Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: dPW1ryToA0ZJ908PzXdr9q4UnFydo+BjCesbkiLz1Ps=
Subject key identifier: 1E:7B:96:1B:6C:CC:17:11:95:E9:83:6B:5A:79:33:3C:FC:56:67:04
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 019E1F10EB770CE9A07B67BEAA4EB5FE5B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 12F6
Signing time: Wed 13 May 2026 02:01:02 +0000
Manifest this update: Wed 13 May 2026 02:01:02 +0000
Manifest next update: Thu 14 May 2026 02:01:02 +0000
Files and hashes: 1: nPVHMKh_KfMvRao_vET8GSNdB60.roa (hash: CNFNDT0hozsG/GOj4JydTWPL4u34Bu99WDiqKSdCSGY=)
2: nT0dZV9vpJOe4Ur34PRwza0i0vo.roa (hash: NbPGPMvzh32ZwAt9Bg1XTBpSWoDxY/0tDyiOFU+i+30=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: Rv3r1ozpmfbNHeg+CWi37RH03RRZj2EKTF5G+IxR3iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:eb:77:0c:e9:a0:7b:67:be:aa:4e:b5:fe:5b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: May 13 02:01:02 2026 GMT
Not After : May 14 02:01:02 2026 GMT
Subject: CN=1e7b961b6ccc171195e9836b5a79333cfc566704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:aa:73:5e:a9:fe:e9:ae:f1:1d:37:51:a0:
49:55:0c:1b:6c:3d:c6:b1:79:34:65:6a:14:a3:6a:
79:5b:df:f3:02:1b:ee:fd:33:d6:51:df:68:9d:5e:
a2:fe:a1:cb:8e:dd:08:58:b1:ba:37:f8:10:c1:97:
65:0e:88:18:ce:78:cc:1e:4e:a5:b6:ba:f1:f0:f4:
81:02:9a:5e:b4:9f:d5:b1:8f:6d:20:8d:73:17:01:
c3:d3:a7:63:67:93:c1:4f:af:51:44:a5:f7:d5:d8:
db:76:7f:46:e7:44:36:b9:71:6f:7c:51:3d:ad:2d:
fb:f5:16:4b:51:15:00:14:42:bc:fa:5c:6c:20:32:
91:97:67:33:48:c8:ee:80:19:d9:66:06:d5:7c:06:
b3:91:d2:24:ec:98:70:77:15:8d:23:41:ea:7e:7a:
c9:40:4a:85:36:ec:bf:76:17:5d:e2:cc:26:44:68:
b8:c7:76:3b:20:6c:04:13:88:f0:00:42:cf:ab:6c:
56:27:a8:0e:3b:d3:0b:ae:84:25:e7:48:45:c4:3d:
a9:d1:47:2d:08:3b:56:e1:0f:61:c6:50:7e:32:16:
8c:0e:92:b2:0f:13:9f:1f:fe:e4:e2:e4:26:2a:c7:
2c:9d:23:13:12:8e:97:a6:c6:be:19:98:46:22:77:
d7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7B:96:1B:6C:CC:17:11:95:E9:83:6B:5A:79:33:3C:FC:56:67:04
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:40:f7:69:01:ed:88:1b:69:80:ed:97:5b:76:9a:f8:f8:2d:
e1:25:6e:cc:fc:ad:ce:ca:2b:2c:c6:89:29:e3:d4:2c:0c:4d:
68:84:83:34:f7:75:4e:fb:42:7e:3b:0b:fc:c0:13:d9:2e:0c:
76:c7:dc:db:1d:ad:b2:6e:1f:bb:7b:80:3f:52:47:a0:95:fb:
d8:09:75:8b:fe:14:1f:17:e8:1c:61:ae:0b:4a:b7:6c:2d:0c:
17:b0:a2:2f:90:b0:dd:3f:19:40:23:5f:72:d9:1f:a2:fb:64:
33:1b:c0:3b:8b:36:c9:52:08:3d:fd:ca:31:27:eb:24:58:9a:
03:e2:9f:5a:40:65:e1:d4:b2:b1:19:a5:9d:9e:fc:bc:99:f4:
55:e5:a1:8b:e5:b0:bc:cb:da:20:da:ae:06:a8:06:6d:6d:fb:
70:95:36:8b:15:9f:b7:f3:66:6f:ae:a7:6e:20:84:fb:99:af:
0f:f4:dc:e3:c1:52:b4:64:60:fc:87:73:ce:48:64:19:b2:ac:
1c:4b:1a:02:88:bd:0c:bf:1f:fc:42:dc:c1:d3:94:2d:00:6e:
9f:9a:b8:17:d0:5f:b1:46:6f:2e:30:52:f8:e9:81:c5:14:af:
60:fb:a7:7c:c4:36:40:59:99:fe:f8:5a:8d:5d:87:fd:9e:f6:
2e:62:e6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:33:56 2026 by rpki-client