Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
File: 4TbBQNV8BgOYHZBG1McqrcZJe48.mft (raw, json)
Hash identifier: DkXW+CXvFc0eibaEYJRN+pEcMqdeu78RoNYPI7BiQfE=
Subject key identifier: 94:BA:FC:F1:97:6D:4C:86:52:BF:AA:05:BE:15:81:E9:37:B6:68:31
Authority key identifier: E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F
Certificate issuer: /CN=e136c140d57c0603981d9046d4c72aadc6497b8f
Certificate serial: 019E1D90D416B64735FB951C312A49D16A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
Manifest number: 95
Signing time: Tue 12 May 2026 19:01:30 +0000
Manifest this update: Tue 12 May 2026 19:01:30 +0000
Manifest next update: Wed 13 May 2026 19:01:30 +0000
Files and hashes: 1: 4TbBQNV8BgOYHZBG1McqrcZJe48.crl (hash: spXPnBFhRXEroSpGZh3kuI6yTYQokI8rQB0Rdz8UV0s=)
2: flO6XJpnIFOsdZyjDNefmOQ-G_w.asa (hash: MR9nPjOlXBd3N+fXKFHrapKtNEWrnTEaOnHmqRgXcfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:d4:16:b6:47:35:fb:95:1c:31:2a:49:d1:6a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e136c140d57c0603981d9046d4c72aadc6497b8f
Validity
Not Before: May 12 19:01:30 2026 GMT
Not After : May 13 19:01:30 2026 GMT
Subject: CN=94bafcf1976d4c8652bfaa05be1581e937b66831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:d1:12:6e:d1:03:e3:d3:6d:b4:b2:ea:52:
f9:03:d0:d2:8c:72:92:1e:f1:ba:14:35:2d:6e:73:
02:10:5d:38:3c:49:e4:1c:42:37:58:1d:f9:c0:c5:
6e:1a:e3:5a:1f:d6:14:7f:3e:ac:7a:4f:d9:a1:6e:
60:cb:fe:e8:fb:f9:03:1a:59:0f:c7:f8:7c:fd:a7:
f5:5a:30:e8:4f:0e:0a:dc:0a:57:b9:a5:0f:67:57:
0d:d1:a2:1a:7f:ab:12:d9:2c:c5:51:2e:f9:08:03:
de:0e:75:23:0e:c9:75:37:08:63:d1:e1:77:42:7d:
55:f7:7a:0e:78:bf:19:27:93:82:6c:7e:3c:15:9f:
a8:ed:3e:a2:27:c1:92:82:c8:9f:59:89:35:80:94:
94:c6:4e:e5:a8:4a:c7:08:72:df:dd:d8:f2:bb:87:
50:da:b5:5b:25:d6:dc:1e:71:18:b9:1d:4c:ef:60:
6f:e8:d9:bf:04:76:a1:e6:95:6f:c5:2a:aa:d2:45:
d2:9e:05:6c:9d:9f:02:cf:4d:76:02:fb:2d:a9:df:
b6:c2:73:dc:ee:74:8b:d8:fa:bb:f3:61:a9:1c:93:
38:61:b0:9c:c0:c3:39:d9:de:bb:97:ce:6a:76:2b:
c5:74:e5:02:72:0c:5f:70:f3:82:28:9e:89:55:40:
b8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BA:FC:F1:97:6D:4C:86:52:BF:AA:05:BE:15:81:E9:37:B6:68:31
X509v3 Authority Key Identifier:
keyid:E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3a:e1:94:3a:01:f1:ca:76:77:f8:b9:9c:5d:1f:de:ea:b4:
45:af:66:9d:7e:cb:48:27:95:7d:c0:94:12:1c:92:ae:ea:4a:
74:25:89:9e:d8:a4:bf:5f:77:c1:c2:44:a4:8e:32:d3:b0:ac:
a2:9d:64:e1:8f:ed:0d:8a:22:bf:63:07:a1:31:69:4d:6e:f2:
67:a5:10:59:a9:14:15:eb:78:8c:a1:d4:e5:ff:de:76:f4:8b:
e7:8e:07:1f:e7:32:e2:d0:54:47:e8:f5:27:46:00:c3:d9:ba:
c4:e0:2d:a7:37:f3:73:be:b2:f0:a9:fa:48:3a:41:8b:d3:fa:
32:26:70:3a:1e:18:ef:c3:d4:94:92:31:39:fd:58:db:e0:90:
47:9c:94:dc:5e:02:96:65:04:f6:17:9c:c8:2b:ce:54:bf:7c:
78:91:a9:c9:81:68:0d:a3:72:87:97:94:3f:87:2c:f4:97:59:
69:df:48:dc:25:a0:0e:94:b7:9a:28:97:97:96:56:fa:95:22:
2e:6a:c9:fd:0f:99:12:5e:e0:27:10:7e:a8:6f:96:b3:06:71:
fe:a3:b9:10:55:4a:6f:78:08:01:ec:ce:2a:1a:29:1d:77:c6:
ff:12:7c:02:3e:6d:88:2a:5f:f2:79:44:26:95:57:cd:07:f3:
46:bc:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:10 2026 by rpki-client