Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: QMMZRSg5igTizD16j5yj5IgHmXCeccYw01b+LKMlgWI=
Subject key identifier: 04:61:9C:BD:83:35:1D:D4:0E:2B:F4:1A:51:6B:F9:9F:C8:6F:CD:D8
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 019E1EA32598B8ADAC36FAA8B5D82F21045F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 0F1E
Signing time: Wed 13 May 2026 00:01:08 +0000
Manifest this update: Wed 13 May 2026 00:01:08 +0000
Manifest next update: Thu 14 May 2026 00:01:08 +0000
Files and hashes: 1: 28qciXJsiY_HinbmOHfVFSyJkQk.roa (hash: UYVCwyOsNlY276CdR8TOzS4Rj720VMSX5696EeMarho=)
2: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: 6X3Lz3bEr65MAFYK7b1W9WfeZBdczDR41R5lBH6L0Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:25:98:b8:ad:ac:36:fa:a8:b5:d8:2f:21:04:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: May 13 00:01:08 2026 GMT
Not After : May 14 00:01:08 2026 GMT
Subject: CN=04619cbd83351dd40e2bf41a516bf99fc86fcdd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:aa:3a:31:42:a7:81:54:f9:b2:2a:94:fb:87:
20:9a:62:ef:86:e0:d6:bc:1c:b8:33:0e:41:66:21:
fc:fd:16:b8:5f:e4:c7:e1:3c:d7:09:87:e8:8d:14:
9c:fd:91:e8:e8:2e:75:11:a8:9b:1b:7e:5a:72:cc:
63:1e:30:f2:7d:65:19:39:c4:10:cb:ee:c0:fb:98:
70:d2:54:30:72:41:99:b5:35:5f:9c:54:d3:dc:1e:
e6:d7:02:6a:c8:5a:c3:26:9c:6b:4a:8a:f9:55:48:
04:1c:89:38:95:59:0d:af:f0:b1:ef:43:ed:ac:6c:
20:b0:79:62:58:4b:83:8c:46:51:0f:c0:01:ed:ad:
75:92:32:91:53:22:a2:2a:e7:db:00:a5:0a:96:98:
77:2d:5d:19:1f:85:c0:fa:c5:30:47:36:4e:3d:e3:
a5:e6:bc:4e:0c:bb:96:46:57:1c:fe:34:5a:bf:3a:
1b:05:d6:ce:89:e8:11:fc:77:7b:d5:67:f2:01:d2:
20:cd:2c:2d:25:2c:3d:e7:2b:20:45:4f:b7:8e:3f:
02:60:e0:cc:8c:d3:c7:40:92:52:21:0c:60:03:56:
51:1d:46:70:89:aa:1a:36:11:a8:30:cb:41:4f:3a:
e6:e6:8c:ca:43:3e:02:8e:3e:90:b6:f6:42:9e:1a:
31:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:61:9C:BD:83:35:1D:D4:0E:2B:F4:1A:51:6B:F9:9F:C8:6F:CD:D8
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c0:69:76:6d:63:ca:e4:2c:6b:a3:f2:ed:cb:12:8c:77:a7:
9a:8b:30:4a:6f:0e:23:03:07:13:5b:3b:01:f8:9c:c9:7c:40:
2a:54:52:05:29:c7:0d:a3:ff:7b:2d:2c:31:79:9b:fd:32:46:
09:f6:24:4d:0a:c5:44:23:d5:7b:9e:fe:a7:81:2e:f4:cf:ad:
57:06:19:b2:e5:1a:2a:51:02:03:0e:3c:b5:99:36:9a:e8:d6:
10:82:29:48:c6:24:72:d7:63:ff:0e:4d:0b:1d:53:0f:51:db:
cf:0e:0e:a8:10:60:69:49:bf:54:bf:2e:e2:4f:e3:02:b5:a1:
c7:65:1e:ba:9a:86:8c:e2:43:8b:fd:85:81:b1:74:f8:31:60:
ba:d1:e1:b8:3e:2c:3c:82:f0:24:6e:aa:7d:5b:bf:0c:61:2a:
76:25:43:ee:1a:a2:f6:3d:2a:44:7f:70:db:2e:85:02:20:ac:
6e:36:0e:85:cd:7e:0a:4d:52:27:4d:f4:6d:91:6f:de:3e:a5:
39:e9:66:27:ec:c3:ea:46:fd:ae:91:30:e1:66:27:f3:30:4e:
af:ab:4b:ae:18:89:89:30:21:a2:98:fd:3a:2d:8d:a9:ef:e3:
fa:5f:a7:bf:3e:92:55:cf:f8:f8:a3:15:58:7f:c6:0a:e5:ee:
e2:27:ac:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:24:55 2026 by rpki-client