Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
File: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json)
Hash identifier: 0qTcpoiy4yf7CNLvgYHGf/AHpC+/Ct52EWlgN25uCds=
Subject key identifier: DA:32:0B:F7:11:CF:3F:76:35:E2:F9:4D:65:3F:25:AF:D2:03:5D:71
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial: 019E1D90DF55E556591F4123BABB72F133CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
Manifest number: 0621
Signing time: Tue 12 May 2026 19:01:34 +0000
Manifest this update: Tue 12 May 2026 19:01:34 +0000
Manifest next update: Wed 13 May 2026 19:01:34 +0000
Files and hashes: 1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: iAAIrltd38AUaFyengw2nstD4zglthvW3XFe3ZIdg44=)
2: mX8HnTFvLthfSZ2ZAzBIL5WiGxo.roa (hash: JasekT6eOU4dUWNEwUdVF7G0JwY0SRq9zwzctkh7yh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:df:55:e5:56:59:1f:41:23:ba:bb:72:f1:33:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Validity
Not Before: May 12 19:01:34 2026 GMT
Not After : May 13 19:01:34 2026 GMT
Subject: CN=da320bf711cf3f7635e2f94d653f25afd2035d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:48:ef:d3:75:df:5c:40:8b:3f:53:15:9e:
bb:77:26:3c:ca:39:23:77:3f:73:42:e9:2f:d2:c0:
9e:53:81:1e:ea:7b:9d:fb:1a:f3:46:9d:b3:ce:a2:
af:21:69:45:61:09:2a:08:05:48:0c:ea:15:e1:b8:
bc:e6:48:7a:7f:1a:ee:19:8c:01:4b:cb:ea:7a:e6:
0e:0c:07:6e:f8:97:e3:74:b6:4a:f7:02:48:19:34:
97:4d:ae:6f:a6:1a:2b:37:7d:ae:a5:88:fa:65:e0:
ab:aa:fe:c2:6b:e7:7c:bd:bd:e7:ee:3e:12:81:9e:
be:4e:f7:35:00:9b:43:f5:bf:f2:69:d7:dd:2e:a1:
47:de:f6:f4:7b:3d:c8:72:6f:92:f9:86:75:3d:17:
6e:a1:67:45:68:cd:02:61:81:b9:20:c8:8d:21:00:
5b:50:8a:0e:eb:e1:c1:c6:15:a9:13:5a:ca:49:d7:
70:49:6f:f6:80:e2:6e:a6:b7:cf:88:17:d3:22:8b:
fc:4d:b2:65:73:f3:38:4c:87:14:e2:e9:26:cb:51:
95:28:c5:38:68:6d:16:02:4e:34:61:f3:d7:10:d4:
6c:85:ae:8f:dd:f3:24:f9:6f:8f:74:1a:b2:87:7e:
54:2f:1a:20:00:d1:33:48:c6:12:92:d2:38:ac:06:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:32:0B:F7:11:CF:3F:76:35:E2:F9:4D:65:3F:25:AF:D2:03:5D:71
X509v3 Authority Key Identifier:
keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:85:07:49:30:e9:57:e9:5a:8c:6f:43:57:fd:54:5d:0e:8a:
a8:7a:b9:93:8c:cd:fa:10:25:46:fd:13:bf:fb:e3:5f:36:da:
f0:f8:ba:bf:f6:0b:37:40:37:29:06:65:92:1f:8b:f9:5c:b8:
48:d9:c6:21:b4:a7:98:19:b5:7c:3f:d5:a8:38:3c:87:a2:08:
3b:42:cd:96:d5:9d:aa:dd:eb:41:fd:02:72:ba:59:ab:69:ad:
98:78:a3:04:ee:85:e7:d4:93:4a:f2:33:52:f4:62:03:b0:c8:
14:03:51:ac:a4:bf:f6:e0:f3:0f:8a:88:7e:87:7c:dc:da:0c:
c4:f9:4c:e9:23:f2:df:e5:1d:4b:03:fc:14:ae:7f:7f:52:b3:
03:c1:d5:fa:6b:59:c8:99:5b:f7:8e:ed:ac:f6:6f:07:7e:38:
97:52:2b:79:00:a2:d5:05:76:07:e2:d9:1a:b9:7a:c7:9b:21:
45:f5:0a:c0:63:71:ae:54:ba:b6:d5:ba:02:cd:ee:09:a4:89:
89:ac:03:e5:07:8a:ac:98:79:58:fc:ba:b3:1a:fa:e8:71:d4:
c7:7c:51:5f:95:b8:ce:78:0a:1e:4b:40:99:33:e8:f1:6a:e9:
be:01:d5:f4:d6:e9:12:94:4b:6c:32:27:d0:02:8e:b9:98:f0:
b3:c9:b7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:34 2026 by rpki-client