Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
File: 4auG-AxLsqxW5B7HokauKWnY01g.mft (raw, json)
Hash identifier: ssRvCy58zq68LZMdRNyYs/M64RPviwH0JMLn6a+0vvw=
Subject key identifier: 98:60:FE:66:F8:5C:73:73:59:CB:56:CA:C7:58:A1:56:0F:29:A2:C9
Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Certificate serial: 019E2135E339ABC7CC55E9B977F85023DAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
Manifest number: 08D1
Signing time: Wed 13 May 2026 12:00:39 +0000
Manifest this update: Wed 13 May 2026 12:00:39 +0000
Manifest next update: Thu 14 May 2026 12:00:39 +0000
Files and hashes: 1: 4auG-AxLsqxW5B7HokauKWnY01g.crl (hash: 2W1GATwAc3Ki5zsNltKzv1zPZiWNh0MXv/gJXwogopE=)
2: KNOVXoGQsdCxPsZM3zKJ6uFmptI.roa (hash: UiYbuT4DjmIashb94arKXLuitUGRN2TvoEQlDnO6RSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:35:e3:39:ab:c7:cc:55:e9:b9:77:f8:50:23:da:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Validity
Not Before: May 13 12:00:39 2026 GMT
Not After : May 14 12:00:39 2026 GMT
Subject: CN=9860fe66f85c737359cb56cac758a1560f29a2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:86:66:1b:e7:17:ac:7d:72:eb:2e:32:33:
25:f2:2f:eb:92:21:3a:69:75:9f:37:35:97:18:3a:
ae:54:35:4e:cb:02:7b:e8:9b:33:f5:5c:d0:ec:9e:
4f:ca:89:ae:7f:43:c4:44:da:34:7d:13:9f:d3:2c:
b9:fd:da:4d:19:0f:72:cc:59:ca:57:93:20:f0:a4:
3a:63:2e:fa:df:b4:83:58:ce:8f:1c:7e:a9:d3:a1:
a0:3d:7a:b9:45:14:31:82:66:a9:9a:df:86:07:75:
b2:77:1f:08:87:0a:32:4d:01:4f:1a:c8:a3:de:a1:
82:4f:57:33:9f:2f:4b:8a:df:8c:3c:72:fd:73:d0:
b6:b1:79:ec:f1:18:f6:c5:f2:f8:d7:3d:91:f5:d5:
79:d9:f4:31:c9:b4:32:bb:1d:7c:0b:90:3d:07:20:
86:46:1b:c7:ce:7d:91:28:0f:cf:bb:30:02:21:ed:
2b:e1:58:d0:2a:19:fa:11:d4:51:33:bd:89:7a:0e:
45:ad:2a:42:cd:65:77:be:b4:59:dc:97:58:9b:b5:
71:6d:fc:19:2f:5a:a3:7b:ab:ea:c4:6d:34:85:80:
b6:83:a5:05:30:c3:7b:9f:ab:5a:3b:45:46:af:ce:
82:99:f0:03:65:ab:b1:d2:c4:1a:db:be:0f:c7:ad:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:60:FE:66:F8:5C:73:73:59:CB:56:CA:C7:58:A1:56:0F:29:A2:C9
X509v3 Authority Key Identifier:
keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:96:f2:7b:86:c5:a9:62:e5:c5:4e:a7:5e:b0:b4:57:74:da:
05:a5:9a:d1:4c:4b:1a:ca:6a:59:39:3b:5e:2c:22:de:16:6f:
44:89:ec:d1:2f:30:dc:04:fe:60:16:eb:81:9e:ae:f4:7e:25:
32:d3:b4:58:15:4f:23:4e:35:aa:3b:ca:7b:80:e4:04:62:2b:
11:a2:bb:dc:f5:da:75:94:69:25:d1:6e:09:7e:5b:4f:a5:5c:
82:82:66:ef:76:e9:87:4a:69:45:0e:39:54:95:d4:b6:9b:0e:
a1:6a:55:30:3a:0c:98:be:d6:7f:7e:77:1a:6e:73:85:22:8b:
c9:23:db:4e:69:fd:b7:a0:9a:d5:9e:4a:7f:28:6e:26:65:9f:
cd:29:f2:cf:aa:28:bf:52:bd:7d:f7:f7:d5:a0:b1:fb:01:a5:
a8:20:93:46:61:72:0c:64:ac:ff:68:d3:2b:b8:c9:a5:d7:fe:
42:2c:c7:c8:9d:82:37:fc:ec:79:26:8b:4e:8e:bc:36:3e:c1:
e7:3b:be:c4:2d:b5:fd:a1:97:f8:39:a5:ee:82:fe:14:b4:01:
4e:a7:55:59:b2:93:82:30:8a:b4:36:52:bd:eb:e8:8f:1f:52:
d6:3a:44:c5:e2:aa:bb:3f:0c:99:3e:cf:05:a9:b3:5b:9c:cc:
1d:1e:25:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:16:11 2026 by rpki-client