Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: EzeteaICj5lExkeArOR0q++mv05iU2s6m0hlqaWKqY8=
Subject key identifier: 25:F5:B4:BC:D6:BD:49:B3:59:95:34:5A:3D:D4:DC:BE:11:CF:86:3B
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 019E1D232B7672E20BCF2C7C32DEB220DF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 0EF9
Signing time: Tue 12 May 2026 17:01:44 +0000
Manifest this update: Tue 12 May 2026 17:01:44 +0000
Manifest next update: Wed 13 May 2026 17:01:44 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: eEWVao7G0V2Jjw6QS4ryMcvSMQpxWkwjuz3G0/r+pqY=)
2: k6jNcpaTNPSlXj617Gg3gS62Bto.roa (hash: 8LQYJjtnAC4ChUuR0xJhVpC5xdVYrcixNySIFaow6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:2b:76:72:e2:0b:cf:2c:7c:32:de:b2:20:df:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: May 12 17:01:44 2026 GMT
Not After : May 13 17:01:44 2026 GMT
Subject: CN=25f5b4bcd6bd49b35995345a3dd4dcbe11cf863b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:3b:9b:ba:7c:65:6c:68:46:29:4b:44:42:
e6:b7:ce:64:f3:38:c3:d9:6a:64:74:3f:e8:93:58:
21:c7:98:39:f4:bf:75:cf:5b:6c:7a:35:46:84:46:
2b:1f:25:c9:8f:20:1a:a4:36:bf:53:63:3e:90:d3:
f8:d6:5e:1e:bf:76:82:5d:4b:d4:6a:21:f1:d1:35:
4c:d4:a3:14:a6:83:3c:5c:8f:4e:ac:b9:04:5d:20:
4e:1f:2f:db:1e:bb:41:02:7f:ad:b0:fc:56:ce:3b:
5b:54:4b:ed:7a:16:7c:16:ec:59:53:f0:cb:84:e1:
78:f1:79:ea:c5:aa:13:b8:78:78:35:47:e9:15:ac:
db:aa:38:69:06:d3:1b:05:3a:74:36:61:b0:57:a3:
78:fb:26:ec:37:96:66:9c:b8:ef:46:0e:72:99:6c:
63:75:96:97:7c:63:89:97:fd:b4:d3:1d:74:66:85:
df:13:bc:60:b7:78:28:7e:5a:4a:7e:43:a6:b6:66:
d6:5e:65:47:aa:80:4a:02:79:3a:73:01:40:4f:03:
f4:d6:cb:3e:ce:6e:b9:95:ab:81:65:1d:68:b6:13:
a8:cc:2b:de:de:fc:7c:44:4e:7b:56:1c:47:1f:8d:
b4:04:9b:10:05:bb:6d:10:63:bb:87:39:30:e1:70:
2a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F5:B4:BC:D6:BD:49:B3:59:95:34:5A:3D:D4:DC:BE:11:CF:86:3B
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ce:2e:a7:c6:ed:9c:d3:64:61:bb:aa:e7:ce:c2:f2:f4:9b:
82:49:91:23:bd:49:43:4b:1a:8e:43:3f:7f:3d:ac:52:ff:37:
a5:db:27:83:5b:00:74:fd:4c:93:2a:8c:cb:d9:1e:bb:29:3e:
03:12:8a:7d:3f:43:f1:ca:ad:d2:d5:d5:35:f2:3b:0f:8b:77:
df:91:25:83:09:63:97:65:9b:cd:48:ff:03:5c:7b:01:0f:1b:
be:a5:b5:ea:4e:e2:ec:7b:97:07:ce:8d:7e:bc:44:90:25:b5:
b6:f5:bb:a3:27:6f:a6:7c:fd:2d:53:44:3b:9c:9a:ce:60:ed:
8e:90:f3:cf:1c:19:37:5f:4a:f2:4c:30:2a:2b:ed:52:37:2e:
ec:a3:4a:31:19:df:bc:e5:58:24:01:02:1f:f8:cb:bc:fa:73:
3b:64:ab:bc:87:01:0a:95:80:77:5b:25:49:52:80:87:e3:00:
8a:25:f7:cd:36:2a:c4:e9:20:6d:5f:53:fd:4d:74:10:45:96:
b1:d1:53:65:e8:b8:d6:cc:8d:cf:1c:e9:eb:2f:21:96:3e:66:
9d:1f:91:e5:11:33:8f:b8:7d:3a:29:36:ac:6e:2f:89:98:45:
35:49:5c:25:ac:99:61:ac:71:3f:63:9a:04:29:84:8a:4f:f2:
26:ec:88:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:50 2026 by rpki-client