Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
File: 4rWwjcQz-On3dyfLUfa6JL3V85o.mft (raw, json)
Hash identifier: g/PCAAME/u0nSmeqOMnsrP5fqSfyFdwzoaLUejmmKCk=
Subject key identifier: 23:6F:9F:9A:9E:3F:D1:4F:88:0D:9A:90:2D:7C:9C:E0:C7:FF:06:C0
Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Certificate issuer: /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Certificate serial: 019E1D90757D253AE3558E1F6ADF5FB9F53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
Manifest number: 0920
Signing time: Tue 12 May 2026 19:01:06 +0000
Manifest this update: Tue 12 May 2026 19:01:06 +0000
Manifest next update: Wed 13 May 2026 19:01:06 +0000
Files and hashes: 1: 4rWwjcQz-On3dyfLUfa6JL3V85o.crl (hash: +34i/IBCi8tQEw3zL5YwV5QVfYBD9DBC6tGAYcCWKrA=)
2: BxZPTQDdLKKz_KzmvAmu63Br_30.roa (hash: RJzmMfXa1i3UOXt5apo9yzIAminXwO5ap7oBJzJBEJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:75:7d:25:3a:e3:55:8e:1f:6a:df:5f:b9:f5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Validity
Not Before: May 12 19:01:06 2026 GMT
Not After : May 13 19:01:06 2026 GMT
Subject: CN=236f9f9a9e3fd14f880d9a902d7c9ce0c7ff06c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:b9:ce:51:32:3b:72:3f:3c:cb:9c:d7:16:
e4:e7:ec:cb:f2:5a:73:3c:c6:8f:80:d8:d9:ff:a9:
a7:32:12:2e:1c:82:c4:c7:29:f6:43:f4:40:38:59:
5e:93:63:0d:57:a1:c5:2c:98:95:19:91:3d:1a:c4:
ba:c8:32:4f:ea:e6:a9:fa:80:4e:f3:49:41:96:40:
7a:98:bd:53:44:9a:03:a7:e8:23:01:36:73:2f:30:
16:78:d1:49:a3:3a:54:aa:d5:7f:5c:2e:dd:1b:84:
48:fb:27:8e:ac:43:5e:a7:95:f8:5a:3d:5f:f0:fc:
37:66:43:5b:ae:17:de:91:e7:22:17:af:08:76:53:
6c:7b:26:5e:5c:2b:bc:1f:94:e7:d4:bd:47:3a:54:
ef:7d:d0:c7:93:5f:3d:ab:ff:46:80:41:73:7c:cb:
a7:69:cc:e9:9a:db:e6:e7:81:28:ce:5b:9a:81:e7:
8b:d9:71:c7:6e:60:b8:89:4d:60:fc:34:47:8c:f9:
0b:e5:21:95:9d:1c:2c:94:4a:0c:fd:8a:da:23:d0:
20:c8:03:6a:40:bb:20:b8:3d:54:2c:d4:b6:f0:73:
0a:9a:c6:4e:76:7b:8b:43:6a:32:55:8d:b9:50:d9:
20:d4:31:76:f1:87:04:d4:7a:08:64:06:03:7a:8a:
ac:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6F:9F:9A:9E:3F:D1:4F:88:0D:9A:90:2D:7C:9C:E0:C7:FF:06:C0
X509v3 Authority Key Identifier:
keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f9:d4:b5:fa:dc:4c:7f:86:5a:05:6f:83:56:5d:b0:d8:73:
ac:43:ac:3e:37:af:87:d8:ae:9c:17:e4:8d:d3:5b:6b:ed:dd:
fd:c3:0e:29:80:55:bd:14:af:fb:7b:d0:6c:22:bc:33:6f:30:
30:55:75:f1:dc:32:d5:72:81:02:bf:ab:3f:34:b3:ed:ea:6c:
f6:4a:41:de:b6:f0:d8:a6:96:c0:2e:b1:a6:3b:70:3c:98:a7:
65:9f:c3:96:b0:47:5e:af:cb:d2:96:35:65:21:d5:dc:57:52:
d5:fc:7e:73:37:5c:97:74:8a:3d:9d:f9:55:e4:e3:3c:61:78:
c9:e0:e0:67:28:27:a9:95:7f:7a:43:91:63:af:73:9c:d2:1f:
45:28:e2:1c:d9:e7:45:5a:b9:c1:54:f0:32:61:9e:dc:72:78:
c9:b6:ab:a5:7e:3a:40:7d:62:3d:0e:6d:27:51:3a:8a:c5:03:
6f:1e:30:76:0a:c0:99:64:79:de:89:82:6e:81:f0:ce:e3:ed:
c1:34:bc:7e:9b:ac:2d:e6:c8:cb:5e:19:04:1a:74:10:26:c5:
29:57:a4:f2:25:c1:c8:29:95:8a:83:6b:6d:b8:6e:78:8c:ac:
ee:1b:b4:af:33:f0:e2:e7:cb:5e:8c:0e:08:e4:ea:a7:49:62:
a0:f3:d3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:30 2026 by rpki-client