Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: TGsl1mWwl+izRpazzxw1bAusxDJgL8CGaX2iIT92XYQ=
Subject key identifier: 5C:C5:2E:E8:B2:F2:58:4E:D8:01:C4:2E:58:8A:31:02:8C:89:EF:0B
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 019E1D592302B53944A0A92B9D53827C90D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 096C
Signing time: Tue 12 May 2026 18:00:41 +0000
Manifest this update: Tue 12 May 2026 18:00:41 +0000
Manifest next update: Wed 13 May 2026 18:00:41 +0000
Files and hashes: 1: 1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa (hash: /XeBvwgyOqHyg56chvGRDFMd+7ExlJpVYmiAYZyhDGM=)
2: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: z6u7Xe1nXUIDVi0dFJR1RKwvxTocfcmgBCHJNhkUiAE=)
3: cgkSjyInxeBAfsrMtADKQej1dQA.roa (hash: NJBBWIxm8P9FWZLPw5DFC5dmcCI2sjb8UDnkU7sydo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:23:02:b5:39:44:a0:a9:2b:9d:53:82:7c:90:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: May 12 18:00:41 2026 GMT
Not After : May 13 18:00:41 2026 GMT
Subject: CN=5cc52ee8b2f2584ed801c42e588a31028c89ef0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:f3:02:0f:84:81:94:16:c3:09:5c:64:b6:
c3:03:32:14:42:e9:d2:b2:fd:fe:78:c3:85:55:3b:
c0:ed:5b:64:05:71:37:0f:30:59:98:ab:85:78:e3:
20:e0:5a:c7:60:4e:08:91:54:58:dc:af:ad:e6:15:
30:73:20:18:a1:2b:46:8d:9c:9f:8f:cf:55:8f:26:
de:5d:86:5f:26:b5:43:21:83:9c:ea:80:6d:6d:c1:
d8:6e:e8:da:7d:36:04:20:de:14:44:6f:8b:28:02:
b6:13:c9:8b:82:c1:a5:3a:50:da:7a:4d:80:1c:fe:
a8:ae:c3:44:40:92:c7:b0:3d:be:d0:1e:76:0f:a7:
ec:18:10:58:a8:5f:bf:a0:5d:c0:a5:30:ad:12:c5:
67:f8:16:10:6c:ec:e7:ca:d9:90:81:e8:e1:8b:e0:
0f:9c:5e:4f:ee:11:a8:94:20:46:c1:4d:28:87:12:
ad:8f:fe:78:d4:ae:03:3f:15:ee:31:82:8f:6a:e0:
52:3c:d3:9c:a5:79:36:ab:bd:c9:93:90:e1:09:cb:
32:d9:de:c8:b5:2e:b5:91:9e:35:ed:30:13:25:3b:
77:d7:89:62:4f:e1:76:95:a2:13:61:f3:1e:1e:69:
4f:45:df:41:06:1a:12:46:2c:fa:98:69:b0:41:03:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C5:2E:E8:B2:F2:58:4E:D8:01:C4:2E:58:8A:31:02:8C:89:EF:0B
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:20:86:f3:7e:51:78:b2:40:58:79:07:a3:c2:e0:74:26:f8:
49:19:8b:0f:f5:76:36:3f:b7:a5:af:f0:37:e8:a3:d1:22:0e:
78:16:08:48:d5:91:91:44:ba:62:66:cf:34:46:98:fc:c9:64:
1f:34:88:25:fa:57:bf:21:6a:a8:69:7e:6d:4b:d8:53:bc:12:
50:cb:39:5b:be:00:9c:49:f6:4f:cb:e9:78:92:b3:82:41:c7:
24:73:84:3d:79:16:98:aa:44:5e:3f:c1:9e:05:99:02:ee:fe:
a9:14:07:47:4c:b8:b7:ee:a3:73:1f:41:09:d7:a9:60:86:92:
5f:30:f6:76:b4:14:3b:90:e7:3a:ff:09:7c:4a:55:b0:ad:de:
a8:10:cb:db:d0:e4:59:9e:6e:a6:da:23:08:d5:65:ca:82:b0:
b6:30:2e:31:4a:9b:e1:10:ce:48:45:ef:8c:79:f5:5f:1a:1d:
76:47:57:c0:0f:27:3b:9d:37:fa:d3:99:01:12:8a:ed:a1:14:
32:49:30:f3:5c:4c:6f:8c:56:e6:7b:fd:bb:ac:6f:63:d3:a4:
05:69:4a:47:18:8e:48:53:51:8d:51:38:68:11:ba:5a:16:f4:
49:ef:b6:29:83:2f:51:11:41:e5:bd:ff:06:e1:b6:02:f5:92:
d0:56:ea:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:12 2026 by rpki-client