Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
File: p4kEQNrxw6w4dz6FIVES90twYjI.mft (raw, json)
Hash identifier: US3ElN0gDqTzFJ8QKFOAofQdFdFXQyul63ZhyJ76Jzc=
Subject key identifier: C7:31:A9:52:8C:1D:9B:86:F9:74:C3:77:87:40:49:F6:7C:B4:5E:AD
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 019E1D90117CF9D9F544DFB1F3706ECB7C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
Manifest number: BD
Signing time: Tue 12 May 2026 19:00:41 +0000
Manifest this update: Tue 12 May 2026 19:00:41 +0000
Manifest next update: Wed 13 May 2026 19:00:41 +0000
Files and hashes: 1: U3lhosWDCWkOpFdsH0InZo3L2So.roa (hash: cA9YSxfYf8puSlmrAh+xgnlh5hfoxYmLxjTNe6lxvv0=)
2: p4kEQNrxw6w4dz6FIVES90twYjI.crl (hash: gWNMpNfMmEL4wii6h0m0yUPg46O/lA++JBE1Ndp5gBc=)
3: rbySto4bwasyCSyfLG3tTaOVj_s.roa (hash: wd1Ap/uduw/P7yoJlzMsKGRJqc4D/dsTIBcvCHP1qZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:11:7c:f9:d9:f5:44:df:b1:f3:70:6e:cb:7c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: May 12 19:00:41 2026 GMT
Not After : May 13 19:00:41 2026 GMT
Subject: CN=c731a9528c1d9b86f974c377874049f67cb45ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:a7:96:66:1c:e3:67:88:a2:d7:ca:b4:b1:
bb:9f:43:f2:f8:5b:08:d6:e0:4b:dc:6e:b1:35:b7:
55:5b:fb:56:54:f5:e8:83:51:20:f9:c4:9c:40:f3:
27:08:7e:56:3f:6b:8c:b4:79:7b:e4:30:0f:70:87:
21:56:fc:88:fa:79:a4:4f:f7:00:13:93:4b:6b:c6:
df:ea:56:65:62:4e:e0:1d:9a:f0:96:3e:91:e2:54:
21:e2:59:04:c1:6e:53:42:f7:41:8e:4d:cd:71:94:
4c:a6:2d:3b:14:c4:96:76:22:32:c1:20:70:70:05:
2d:6a:64:f8:4f:19:7b:26:d8:85:cc:8e:4d:36:fc:
7a:b7:c0:b0:d4:b7:8b:12:42:22:0d:f2:f5:49:dc:
e3:44:ef:99:30:7b:be:87:9d:b3:c1:25:ae:c9:03:
3e:40:04:a7:43:5e:bd:fe:82:b7:ab:af:b0:ac:93:
c9:38:09:1f:fc:8a:e0:f2:b6:75:d2:4b:98:b7:9e:
c9:8b:3f:14:e0:4b:4e:b3:4f:3e:48:06:7a:79:92:
2e:25:5e:01:b1:f4:e7:cf:7c:c9:28:eb:2b:15:d2:
d9:3e:37:d2:10:71:15:ba:18:5e:75:fe:9a:10:35:
18:7b:59:cf:a3:00:58:6f:d5:57:c2:51:27:09:89:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:31:A9:52:8C:1D:9B:86:F9:74:C3:77:87:40:49:F6:7C:B4:5E:AD
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:43:8e:82:1a:6d:e6:82:22:0c:fb:b0:bf:33:ae:e7:1d:70:
5a:72:17:b0:51:f2:dd:8e:32:c8:e3:44:64:e7:b5:47:92:ce:
f8:ba:35:dc:8c:e6:c2:f7:e4:bd:5f:be:9f:8f:a1:72:e5:67:
ac:41:2c:90:86:cf:07:78:73:b3:ba:d4:bd:01:46:c3:3b:12:
76:ba:e5:50:6d:b7:e9:74:3e:ef:d5:0a:64:cf:06:31:3f:c3:
84:04:e2:03:04:fb:c4:a2:89:cd:65:eb:96:41:49:29:b9:03:
5d:5a:39:6f:56:51:d5:79:2f:da:48:70:1c:b6:3e:2d:a7:e0:
8a:99:cc:73:8e:72:a5:66:1a:bb:e0:b7:a2:f1:8e:7b:d9:1f:
0a:d5:b1:1b:84:eb:da:10:03:a8:0f:19:e0:74:7e:d0:64:31:
fe:88:ac:fd:e2:c8:8e:2b:54:2c:b2:b4:cc:d0:66:bd:18:0a:
8a:d5:95:7e:c2:4f:5b:9c:48:05:e5:e2:35:a9:2c:14:57:d4:
33:a8:3e:14:42:3e:2f:c4:e9:a3:04:c0:02:0f:d3:e2:b6:6c:
10:e4:95:9a:1f:72:6a:f0:3c:fe:d7:c9:74:0e:20:b3:39:e2:
08:77:f6:32:5c:59:e1:86:e6:c0:69:f8:93:eb:c0:5b:69:20:
2d:16:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:03 2026 by rpki-client