Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: KXCGWdyiMpAR14vvHBA2C/EjKqfyJ+Vpc6gjxiQPi0o=
Subject key identifier: 81:0E:4E:66:C9:E9:BD:E9:56:0A:F8:2F:78:A7:11:92:1B:E2:4B:B1
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 019DD019C8DC8FCFBDA50200D7B5D9451E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 17AF
Signing time: Mon 27 Apr 2026 18:00:43 +0000
Manifest this update: Mon 27 Apr 2026 18:00:43 +0000
Manifest next update: Tue 28 Apr 2026 18:00:43 +0000
Files and hashes: 1: 1_xba5d5cbirhQ2s_z8_1tiC0PA.roa (hash: Bfsy6ICU1Mj8KS3Ard+cJzbdeC4klrQoTK7qG8jjB4g=)
2: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: 1iQOZos/Ot43yjaOOXgo2d23PUv6icAexoaDNHT+g7A=)
3: mGPgYFI0a87W2xPkMo1Inw-FNM8.roa (hash: dR0boNIbJAGAYCT8YMYIsJDWFR4gMtz1D9GMelmMhUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:c8:dc:8f:cf:bd:a5:02:00:d7:b5:d9:45:1e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Apr 27 18:00:43 2026 GMT
Not After : Apr 28 18:00:43 2026 GMT
Subject: CN=810e4e66c9e9bde9560af82f78a711921be24bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:90:50:e3:cf:79:fb:e1:79:07:9b:9b:51:
96:11:8b:51:3c:e2:ed:fd:10:f1:50:1f:44:e1:de:
2f:03:0b:4c:15:12:f8:dd:f6:ea:90:c9:5f:8e:e1:
19:27:85:09:92:0f:d9:ec:f4:f9:9b:2c:8b:32:d6:
ab:4a:94:e6:3c:ec:ec:62:60:e2:de:8b:d1:8f:be:
fc:34:6b:00:81:5d:22:0c:78:2f:5f:d6:84:a8:7c:
a2:f3:53:86:8c:bb:2a:46:6b:43:84:5b:a6:ef:a1:
fb:84:4a:2f:65:04:91:dc:10:c2:96:02:6a:53:38:
07:1d:36:d6:52:d0:e1:09:55:2c:b0:8b:ef:05:ce:
71:8f:61:1a:70:7b:fd:c1:87:30:6f:3e:5d:9f:9f:
02:8e:3f:1d:3b:b3:21:00:46:2a:97:d5:c2:cd:9f:
20:b2:be:95:85:ba:62:d2:28:1e:25:dd:96:e1:52:
b4:80:8c:79:61:18:3d:e9:71:73:22:42:ee:d8:20:
35:1a:0a:b0:65:8f:ae:e0:9f:f5:fc:9d:db:c1:6b:
bc:f1:3d:48:dd:52:7e:50:37:c9:18:71:4c:17:f8:
52:04:54:05:58:d7:51:4f:05:49:b6:a4:0e:c4:f7:
2e:98:1b:44:08:c2:fc:b3:f3:82:8e:f0:08:e3:fe:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0E:4E:66:C9:E9:BD:E9:56:0A:F8:2F:78:A7:11:92:1B:E2:4B:B1
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9b:a2:f7:c9:97:7f:b7:f2:86:c0:78:95:e3:2e:6f:5a:5d:
5b:5b:96:25:34:f9:c2:17:44:26:f8:d1:5c:32:d6:e8:37:55:
f8:05:b0:47:24:1a:76:9d:8e:82:de:00:a3:9c:b7:e8:65:be:
b6:82:7d:23:13:b8:a6:b7:e0:d8:8b:e5:4d:20:f6:43:c1:40:
c9:ff:7e:1a:b4:3f:9a:84:d4:37:aa:26:4f:a2:52:ab:09:9f:
af:1d:28:59:13:5d:e1:59:e3:4d:d9:f4:10:22:ca:16:21:d0:
ce:be:a8:7f:ed:ff:c6:40:0b:c7:f0:bd:cf:9e:8e:e8:ac:96:
74:8a:48:74:62:86:6e:22:86:59:82:5d:ef:16:74:c5:f7:d9:
c6:ed:34:61:84:5e:5e:d5:24:f1:ec:06:39:62:13:aa:ac:14:
fb:e3:69:d8:83:5c:06:2e:54:8c:e0:28:d9:09:1f:d6:0b:45:
6c:95:ed:02:f3:fb:bc:ce:2f:d9:96:93:d4:bd:a3:e3:40:fd:
6e:7a:32:78:bf:5d:e6:5c:e0:58:3f:32:a8:81:f8:76:33:0a:
1a:d6:1d:fa:21:e2:bd:db:f3:75:b8:64:20:43:c8:aa:cf:81:
67:2e:91:ce:20:80:38:55:44:dd:91:51:40:ff:fd:14:d3:5a:
e5:29:dc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:06:46 2026 by rpki-client