd:d5:2a:07:11:5a:af:db:79:a5:42:32:05:ef:
7c:89:a4:06:2b:20:f9:8c:1c:10:97:35:b4:1a:a0:9b:00:87:
d7:8b:e7:dd:ea:25:2e:7e:a7:5b:5e:47:8a:ce:5c:7b:7b:da:
c0:53:3e:68:97:6d:f8:d1:c3:02:93:75:4a:c1:82:6e:84:16:
75:e4:3c:f2:8c:0c:51:09:7a:83:c4:7a:61:54:51:1b:ba:47:
46:7d:81:62:b9:a8:90:61:52:23:77:de:0e:f0:60:29:b5:1d:
c0:44:47:e3:29:d5:01:06:2e:b9:be:4e:b4:bd:03:cf:f8:40:
06:06:77:10:d1:51:9f:da:db:51:63:3f:6f:ec:29:02:02:fe:
66:42:34:e9:df:68:47:5e:5d:c0:bb:d9:0d:8f:91:bd:01:d2:
70:75:6c:c7:4c:ff:eb:9c:3e:2b:50:d7:6d:e9:05:a7:7e:64:
89:18:7f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:48:46 2026 by rpki-client