Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
File: 4EHIW0dOi2wAiR2VQST_DIEgDYw.mft (raw, json)
Hash identifier: 4bguqRN91SijTUZgmUy0GpNZpVglsRIASmkI/QzhDPA=
Subject key identifier: 4D:C5:6A:1C:36:28:D5:46:A5:AA:7C:B0:ED:6B:24:68:D3:D1:80:DC
Authority key identifier: E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
Certificate issuer: /CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Certificate serial: 019E1E35F6CB19031994687113B074151A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
Manifest number: 0C60
Signing time: Tue 12 May 2026 22:01:53 +0000
Manifest this update: Tue 12 May 2026 22:01:53 +0000
Manifest next update: Wed 13 May 2026 22:01:53 +0000
Files and hashes: 1: 4EHIW0dOi2wAiR2VQST_DIEgDYw.crl (hash: 3BztPDKBgusGl9/HtQ7V5MvwTQO9CHij8GTk7kaaaos=)
2: _-JfME-Erck4pkvS4WQAD8N3srk.roa (hash: QrEZHXMbaydoz+Hi0SYY4JVGJuxwhF6iX/ilfGhMhOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:f6:cb:19:03:19:94:68:71:13:b0:74:15:1a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Validity
Not Before: May 12 22:01:53 2026 GMT
Not After : May 13 22:01:53 2026 GMT
Subject: CN=4dc56a1c3628d546a5aa7cb0ed6b2468d3d180dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:d4:cd:c7:ea:e5:3f:d9:bf:0e:0e:45:db:
a9:b8:cd:3a:cd:70:7e:da:d9:a5:71:c2:d9:49:12:
35:27:db:c5:5c:c9:6f:b6:71:00:bd:08:29:e7:23:
50:7b:b0:37:29:db:be:8b:02:5c:d3:2d:82:9d:f9:
dc:0d:e6:04:89:75:ef:ef:2e:da:22:3c:a8:72:a6:
38:81:89:b2:fc:62:77:93:3f:ef:f5:c3:18:b9:ae:
11:5c:e9:70:79:52:86:c6:4e:4b:82:b1:0f:a3:51:
7b:be:d5:6e:33:ef:e1:48:d7:f5:2e:23:bf:8c:2c:
22:ce:e1:2e:8a:0f:43:43:8f:c6:95:03:f7:18:5c:
3b:57:62:36:68:0e:33:b3:32:6b:8e:24:de:47:74:
80:6a:61:cf:27:59:08:73:03:0a:51:6e:84:ff:4d:
88:f7:62:f9:ac:77:b2:81:4a:04:48:3e:c0:0a:7c:
20:f8:45:1e:b3:eb:51:21:44:89:e0:5f:47:c5:a4:
11:3d:d9:a6:83:d6:1c:4a:0d:f8:9f:dc:0d:a4:f0:
88:a3:7f:2f:9f:72:73:5b:0e:bd:12:ae:26:d4:76:
b2:91:09:1a:20:f5:d3:5c:02:6e:d0:2e:ae:5f:64:
ba:c0:68:ba:10:8c:f4:21:29:c4:69:8b:3d:6a:51:
f5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C5:6A:1C:36:28:D5:46:A5:AA:7C:B0:ED:6B:24:68:D3:D1:80:DC
X509v3 Authority Key Identifier:
keyid:E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9c:8a:9f:fd:6d:3f:90:44:22:e4:7f:03:05:d7:03:40:46:
92:13:a1:3b:8a:5d:02:0a:e1:ec:85:96:52:e4:5a:e5:7b:7d:
43:19:af:f8:63:e1:5b:f2:e8:25:85:77:0c:e8:24:ca:87:a3:
01:f0:69:a1:04:8f:c8:e3:ec:46:c9:29:73:3f:cf:75:c6:d7:
40:5d:ba:95:f9:21:9a:da:9a:da:44:d2:fe:d8:3f:18:ff:47:
f5:24:f8:25:2f:73:f6:e9:3a:f7:e8:d8:dc:ac:f8:3b:86:35:
93:fd:fa:63:6b:be:0c:39:d6:83:13:44:85:39:6d:cc:32:d1:
42:26:05:2c:9f:dd:fc:98:cc:69:b5:d3:8f:2d:35:5b:41:bb:
86:fd:b8:38:81:09:62:05:0d:d0:05:f5:d8:b5:6a:a8:66:d5:
d5:fb:25:39:5c:ad:f5:77:48:db:23:5d:a1:96:66:fc:c3:9d:
36:66:1e:35:de:7d:a9:e0:9d:9a:c3:65:7a:7a:55:1c:37:91:
7f:90:b7:cd:ec:99:61:43:8c:9b:bf:35:be:cb:c2:91:16:c0:
0d:92:6f:a1:bd:88:37:64:06:fb:73:75:13:96:7a:bf:68:93:
9c:f3:a9:70:d3:71:61:1f:62:39:fd:ec:dc:e5:d7:ad:29:21:
1d:f0:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:20:51 2026 by rpki-client