Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: u2a6w2Uy/SDlpbJeUkzsM8LB4Dy3N7QyrGuASUHa0Bk=
Subject key identifier: 8A:D3:4C:A4:CB:DC:7A:AF:33:B0:F4:99:D9:14:DD:9B:E6:04:87:3E
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 019E1D59D8DFC2BEA5643C93CFCA74E80DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 1462
Signing time: Tue 12 May 2026 18:01:27 +0000
Manifest this update: Tue 12 May 2026 18:01:27 +0000
Manifest next update: Wed 13 May 2026 18:01:27 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: VQaIi1VdKmaQ1TF0uB81Utzw0JIooybC8pIm+5NEwPM=)
2: _2TjfVrCZo9B9qI9aJsIIj8RhAk.asa (hash: M/M1jD58xwzQOF/SAmLUskPi5EjlgSXMDxr/H80Jdlc=)
3: i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa (hash: w8gWgmF42nIarY6Emvf1fz/wNEfrJpHlyRzan9puCwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:d8:df:c2:be:a5:64:3c:93:cf:ca:74:e8:0d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: May 12 18:01:27 2026 GMT
Not After : May 13 18:01:27 2026 GMT
Subject: CN=8ad34ca4cbdc7aaf33b0f499d914dd9be604873e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:ac:8e:1b:b1:66:c0:f4:7b:c1:a9:e4:fe:
88:37:93:74:11:0f:fb:60:59:e9:ec:bd:fc:d4:36:
18:8e:a1:e8:b9:1b:8e:fd:9a:a9:f6:df:b1:fc:9b:
73:b4:ab:ee:c9:71:ac:24:da:e9:cd:ed:78:85:e5:
24:d2:a6:7b:c3:1c:2d:45:fd:66:0e:d2:6b:bc:50:
f3:c2:c8:e8:95:da:90:57:2a:52:2b:bd:71:10:8b:
35:b2:77:13:20:9e:9c:d7:4b:7b:83:4a:75:d9:2a:
74:a6:f0:99:d4:9e:d9:15:ef:6e:ca:16:c7:74:40:
c7:13:bf:d8:15:a7:62:10:f8:5a:cf:3d:b4:32:16:
9f:a2:ae:3f:2a:86:49:d0:3b:1f:84:4c:6b:0e:1f:
e9:89:a2:f4:dd:9c:3d:6f:f1:8c:57:81:21:c0:2a:
55:e4:3a:3f:42:dc:c1:12:4e:6a:db:8b:26:e7:1d:
69:b8:cc:de:2a:31:dc:8b:e3:a6:f5:77:64:03:fc:
34:3c:1b:a9:95:aa:e6:a9:39:a7:5a:be:46:ad:3f:
b9:73:f7:4d:83:7d:ec:5a:6e:d0:49:ba:70:7d:83:
47:66:b0:ed:b4:18:fd:16:89:be:51:a9:ea:24:d9:
50:94:1f:3b:a5:ed:48:8c:1c:90:b8:d1:e1:28:7c:
17:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D3:4C:A4:CB:DC:7A:AF:33:B0:F4:99:D9:14:DD:9B:E6:04:87:3E
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:95:ca:96:db:b8:26:bf:b0:ca:b4:db:4a:e2:aa:e2:86:b5:
77:fb:0a:f0:ff:0e:dd:ec:25:57:06:20:ce:29:5f:19:f0:28:
ee:e5:47:7d:cc:f7:4e:75:80:29:23:0c:29:1d:f7:59:05:e6:
88:4c:cd:b9:8a:bb:fb:00:0d:46:84:07:2e:e7:c6:8e:21:8f:
75:e7:c0:ae:ce:5c:50:47:2f:1f:83:16:2a:ca:77:f7:1d:d7:
43:a4:e7:41:54:df:51:80:7d:c3:73:d0:85:f0:3e:03:c3:09:
2d:98:1c:2c:48:2d:7a:9f:65:19:6a:dc:b2:15:1e:ba:79:b9:
bb:00:af:ef:a0:14:45:a4:8d:c2:b1:a9:0b:50:14:2d:2f:a3:
fe:94:a3:03:ca:43:9e:0a:a8:3c:b3:b5:a8:23:94:ff:1f:a5:
fd:21:e3:e8:72:40:d5:ea:76:06:9b:76:56:1c:4b:7d:b4:22:
ea:bc:f8:54:89:b6:75:b6:37:ad:05:f7:97:77:07:81:28:4f:
7b:9b:f3:3f:e4:f2:81:ef:e1:3c:5d:cd:95:0c:78:8f:6b:8d:
ac:70:9d:ba:af:87:67:57:ab:35:9c:6c:84:5a:ec:8d:46:6d:
bb:bd:de:d2:da:df:ae:cb:72:42:14:1f:28:e3:e5:04:97:96:
dd:bb:00:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:36 2026 by rpki-client