Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: Zog7X/GUC1KWUGgTG54h4NxySv3S7VuFrEUjEB2T/oA=
Subject key identifier: 0C:BA:A1:CC:7E:EE:26:84:A6:7D:FC:32:B6:E4:0D:D7:84:9E:36:CA
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 019E1EA3119F39DC316EBBCA894529B1F7BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 00:01:03 +0000
Manifest this update: Wed 13 May 2026 00:01:03 +0000
Manifest next update: Thu 14 May 2026 00:01:03 +0000
Files and hashes: 1: NU0khScwjPjv2Td0G2zhVpmilbA.roa (hash: AeqeiYhPTRBagvHIsxnzHVAbHQ3SfkNkz9Z07JIdpsg=)
2: QRtiZIJ3lC4wddKs5UQgizYT0KY.roa (hash: lrhTL8oElij8rm8reXnXmQ+K5/YFB6C+f/8MDpdyFUU=)
3: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: golMjEaAidgUTOS6SGMhVIVU79nf8jnjKr9m8s3JeK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:11:9f:39:dc:31:6e:bb:ca:89:45:29:b1:f7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: May 13 00:01:03 2026 GMT
Not After : May 14 00:01:03 2026 GMT
Subject: CN=0cbaa1cc7eee2684a67dfc32b6e40dd7849e36ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:e6:e1:ba:56:12:cf:3a:d0:06:40:d6:97:
ee:30:28:90:b1:af:66:fd:f1:62:d9:e0:73:20:77:
a4:c9:b2:b4:c6:5d:6c:37:34:cf:26:38:8e:e8:93:
b1:52:79:bf:1f:c5:5f:4c:6d:0c:0d:3f:cd:aa:b2:
f8:c3:47:2d:55:b5:ac:b9:0b:68:c9:96:58:f7:8a:
f0:f0:35:9f:11:80:91:1d:09:f5:94:ac:52:41:16:
bd:7d:c1:93:e5:3e:29:b0:2d:6a:e1:92:fb:23:b1:
e3:0a:fb:e5:60:9f:1f:1d:a0:bd:42:d0:3b:de:30:
e5:c1:46:c5:46:c0:c7:62:0c:bd:f6:a0:45:a5:21:
47:bb:4f:3e:f1:a1:44:bc:06:83:be:15:72:fe:13:
7b:dc:42:7d:41:05:e4:66:3a:4d:d4:a5:99:4d:41:
aa:5e:cf:fb:2f:27:c4:a1:3c:c7:61:f0:cd:0e:80:
fb:11:94:02:15:d5:0d:4d:4b:65:82:15:ca:0b:d5:
c6:95:fb:5c:25:b6:ed:a9:b5:5d:b4:ef:94:88:60:
99:a4:78:82:25:3d:8f:a1:38:7c:cf:f4:30:75:d7:
c4:c6:d8:80:27:d7:9a:98:05:60:f0:0a:eb:74:92:
66:38:a5:56:30:f8:23:a1:63:11:2b:f4:fb:f6:1c:
93:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BA:A1:CC:7E:EE:26:84:A6:7D:FC:32:B6:E4:0D:D7:84:9E:36:CA
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:60:97:a2:41:5b:df:2d:a7:dd:60:a4:b1:2d:a2:3c:48:b1:
de:2b:83:c6:94:31:52:ae:ee:20:a0:9e:5a:f7:42:34:1c:bf:
b6:11:bd:23:25:06:b8:65:84:29:dc:95:ad:bb:02:0f:73:f5:
c8:29:5e:2c:5a:21:9d:be:8e:56:84:35:c1:b8:9f:31:d6:69:
ea:8a:f2:19:2f:94:70:b9:6e:84:b0:3b:58:95:7b:a1:62:9b:
fb:cc:67:9e:ca:ec:97:c7:59:c2:49:e9:ec:1c:ee:ce:d3:7b:
3b:af:b0:b7:8d:97:ac:52:f2:24:62:fa:e3:52:69:be:75:59:
65:8f:75:ce:ce:d7:a1:96:07:56:75:29:ea:ee:22:d5:67:02:
65:b1:3c:ce:1c:d0:7c:a5:c0:f0:ac:8e:4f:6e:3f:7d:22:2d:
76:c7:aa:1e:6f:83:ba:3f:f3:09:01:29:8d:c8:d8:d5:49:7c:
78:56:6b:64:02:5c:5c:b5:ed:44:e8:f1:5d:9b:ed:9f:09:4e:
8a:08:43:7f:0e:c7:d8:f3:6e:cb:42:3e:37:04:64:fd:88:f6:
cb:02:3a:e9:c4:3e:e1:89:28:4a:12:81:ad:ea:be:d9:27:c7:
5f:8b:20:37:8e:1e:c7:5c:bf:d7:7b:02:f3:9c:dc:a1:25:21:
77:6f:1c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:51 2026 by rpki-client