Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
File: 4uSsYiT-GURCDcOpjdY6uuSvfgA.mft (raw, json)
Hash identifier: c0AtWcovqVt52xVwGGYNcbHgrWkObtI6vwaPhm8rf2M=
Subject key identifier: 8D:7E:C8:C8:D4:77:ED:DC:E2:42:94:B0:2D:35:E1:22:CF:78:39:2D
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial: 019E1D5912BAF633451F2D2DB36CF48C6902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
Manifest number: 1533
Signing time: Tue 12 May 2026 18:00:37 +0000
Manifest this update: Tue 12 May 2026 18:00:37 +0000
Manifest next update: Wed 13 May 2026 18:00:37 +0000
Files and hashes: 1: 1-TdHN98FGVFEolCtJz5D4Qn8oUU.roa (hash: XtPiDy65/rIGNdB1DOR8MKSXwZBD4oJVNpwQPU3xeNQ=)
2: 4uSsYiT-GURCDcOpjdY6uuSvfgA.crl (hash: XQQbZCmfwxv0koRWBUpRn2KGWUnn+0SrvwUvbuYoktM=)
3: RWwBA-mE5T1DeX90DO491TVULLY.roa (hash: MNPZj/RKM4/KkE55j9h8f2IORoXisvl/h9C3t/o3a6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:12:ba:f6:33:45:1f:2d:2d:b3:6c:f4:8c:69:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Validity
Not Before: May 12 18:00:37 2026 GMT
Not After : May 13 18:00:37 2026 GMT
Subject: CN=8d7ec8c8d477eddce24294b02d35e122cf78392d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:71:f9:52:fe:ee:1e:26:45:2e:4f:5e:b0:
a5:e4:59:36:cb:64:32:54:e9:36:be:3d:86:f1:d4:
d1:41:59:4c:a8:c8:55:39:df:3a:46:86:51:7d:cc:
01:86:2c:4f:6d:ea:9f:6b:5c:95:01:2e:6c:f7:01:
f4:50:cd:d8:81:33:00:30:c8:90:25:8a:b4:e1:6c:
89:41:d7:33:bb:0a:15:d9:9d:e4:e2:71:83:cc:6d:
19:4a:66:c6:11:16:7b:62:21:ad:d9:63:71:40:bf:
ff:eb:bb:2d:3e:73:6f:9a:91:30:22:74:59:4f:a5:
11:15:1a:29:35:37:f9:37:61:0e:26:37:ca:6c:6d:
fd:83:ff:9c:1d:fb:6b:3b:57:7a:0c:a5:d7:10:f1:
19:fb:dc:cf:f9:40:e4:f7:40:fe:06:c9:bd:41:db:
5d:99:cb:31:9b:25:a3:23:7a:25:f9:2f:20:e7:d0:
9a:d6:9b:14:a1:3a:96:4a:69:52:df:fd:38:20:af:
c3:38:82:90:5f:04:86:36:ac:67:5e:f8:b7:f7:d1:
fa:74:3e:94:f1:ad:72:31:67:08:9e:e0:0c:20:74:
af:c1:82:64:3f:28:c6:b9:de:af:a8:ba:03:7b:c2:
c3:5e:2e:44:3b:5f:22:16:f2:14:6e:ec:13:e0:73:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7E:C8:C8:D4:77:ED:DC:E2:42:94:B0:2D:35:E1:22:CF:78:39:2D
X509v3 Authority Key Identifier:
keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:82:1f:9b:e0:bd:12:4b:9c:52:f7:66:97:77:b0:21:c6:9c:
1d:30:08:a6:00:1c:9b:d5:78:98:c5:3f:80:83:24:66:63:79:
db:63:b8:72:64:a8:c3:e9:4e:a3:2e:27:be:35:e1:e6:ce:65:
b2:67:f4:ad:95:b5:6e:c3:f0:bf:8c:c8:ea:d4:53:ce:c1:0f:
ee:f1:1e:5b:bd:fd:54:80:3e:0a:c7:d4:62:17:e3:9e:4e:3d:
da:cf:18:11:b2:f1:4f:ce:2c:b5:52:04:63:ab:6c:65:41:1d:
1b:9f:8b:69:dd:e8:a5:1e:4f:c6:a6:e1:9d:3b:a0:25:9a:20:
28:29:61:2b:08:91:29:45:d5:cd:5b:ae:e0:c8:8a:ed:4a:1f:
96:1d:fd:70:f1:98:e3:0d:36:d8:ec:05:fb:9b:28:9a:3a:62:
bf:cb:43:19:6f:06:04:13:3c:92:6b:4e:8b:94:f7:c1:6b:a1:
7a:63:39:21:7f:df:9b:17:35:6a:ec:89:98:5a:22:5a:56:02:
54:30:35:e0:aa:c3:b6:28:60:73:f1:73:cb:57:ab:65:82:b3:
a2:37:d5:94:27:7a:a2:04:0c:1d:8b:d8:94:57:3a:b2:41:bf:
60:5c:5c:6b:b7:d3:e1:9a:80:a2:5f:4a:ed:f1:f6:06:10:66:
d1:ed:74:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:52 2026 by rpki-client