Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
File: rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft (raw, json)
Hash identifier: tl7keVnCVQ9ku1VEX+5GYG/Kfui4d0RwaQ4Gw2Jj8O8=
Subject key identifier: D8:2F:63:DF:A2:0E:17:0D:84:67:95:58:85:EC:1F:6E:1B:C5:91:2A
Authority key identifier: AD:D3:EE:C3:31:B7:02:A2:06:B5:4D:FE:90:63:B8:C1:7A:42:B8:1C
Certificate issuer: /CN=add3eec331b702a206b54dfe9063b8c17a42b81c
Certificate serial: 019E1F47F9DD80E6BFE7E8DF74156499CDA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
Manifest number: 4E
Signing time: Wed 13 May 2026 03:01:11 +0000
Manifest this update: Wed 13 May 2026 03:01:11 +0000
Manifest next update: Thu 14 May 2026 03:01:11 +0000
Files and hashes: 1: WgFjeIjodHf0tIFJwgd7qL6VzDY.roa (hash: SbLcaGFtR51gDtKvy7+lV/tvtr//sjAXrktSn3Oq23Q=)
2: rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl (hash: SigQkxFSdqGPSEB7R0TaWgXrNtEv5uwDRmU2p5MZMPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:f9:dd:80:e6:bf:e7:e8:df:74:15:64:99:cd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add3eec331b702a206b54dfe9063b8c17a42b81c
Validity
Not Before: May 13 03:01:11 2026 GMT
Not After : May 14 03:01:11 2026 GMT
Subject: CN=d82f63dfa20e170d8467955885ec1f6e1bc5912a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:3a:49:73:5f:8e:ff:63:ef:28:a7:f5:5e:
54:92:af:b6:8c:2d:45:1c:9b:e2:cb:0f:7a:7c:79:
75:ba:ee:0f:b7:26:22:ce:7b:82:27:78:1b:66:6c:
2f:d2:d9:b1:6c:d3:78:a6:04:94:b1:ec:37:95:5f:
51:f4:92:d2:61:33:b3:83:7e:26:77:72:f8:c7:6b:
1e:92:04:08:42:96:a5:e6:02:72:9a:64:dc:c1:b8:
4b:ad:86:65:18:fc:82:00:68:3b:b0:69:fe:71:cf:
91:c4:8a:4d:ff:01:67:1d:c0:29:c3:ba:bd:49:9e:
96:52:52:5d:7c:30:5f:a8:76:08:0b:bc:e3:f7:27:
d6:75:42:f7:aa:a9:66:fa:d5:b3:88:54:40:6d:ed:
6f:e5:8d:ef:e5:d1:63:44:68:9e:e2:7c:7d:f8:1c:
58:f3:70:9c:51:48:32:61:d5:a6:cf:8a:86:b2:1d:
a5:49:07:87:b5:a4:52:dd:af:9d:11:ba:fa:b4:90:
17:a4:f5:48:87:b7:a7:b4:5d:df:16:c6:84:23:4e:
f2:ba:34:15:24:81:3d:bc:59:f8:bd:48:e3:01:37:
69:26:95:29:ac:82:29:51:ff:e0:2f:09:98:12:5f:
2b:ab:39:e0:fe:35:f9:f8:e1:f4:b5:ca:ff:26:07:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2F:63:DF:A2:0E:17:0D:84:67:95:58:85:EC:1F:6E:1B:C5:91:2A
X509v3 Authority Key Identifier:
keyid:AD:D3:EE:C3:31:B7:02:A2:06:B5:4D:FE:90:63:B8:C1:7A:42:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:18:e6:fc:5e:66:2a:cb:9d:e8:bc:d5:66:52:89:19:30:71:
f2:18:0d:85:1d:3c:92:ac:06:17:17:d9:33:c0:2f:7c:07:bf:
e5:eb:0b:ee:7d:64:fe:98:6c:3d:20:b4:16:a8:57:aa:3b:24:
97:f3:65:eb:3c:71:26:89:f7:fa:d8:1b:62:21:0e:a6:df:4d:
c2:fa:da:58:81:b5:b5:a4:63:68:95:8b:db:08:8d:27:09:4f:
15:fb:ce:bd:32:43:3f:f4:f1:04:fe:34:c9:9b:96:4a:04:e6:
a5:85:96:d1:bc:ea:13:23:9f:09:af:18:c4:50:46:4a:a1:08:
e5:3f:f7:1d:4a:af:d8:9a:f6:7a:e7:e7:aa:f1:59:0b:95:ee:
0a:c3:07:57:08:36:97:f2:8e:7c:c8:84:70:41:84:e9:e4:29:
1f:e1:47:9f:21:74:70:a8:b4:f5:f8:be:f1:a1:d9:d6:fe:60:
6a:b2:33:ed:e6:28:fe:52:1a:67:10:b7:74:f5:7d:3d:bb:c5:
d7:ec:c6:5e:4a:9e:aa:f0:63:32:79:70:7e:a4:21:91:2c:a7:
fa:b3:1c:2a:78:c2:ab:b0:1a:bf:e6:ef:08:e7:d0:d3:a1:1e:
3c:9a:d0:63:b8:41:bb:c7:b8:37:6e:e7:fc:1c:f7:8c:05:36:
88:78:56:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:31 2026 by rpki-client