Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
File: 4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft (raw, json)
Hash identifier: jgri/ysO9aWJ1/bn75+8AsOV5O833Qa1c2yE2TKXizc=
Subject key identifier: 52:03:C8:DB:FF:75:14:70:F8:4B:FA:2B:D1:00:DB:E5:E6:0D:D8:90
Authority key identifier: E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C
Certificate issuer: /CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
Certificate serial: 019E1D5947A55ADD55C0331A7F53447F392E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
Manifest number: 0D07
Signing time: Tue 12 May 2026 18:00:50 +0000
Manifest this update: Tue 12 May 2026 18:00:50 +0000
Manifest next update: Wed 13 May 2026 18:00:50 +0000
Files and hashes: 1: 4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl (hash: FFe89G3RfoL9G+TP8K2+m94gSm4K7Pf2nMm5Y6FEs5E=)
2: xdfHz51H2U_drRVl99FgU2CFlPQ.roa (hash: BLDc4xOeEFuPu6EvzSRPfHwGo2Y4vTDZuLs9dGjD79Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:47:a5:5a:dd:55:c0:33:1a:7f:53:44:7f:39:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
Validity
Not Before: May 12 18:00:50 2026 GMT
Not After : May 13 18:00:50 2026 GMT
Subject: CN=5203c8dbff751470f84bfa2bd100dbe5e60dd890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:26:cc:11:f9:cd:f8:7e:9c:eb:97:2b:1f:e2:
f1:44:76:d5:a0:f2:3d:96:3d:30:5a:cc:d3:42:43:
9b:8d:ef:cd:f0:85:90:39:0a:97:8a:d6:eb:e8:53:
91:c8:91:fc:76:74:da:a6:08:d9:b4:73:f9:5b:5a:
d4:6b:e6:36:eb:c1:c7:c2:bf:62:1f:11:00:ca:42:
fa:32:9e:c5:16:33:f6:08:a2:da:44:7e:b5:36:5f:
2f:08:7e:1a:de:0b:21:2d:15:36:e3:11:1c:c8:10:
93:b0:8f:3f:aa:a9:8a:fd:c3:5f:39:be:a4:2c:42:
c3:71:55:a7:65:91:1f:53:92:eb:c8:75:5f:0e:34:
b9:f8:3d:15:71:27:05:0e:d9:ea:a6:4b:d9:1d:66:
6b:9f:d0:fe:16:98:60:be:a4:e3:cd:a7:70:48:89:
21:f2:7d:f2:60:4c:ef:fc:78:94:49:15:dc:8b:f3:
38:a2:ad:5d:0b:41:f2:d8:78:42:49:cd:8c:ce:1f:
7a:9e:9d:19:aa:db:9b:e4:a2:17:9a:c7:58:8b:83:
67:86:96:30:4a:aa:68:22:da:b8:8e:93:95:09:53:
0a:98:5c:8e:f7:6e:f3:a1:46:7c:64:67:07:5e:b7:
b6:c2:d2:95:9a:5a:9b:1c:98:aa:8c:e8:c8:8d:40:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:03:C8:DB:FF:75:14:70:F8:4B:FA:2B:D1:00:DB:E5:E6:0D:D8:90
X509v3 Authority Key Identifier:
keyid:E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f9:00:c0:c6:41:28:13:82:cc:fe:dc:b3:cf:e8:eb:71:2a:
ba:98:9c:21:a4:21:6c:4f:a3:da:30:44:5a:4c:19:05:ee:72:
22:32:e7:74:0d:79:35:1b:de:69:0a:07:37:30:83:03:17:9c:
95:3b:f8:bf:54:5f:dc:34:ef:45:18:94:ba:1c:f7:7e:9f:18:
7c:8a:2e:24:ae:f0:61:98:ec:c1:fc:23:9d:b3:a7:5b:ea:96:
fd:c8:44:8c:ae:39:48:9f:0b:2a:8d:0c:af:0e:71:17:8c:53:
64:15:07:c0:d4:23:c1:d1:0a:3a:8a:46:f3:ab:e3:04:48:79:
f8:83:7c:99:77:68:09:17:ab:c6:01:22:b5:10:47:39:f1:a6:
e8:1f:94:a2:f1:1e:73:b1:bc:06:60:6e:f4:af:aa:c0:9d:8b:
1c:05:ae:44:ec:76:48:a5:b2:13:3b:5c:9c:c5:5e:f7:f5:35:
0f:8c:6a:c1:c6:d3:24:3e:f6:b1:51:83:fb:52:2d:5b:5f:3b:
f6:59:b2:4d:3e:94:7e:3b:b5:45:39:53:d2:06:c7:89:42:76:
d9:f4:3a:36:38:14:44:87:a1:f1:c3:71:d7:07:83:24:e0:14:
32:d2:8a:4d:0a:bd:35:67:f5:a2:bf:36:51:0d:32:24:4f:5c:
86:28:55:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:28 2026 by rpki-client