Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
File: 41b1wjzOxkZAaF5E1ZvEttRNqrk.mft (raw, json)
Hash identifier: f8qz0SffjPd+ifsSUwMrgej0v6XLakbQefe0Gtjse2s=
Subject key identifier: 46:84:C3:8F:C2:83:2C:93:13:97:F3:12:64:DD:38:F4:DF:B5:63:3D
Authority key identifier: E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
Certificate issuer: /CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Certificate serial: 019E1D90C4A89822BBFAD2A391D6D6DE061B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
Manifest number: 0D15
Signing time: Tue 12 May 2026 19:01:27 +0000
Manifest this update: Tue 12 May 2026 19:01:27 +0000
Manifest next update: Wed 13 May 2026 19:01:27 +0000
Files and hashes: 1: 41b1wjzOxkZAaF5E1ZvEttRNqrk.crl (hash: ks4jinPuRgflh94bakoyKVPapJ5kKC7HFm255RNlUY0=)
2: VrD_z9WUzqoxuEFUeLh8zCfscNM.roa (hash: RBMbhE4e93nDrWwDckaO3Ac6YKsGDngzavc4attXd7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:c4:a8:98:22:bb:fa:d2:a3:91:d6:d6:de:06:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e356f5c23ccec64640685e44d59bc4b6d44daab9
Validity
Not Before: May 12 19:01:27 2026 GMT
Not After : May 13 19:01:27 2026 GMT
Subject: CN=4684c38fc2832c931397f31264dd38f4dfb5633d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:26:43:f3:53:8c:95:15:ff:44:62:fe:1e:
72:da:a2:e4:79:3a:08:cb:32:5b:6b:e1:42:8e:36:
7b:a0:42:99:6b:7c:30:68:4e:44:86:2c:d7:e9:ac:
0f:a1:5e:ca:1c:9c:5d:fd:87:ac:2d:2f:2c:df:a6:
1f:9a:25:ef:fe:c6:59:4d:8c:b2:44:f3:90:0a:53:
1d:fa:b6:89:22:cb:d8:48:ea:d3:c4:77:70:bb:32:
49:e4:45:5d:66:d3:aa:61:84:1b:e0:59:85:28:1a:
e3:6a:32:b1:0d:ba:7f:db:08:94:01:11:5a:4d:c4:
4d:b0:49:ba:ec:35:11:2e:bf:05:92:94:7e:38:29:
5d:2a:b2:bc:69:9d:1d:9d:84:09:a5:3b:44:ac:72:
2d:b2:6a:3c:9d:ff:15:03:91:48:5f:ad:ab:f1:d7:
67:4f:8b:bd:97:1b:9c:05:30:bc:8a:1b:88:c7:4c:
d5:ee:1d:54:03:9d:b5:18:47:75:26:dc:77:d6:f9:
9f:ee:4e:3c:00:ea:16:14:ec:9f:0a:7d:c4:0f:70:
80:11:1d:91:03:4b:c6:51:05:42:05:6e:7a:ed:86:
ea:60:52:c4:81:76:4e:45:c0:af:85:57:7c:ea:99:
55:61:c6:98:04:50:7d:22:ac:e5:33:56:d1:8a:bb:
8a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:84:C3:8F:C2:83:2C:93:13:97:F3:12:64:DD:38:F4:DF:B5:63:3D
X509v3 Authority Key Identifier:
keyid:E3:56:F5:C2:3C:CE:C6:46:40:68:5E:44:D5:9B:C4:B6:D4:4D:AA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41b1wjzOxkZAaF5E1ZvEttRNqrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c3d10e-f4ab-4f08-956c-3cadec46e5c3/1/41b1wjzOxkZAaF5E1ZvEttRNqrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:86:d9:b9:a6:21:22:00:55:b6:aa:f1:47:08:02:83:b9:b4:
ec:86:14:4b:4c:2b:55:4d:d7:72:7b:27:46:d6:1f:9c:6d:4e:
3a:57:66:e2:30:31:31:3e:2e:ad:30:90:92:a8:64:06:38:9a:
46:0d:1b:7f:42:69:be:c0:01:ff:17:e0:f8:6c:b1:f9:6a:38:
f0:39:d5:e1:00:61:6b:a8:b1:f5:94:81:4b:b1:a3:a1:03:de:
a5:c8:86:61:25:4a:c2:39:8f:2f:4e:43:57:a9:0c:8b:56:c3:
ad:9e:46:3e:24:5f:db:bf:0f:9a:bb:c7:d3:80:9d:db:e0:03:
b6:ef:37:bc:8c:d9:76:8d:dd:34:7e:91:b5:c9:47:34:61:76:
85:f8:c2:4f:07:ed:28:fa:a8:3f:1a:87:1f:92:2c:73:d0:60:
e0:ab:0b:41:5f:dc:fc:02:5a:30:c2:43:0f:41:f1:f4:aa:85:
b2:b6:90:7c:d8:c9:4d:ed:4e:ce:4c:f2:f2:fb:af:29:3d:b2:
fd:7c:ef:17:ce:77:23:69:5a:bc:96:d3:6a:7d:3f:4f:de:00:
ee:b8:20:84:ae:25:45:20:65:a0:5f:7a:be:67:1d:2a:b3:4f:
07:17:ed:69:1c:2f:3f:86:87:d6:e8:9f:0d:3e:ed:5f:7a:bc:
a5:45:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:23 2026 by rpki-client