Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
File: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json)
Hash identifier: bSwtoNE29T2t5XDEqyp7Oqk/edmBMnFSc+CAh412iyA=
Subject key identifier: 19:D5:1D:E1:01:BD:CE:D7:57:A4:9B:17:F8:CE:48:0D:0A:47:96:35
Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Certificate serial: 019E216D4C13F00FEA0CCBFCB94AF3FD719E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
Manifest number: 0FD7
Signing time: Wed 13 May 2026 13:01:11 +0000
Manifest this update: Wed 13 May 2026 13:01:11 +0000
Manifest next update: Thu 14 May 2026 13:01:11 +0000
Files and hashes: 1: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: oxLS3oMAzlVceIx2OeTHk5ASPhPy2oGbL7MIJIMX/30=)
2: JrMdq8W_Js69e7PdI-Ct-5yCpDo.roa (hash: g0z8GxHhTedzHVjLXB39V9yW7Ab4PjyuLrPENMUU7AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:4c:13:f0:0f:ea:0c:cb:fc:b9:4a:f3:fd:71:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Validity
Not Before: May 13 13:01:11 2026 GMT
Not After : May 14 13:01:11 2026 GMT
Subject: CN=19d51de101bdced757a49b17f8ce480d0a479635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:41:ae:29:c3:7f:40:71:8e:b2:a2:6c:8a:
2c:c5:d7:72:0e:52:a8:4a:05:d3:dd:bd:9e:16:06:
21:ea:55:26:65:11:d4:6c:ec:ba:f2:f5:7c:3a:62:
39:d8:91:e5:a5:e3:a8:37:ca:9f:59:7a:21:9c:8d:
dd:46:c5:81:4a:f1:7d:16:96:d1:d1:de:e0:5e:51:
47:e6:d0:77:26:4f:81:da:c9:92:0e:bb:87:6f:51:
81:5c:59:49:fa:6e:ce:fc:d0:b0:95:06:d1:43:a2:
58:df:22:1f:7f:ca:04:c3:ce:86:db:e1:32:82:6a:
ac:9c:71:25:78:6a:a6:ca:e0:10:22:46:e9:0c:75:
ce:a3:c6:8b:67:9c:3d:dc:50:fd:df:6d:2c:94:e2:
41:9c:08:66:f1:2a:4a:84:6d:a2:44:b6:bb:fb:13:
fb:60:3c:c5:1f:ba:ec:6e:72:af:5f:18:c7:10:2f:
33:55:80:37:13:00:33:94:ba:77:84:a7:23:bb:c5:
c1:69:3f:bb:ca:c2:7d:0d:04:86:f5:1f:83:b5:9a:
9e:c6:03:7e:82:98:63:9c:07:96:35:95:53:ce:0e:
12:28:88:90:d2:a3:bd:8f:1f:69:1e:d1:b5:92:9c:
12:85:81:0b:1b:32:05:fa:cb:83:9d:e2:32:95:09:
ca:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D5:1D:E1:01:BD:CE:D7:57:A4:9B:17:F8:CE:48:0D:0A:47:96:35
X509v3 Authority Key Identifier:
keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b9:67:c3:8e:40:8e:05:77:57:5f:37:2b:00:49:7a:09:10:
35:4a:c5:1c:e7:12:cb:f2:99:a3:4b:0c:30:3a:0c:f5:38:e2:
66:b5:ba:bc:59:83:bc:7b:9e:7f:a6:22:2c:83:91:c0:04:18:
69:6d:6e:0b:b2:de:94:67:37:f2:63:5a:06:28:28:41:36:73:
40:d9:b2:63:0e:bc:02:16:4d:33:a9:c0:95:9d:bc:aa:7e:ee:
b9:85:21:74:30:f5:dc:17:7b:62:1e:b8:d3:cd:cc:21:25:b5:
aa:1e:33:64:ff:13:89:f8:56:54:ba:e0:8a:1b:26:ed:bc:da:
31:7b:4c:3f:2c:07:4b:bc:2f:f6:50:2d:b5:89:dd:03:b7:ee:
6f:9e:87:72:ee:d0:3c:73:b9:99:20:eb:84:d4:9c:c7:79:c8:
f4:aa:4a:64:63:6e:f8:6e:e0:65:e1:bc:5a:36:78:b9:a0:b5:
9e:4e:f9:8f:0d:ec:aa:ad:c3:e8:f0:d7:bd:c1:4e:9e:0a:09:
63:02:06:69:bc:d6:47:5a:e5:55:7f:4f:30:02:6c:92:e8:af:
e7:e8:3e:09:c6:72:c6:76:54:d1:d2:f9:76:7b:ad:65:67:e9:
a3:9c:1e:20:ba:90:c6:30:80:29:78:1e:93:67:0b:1e:d4:3f:
e8:8a:f3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:38:47 2026 by rpki-client