Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: K4+EYr56uWFFl12Sznf2+A/drrhO1+lv1rsLwcqgy+c=
Subject key identifier: 48:D4:52:7B:C7:90:5B:8C:0A:FD:ED:34:11:11:EA:2C:73:49:35:10
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 019DDD67D48D8679FE7E22FB1BB2E0C47AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 18E7
Signing time: Thu 30 Apr 2026 08:01:02 +0000
Manifest this update: Thu 30 Apr 2026 08:01:02 +0000
Manifest next update: Fri 01 May 2026 08:01:02 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: hepjs6z3yM1a9zttCsPeR8qvZqsZVS4YmamQVx+cR78=)
2: BfP2bGOW8HthUfuXXggXfcuAbvE.roa (hash: dmLHFskk9KIm4+573JvglcI2K8WR/PAM7m+/RW2L1vs=)
3: Gqd_X9Cp3EkyhF_XljM8cJVBjSo.asa (hash: J5j3yc/QFcGihvZazzwI8F9VHttAgOTYUiy+DL6NbuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:67:d4:8d:86:79:fe:7e:22:fb:1b:b2:e0:c4:7a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: Apr 30 08:01:02 2026 GMT
Not After : May 1 08:01:02 2026 GMT
Subject: CN=48d4527bc7905b8c0afded341111ea2c73493510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:5f:08:52:e5:e0:a7:a5:92:e8:a6:44:63:
dd:12:f3:fe:31:8d:8d:e5:b8:2b:f9:ca:17:d0:39:
bb:a2:ee:78:77:d1:80:d5:cb:93:c0:57:6d:28:0c:
c4:80:be:3b:47:1c:d2:36:2a:6c:c8:a0:3c:6e:db:
6e:37:d0:46:58:6e:b3:3b:64:cb:58:fa:3c:b9:b1:
d8:e3:00:0c:10:18:71:1e:89:56:50:c6:1f:2e:d6:
9e:90:71:59:12:bd:ef:5f:f5:bc:d4:0f:ef:1c:db:
2e:54:4a:13:c1:5d:32:e5:bf:fc:18:b7:b4:ab:81:
07:d5:22:c9:a9:cf:45:69:eb:60:0d:bd:e9:0a:4c:
5e:5e:59:3c:d7:fc:32:1a:6c:c1:b6:a8:ca:54:cd:
ca:7b:78:ee:27:1e:a9:9a:e7:3b:76:91:34:42:cb:
23:93:67:92:4c:47:a9:fd:93:8e:06:60:31:55:91:
ea:2d:11:7f:90:38:71:46:ca:05:bf:ca:f7:ed:e6:
49:3a:62:01:39:5b:79:9f:c3:a9:8c:30:e5:b2:20:
0a:91:b1:fe:ca:07:dd:d4:5f:be:36:57:82:35:66:
01:43:cf:26:05:38:4e:55:d6:72:2a:d4:dc:9e:66:
04:96:ac:e4:a5:4d:cb:d4:72:0b:4b:a5:3e:e9:38:
69:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D4:52:7B:C7:90:5B:8C:0A:FD:ED:34:11:11:EA:2C:73:49:35:10
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:36:cd:45:87:aa:d1:ee:91:f6:66:79:93:9c:23:5f:ac:57:
70:9c:b5:c5:98:d2:7d:9f:a7:ab:4c:d6:2e:54:39:d1:e7:79:
b4:c4:94:61:ce:cf:c4:1e:a7:96:98:1b:8c:3e:ba:89:32:5f:
da:86:73:a4:62:fd:2f:e0:70:91:52:42:04:dd:c5:96:e4:de:
67:f2:ad:a9:f5:86:7a:ad:28:53:40:c7:24:e1:f6:b9:a1:a4:
d9:05:75:50:b1:76:12:1f:ef:4b:25:e4:c6:8f:91:10:dd:5e:
5c:35:7a:95:6e:a6:f1:7c:41:e7:e7:4e:4d:f6:5b:b8:d5:f7:
2a:63:86:d3:e1:1b:e7:ad:da:e4:0c:09:f9:0a:01:e7:5f:5a:
f1:22:ce:51:db:87:2e:86:30:84:14:d9:b7:cf:a5:2b:65:6f:
1c:e5:a3:58:8f:de:0a:b3:57:d4:bd:94:1a:2f:32:fb:f2:11:
60:50:cb:ca:82:44:41:4a:1f:b2:d8:a2:d5:af:02:11:b4:07:
76:fd:96:c2:b8:21:72:f7:1b:ea:c9:d2:c6:e3:ee:48:89:ae:
7b:28:a7:5a:2a:cd:eb:28:54:fa:a4:a1:b1:58:69:9e:1f:4f:
40:df:8c:69:c9:de:92:53:86:3b:47:45:48:e1:61:48:71:17:
cb:6b:c3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:52:02 2026 by rpki-client