Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: N+rrt+jDcRjYuKeKNvYM1k/q5OUMrsUCALWFaHsp4m4=
Subject key identifier: 69:84:80:7C:FF:42:CD:E1:AF:51:3A:41:9D:AD:42:BA:F4:E2:FA:04
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 019E1BD8A110880F9FD32A42CBA48717BE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 11C0
Signing time: Tue 12 May 2026 11:00:42 +0000
Manifest this update: Tue 12 May 2026 11:00:42 +0000
Manifest next update: Wed 13 May 2026 11:00:42 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: xrM6iB00WROmGvgnReJ5yINRNDnDoXqEmcCNXNN4DGw=)
2: uTD6khWcd31ZzRZAtfj7o4AtIHw.roa (hash: 69oOJR8ncC7sjtYVQ8SZHCT4Cq2KZtCn6uWehRleXPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:a1:10:88:0f:9f:d3:2a:42:cb:a4:87:17:be:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: May 12 11:00:42 2026 GMT
Not After : May 13 11:00:42 2026 GMT
Subject: CN=6984807cff42cde1af513a419dad42baf4e2fa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:22:74:c5:12:79:4e:c4:4c:3a:68:ef:a7:e9:
80:94:12:50:ab:92:55:26:80:e9:51:f1:fa:e3:73:
d0:b3:99:23:5f:8e:7b:9b:f9:d3:1b:fa:e2:21:ae:
32:34:49:58:c1:04:1e:2e:05:96:e2:bf:dd:6c:1b:
00:a2:02:db:7a:54:9a:ba:25:d2:83:2e:e8:f2:46:
af:61:c3:92:1d:01:d5:4d:4c:fb:1d:ab:5d:fd:41:
b4:4d:fc:f9:14:89:d9:18:2a:39:f0:94:4a:1b:c9:
83:17:9b:71:d4:b5:42:8a:77:db:87:f6:40:2f:0c:
20:1f:99:03:11:a7:d3:f2:df:9a:83:e2:79:a6:77:
fe:09:1d:53:c9:f9:44:fb:e7:3e:4f:f4:0e:d2:2f:
b4:22:ed:02:7b:b2:7e:52:e7:59:3a:e8:a8:b8:74:
8d:08:76:83:4c:33:31:4b:c2:92:ad:86:bb:f5:b7:
cb:9f:13:b0:d4:74:53:44:32:82:22:b0:c8:ba:d9:
07:a6:c6:02:38:a9:96:63:f3:25:02:10:5c:3d:f7:
0f:8e:fb:6b:34:4c:23:83:37:50:4f:cb:f3:55:46:
f7:c7:63:0f:68:04:08:07:9d:88:c4:98:bd:9b:9e:
e6:15:47:ca:f0:fb:47:e6:98:f8:e0:c3:0f:e8:90:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:84:80:7C:FF:42:CD:E1:AF:51:3A:41:9D:AD:42:BA:F4:E2:FA:04
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1b:4e:13:df:f1:e5:0c:25:da:85:6f:c3:9a:c2:69:b9:25:
ce:e2:1c:ed:85:b1:52:a9:82:68:d8:23:8b:d0:af:df:af:ea:
20:4e:1f:92:ed:3d:2e:61:dc:ad:2a:d3:39:0d:48:aa:04:4b:
07:5b:ce:1e:20:48:b0:14:82:0d:41:69:33:91:61:55:d6:7e:
7d:f3:3b:6e:d9:d8:b4:21:53:66:8b:0a:2d:98:fe:fc:34:71:
f1:b6:34:5b:17:d4:4f:85:ed:43:3e:4e:32:24:4f:62:fc:03:
d2:28:62:19:60:3a:8a:17:4b:b0:43:b4:b7:5c:ba:53:31:ae:
a5:3b:c5:c1:8d:7c:16:88:15:a1:73:43:4a:56:17:a3:03:4f:
a2:12:d8:5f:52:c9:6d:1d:f3:0e:57:3e:17:0c:a2:12:01:be:
3f:05:96:50:6f:f1:6d:1c:58:54:53:4d:d6:6f:07:39:27:04:
ae:86:8d:29:b8:d2:2c:0b:5b:05:1f:4b:42:21:74:a7:61:d7:
23:85:f3:8f:32:bc:40:f5:e7:10:8c:c6:6f:d9:a7:99:41:ec:
5f:5f:8a:86:67:88:63:c7:f8:7c:a7:ed:fa:c2:5c:50:4b:7e:
4f:6d:67:40:a2:08:90:7c:8d:a2:7e:47:cb:73:4e:3c:5c:f3:
d1:7b:af:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:36 2026 by rpki-client