Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: OZYDO6z2UHyE9dQObdCJNw5n1R6B/kaPuIxZ7P6viZM=
Subject key identifier: 33:1E:F5:6A:C8:8A:E5:20:8D:86:95:54:C1:FE:F3:D4:69:8E:C4:89
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 019E1E6C0E47A60E21B0A9CCCCECB13D5BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 0A8B
Signing time: Tue 12 May 2026 23:00:58 +0000
Manifest this update: Tue 12 May 2026 23:00:58 +0000
Manifest next update: Wed 13 May 2026 23:00:58 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: EKZnzkPwK6X328WJdBlAqCEJ5aCgPiYIT0tAiW3iOXY=)
2: YWMzYYdq1V4GAPZh68WrmEyhVfI.roa (hash: L4cChRKUEEfDnkwJCOfQ9K/LTDSkENg728c4ezgiFqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:0e:47:a6:0e:21:b0:a9:cc:cc:ec:b1:3d:5b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: May 12 23:00:58 2026 GMT
Not After : May 13 23:00:58 2026 GMT
Subject: CN=331ef56ac88ae5208d869554c1fef3d4698ec489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:6c:22:65:c2:cb:ba:ca:96:84:29:53:79:
01:d8:04:63:f4:05:3f:0a:e2:b1:2f:18:1c:3b:48:
bd:87:0e:64:88:44:5a:e0:db:39:71:ac:aa:d4:09:
4d:09:0a:a0:c4:06:99:1a:ff:04:bb:6e:78:f7:bf:
ce:30:b3:92:f3:d0:28:82:97:70:b3:84:22:aa:7c:
50:7a:7c:a1:fd:a0:98:77:80:5e:47:76:6f:4c:46:
06:80:41:bc:5d:a3:c8:36:27:90:86:0c:c6:ea:70:
20:a2:48:6c:ef:27:4b:00:33:d2:5e:f7:9b:ac:41:
64:14:39:3b:cd:66:11:c9:08:08:38:f3:2b:31:9f:
61:49:a8:1c:49:a1:13:52:f0:de:9a:7a:4a:19:ba:
72:0f:88:7b:a4:c2:94:32:49:ec:47:fc:7f:5c:03:
3c:c1:0c:43:bf:43:5d:8b:ed:53:07:f5:e9:48:d2:
93:f4:a1:e6:5c:99:32:4e:04:a5:a8:a5:9a:bd:69:
de:19:2d:93:7b:a5:1a:cb:4f:c0:1d:8f:0c:ed:0f:
4a:b6:5b:49:b2:75:e8:4a:20:ca:86:81:16:7e:7b:
8b:15:70:7b:2f:b0:39:5f:2e:f8:4d:2c:90:1d:d9:
d4:8e:57:ae:8b:b6:e8:25:9c:72:f4:ad:46:d0:02:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1E:F5:6A:C8:8A:E5:20:8D:86:95:54:C1:FE:F3:D4:69:8E:C4:89
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:69:cb:64:c5:82:55:aa:25:f2:ac:74:20:dc:d4:93:99:a4:
0a:55:73:ee:a0:c9:c2:9b:c6:ce:81:8e:a2:ac:06:70:bf:d6:
29:a2:b5:73:de:65:ee:db:78:b6:71:17:31:04:99:82:05:e1:
1a:7a:27:e6:6a:ee:68:30:5f:c1:68:5c:1c:1c:54:84:ea:3c:
c0:cd:a2:c1:34:af:26:69:87:33:40:8b:24:5b:09:9f:ba:d0:
d0:a0:a8:b2:0c:3e:57:0c:1b:8f:2a:b6:8b:4e:97:bd:8c:19:
9a:e8:48:5a:f0:e7:4c:97:cf:d5:8a:47:5a:bc:8b:c5:13:0e:
27:f7:22:e0:b6:d1:2a:39:16:78:0c:29:f6:c3:47:78:c5:4b:
ce:be:3a:d3:52:ab:91:8c:1b:06:7c:be:1e:63:bd:9c:8d:17:
33:d9:55:ef:d6:2a:79:9b:54:e1:d8:e4:0d:e8:d4:5a:bf:6a:
03:c2:a3:58:79:72:28:98:25:04:27:4a:77:0f:cc:93:63:62:
d3:cb:48:37:69:a1:db:92:5f:ed:dd:64:98:6c:06:a0:70:01:
cc:5c:ab:7a:0e:14:b3:68:3d:0b:e4:95:8e:50:5d:33:2c:5d:
49:1b:5a:25:9d:e4:5a:f4:a4:31:93:55:d1:d5:22:b5:63:2c:
29:ec:bc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:56 2026 by rpki-client