Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: uG8MDFavHaEBySw5frhIaFYDt+Iesp1oEtlq/BZuZcA=
Subject key identifier: 5A:83:9B:BB:2A:C3:15:62:86:EA:BF:5F:11:DC:0B:36:E9:9F:7A:3D
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 019E1C7D606E9213FC10116910B2A479E80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 190F
Signing time: Tue 12 May 2026 14:00:39 +0000
Manifest this update: Tue 12 May 2026 14:00:39 +0000
Manifest next update: Wed 13 May 2026 14:00:39 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: 1YWSgfKtSYueD+9q/5hLSGpOL359ZtJpZHIHiNJEMG4=)
2: CpV5ifZcjPyGOZZo5Kthc-0aYIE.roa (hash: lgb25S95umOL8YFj63EWLcLTY42lwBMqoGZsvrLzBnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:60:6e:92:13:fc:10:11:69:10:b2:a4:79:e8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: May 12 14:00:39 2026 GMT
Not After : May 13 14:00:39 2026 GMT
Subject: CN=5a839bbb2ac3156286eabf5f11dc0b36e99f7a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:e8:84:6b:d7:03:25:a0:05:9a:15:48:19:
76:e8:c8:b2:2f:b6:80:57:5c:e4:fb:d0:c6:e3:1e:
84:8c:77:10:fe:6f:d7:54:d1:f4:e2:52:66:86:6b:
c8:a8:47:b7:ec:66:65:ca:f4:a0:08:75:e7:62:c8:
8d:f4:55:12:db:89:c1:72:df:11:a8:78:c5:ea:f0:
98:e9:b8:b2:aa:65:82:f9:88:b4:2c:d3:9a:a3:96:
2d:9a:6b:81:32:69:88:f8:dc:69:ab:cf:c6:14:7f:
80:f8:e0:00:47:c0:9e:0e:56:b9:cb:21:a6:0f:be:
e8:03:fb:aa:b7:6a:50:90:63:d5:85:ad:b0:53:13:
52:5f:0f:6d:d1:57:56:25:a8:d0:08:ec:82:b4:a6:
da:a7:69:ca:71:8f:0d:bc:98:e7:f0:9e:5f:f1:85:
bf:21:c4:f6:b4:8c:41:9c:cf:45:93:46:48:01:49:
b8:eb:44:9a:94:64:7f:c1:39:7e:d1:99:74:19:a1:
23:7e:04:05:62:f8:32:aa:47:fd:5f:83:91:0d:3f:
34:ff:bf:33:7f:90:72:77:7b:70:c6:f7:79:29:a8:
2a:c0:39:9e:e7:33:5e:a9:94:e8:ec:36:16:4d:79:
ec:0b:a2:d3:f0:b7:a1:54:48:50:3f:95:c8:2a:8a:
25:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:83:9B:BB:2A:C3:15:62:86:EA:BF:5F:11:DC:0B:36:E9:9F:7A:3D
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:60:af:84:7c:91:b2:96:e3:5e:bc:cd:ec:3a:6e:a3:d3:41:
bc:8a:e4:74:e8:17:11:6f:ab:7c:93:50:ca:fe:0b:1a:da:f9:
ab:29:cb:e0:6c:3d:bb:68:0f:51:19:61:11:e5:e1:4c:df:a8:
ee:e3:6d:c5:0b:2e:99:a7:0d:63:76:03:44:e3:4b:4e:c4:a8:
50:24:44:ae:4c:b2:c2:07:ac:66:19:bd:c1:4a:d0:94:27:74:
cd:3b:47:c0:f0:6f:34:1d:c3:23:06:c9:5f:02:b1:b0:f4:74:
1c:de:ab:60:94:52:0a:61:3a:ee:b4:4f:60:92:d6:57:1e:e4:
4a:3a:58:f3:3c:e8:ba:18:bb:23:b1:5c:7b:0f:36:6c:d4:d9:
9d:e3:c2:07:fd:7b:a8:8e:c9:47:7a:9f:e7:12:72:91:9b:1e:
b9:b7:ec:a0:ef:b5:d0:7a:98:f8:89:e0:33:a6:a8:ec:f0:5e:
60:71:e6:3a:68:53:6d:4b:9c:b2:ca:58:d1:ea:1c:e3:6c:8f:
20:82:a4:02:45:c4:8a:4b:33:1b:9b:05:de:7e:84:3f:71:e5:
2f:5e:1c:79:c1:4e:5c:8a:8d:10:30:6e:e8:0c:97:ce:77:49:
e0:8e:38:dc:aa:18:00:78:17:b2:e7:66:16:26:41:92:bd:25:
65:3d:aa:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfWBukhP8EBFpELKkeegNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMjI3N2ZkZjY1ODI4ZWY0MGI1OGNlMTAxOTQ2NTk1NTA3
ZjEzMzAwHhcNMjYwNTEyMTQwMDM5WhcNMjYwNTEzMTQwMDM5WjAzMTEwLwYDVQQD
Eyg1YTgzOWJiYjJhYzMxNTYyODZlYWJmNWYxMWRjMGIzNmU5OWY3YTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjnohGvXAyWgBZoVSBl26MiyL7aA
V1zk+9DG4x6EjHcQ/m/XVNH04lJmhmvIqEe37GZlyvSgCHXnYsiN9FUS24nBct8R
qHjF6vCY6biyqmWC+Yi0LNOao5YtmmuBMmmI+Nxpq8/GFH+A+OAAR8CeDla5yyGm
D77oA/uqt2pQkGPVha2wUxNSXw9t0VdWJajQCOyCtKbap2nKcY8NvJjn8J5f8YW/
IcT2tIxBnM9Fk0ZIAUm460SalGR/wTl+0Zl0GaEjfgQFYvgyqkf9X4ORDT80/78z
f5Byd3twxvd5KagqwDme5zNeqZTo7DYWTXnsC6LT8LehVEhQP5XIKool0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqDm7sqwxVihuq/XxHcCzbpn3o9MB8GA1UdIwQY
MBaAFOIid/32WCjvQLWM4QGUZZVQfxMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODE3ODYtNzdmZC00MzE2LTk2Y2Ut
ODIyYjg0MmMzYzBlLzEvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80ODE3ODYtNzdmZC00MzE2LTk2Y2UtODIyYjg0MmMzYzBl
LzEvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmCvhHyR
spbjXrzN7Dpuo9NBvIrkdOgXEW+rfJNQyv4LGtr5qynL4Gw9u2gPURlhEeXhTN+o
7uNtxQsumacNY3YDRONLTsSoUCRErkyywgesZhm9wUrQlCd0zTtHwPBvNB3DIwbJ
XwKxsPR0HN6rYJRSCmE67rRPYJLWVx7kSjpY8zzouhi7I7Fcew82bNTZnePCB/17
qI7JR3qf5xJykZseubfsoO+10HqY+IngM6ao7PBeYHHmOmhTbUucsspY0eoc42yP
IIKkAkXEikszG5sF3n6EP3HlL14cecFOXIqNEDBu6AyXzndJ4I443KoYAHgXsudm
FiZBkr0lZT2qHQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:29:33 2026 by rpki-client