Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: EMOs+VOdp2Vkq6wgJcpuSFzEE3QjRDVlsxZqp/5z5iY=
Subject key identifier: 40:91:07:7B:41:05:E7:93:B2:B5:CA:92:6B:C1:CD:5C:CD:73:A7:75
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 019E1D598102041E94324CAEDEE8103D506A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 09CC
Signing time: Tue 12 May 2026 18:01:05 +0000
Manifest this update: Tue 12 May 2026 18:01:05 +0000
Manifest next update: Wed 13 May 2026 18:01:05 +0000
Files and hashes: 1: 1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa (hash: WqRlSVx1Vu6h+ixUdX0cx9Mi9fCqLKMKSDgwbsVbLZ8=)
2: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: GkUSaHvm3KqDW7ukK1PVKXbMwUte+XVbYxuyi4fsrAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:81:02:04:1e:94:32:4c:ae:de:e8:10:3d:50:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: May 12 18:01:05 2026 GMT
Not After : May 13 18:01:05 2026 GMT
Subject: CN=4091077b4105e793b2b5ca926bc1cd5ccd73a775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:aa:35:b1:b2:2d:e1:fe:2d:9f:16:c5:00:
1a:49:df:80:9f:83:bc:53:9b:e0:6b:ca:a4:1a:49:
47:19:a4:02:e4:ad:c2:ee:66:c9:96:a3:3e:fd:ab:
c9:0c:7a:67:a4:55:2b:9a:b7:80:55:2a:3c:62:8a:
eb:29:ed:c6:89:98:dd:29:75:81:c1:1e:67:0c:f0:
f9:c1:83:c9:e7:9e:7e:73:20:d3:21:e5:9f:e3:65:
a9:19:97:85:4f:07:23:f7:53:b9:05:67:e3:ca:70:
5a:84:5c:18:e8:93:75:27:1f:ee:8a:ae:98:8b:14:
df:93:19:bc:25:4b:9c:65:44:9b:bb:17:39:a6:e5:
47:93:65:52:6f:33:be:b0:17:15:2e:12:02:e2:9d:
53:b3:9b:38:75:c0:15:cc:c0:ab:3f:ce:9c:75:3e:
e1:7f:d2:15:6f:50:07:62:bc:aa:a1:dc:2d:4e:c5:
9e:e8:1a:2d:ef:85:b2:6c:8c:07:5f:a5:e9:96:52:
ae:f5:99:cf:0d:52:94:b2:be:fd:d1:ee:71:d6:bc:
ca:ea:e7:32:63:4a:98:39:af:e7:8a:3e:d6:3d:72:
7c:18:61:30:f5:2f:e2:ef:e5:46:5e:f5:5d:36:1e:
b6:20:e8:fa:81:98:13:e3:ba:37:ca:12:74:d8:88:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:91:07:7B:41:05:E7:93:B2:B5:CA:92:6B:C1:CD:5C:CD:73:A7:75
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c3:fb:9d:99:76:75:cb:7e:5c:b2:b8:6e:c1:20:4a:df:12:
08:25:dd:4a:68:00:0f:46:58:03:a3:21:8b:84:1d:be:a9:a9:
27:d6:38:77:62:76:bc:5d:9d:ac:48:ec:f3:b8:1d:a8:e2:6f:
4d:f7:4c:02:f6:da:bd:08:02:74:fd:0e:7e:a1:6b:c4:f1:b3:
50:14:25:5e:54:83:df:67:86:7b:bb:67:79:e2:6d:7c:61:e6:
ad:18:31:59:b2:67:77:6b:b9:71:3c:eb:c0:4d:b7:e3:4a:cf:
76:73:55:ff:cc:f1:f1:dc:b7:ea:65:6a:a6:51:cf:72:7b:08:
3a:0b:af:5b:9a:96:46:3c:7e:a3:45:d6:83:4a:98:85:60:ad:
64:5f:4f:d7:6f:12:cf:ff:1b:e6:64:1b:42:63:61:83:8a:de:
97:14:b4:ad:da:6e:f0:99:be:44:a1:26:5e:f6:47:51:95:44:
0a:dd:1a:bb:8f:f3:fe:87:1a:ae:61:31:16:b0:d1:ad:00:2d:
f9:10:83:6d:c7:d6:b4:3f:bf:86:57:ba:60:de:89:a5:d8:1d:
88:33:ce:12:50:50:82:f5:7e:69:1e:82:08:72:26:7a:0e:bb:
dd:3e:ad:50:91:11:00:87:02:08:82:62:23:de:b4:d5:95:d0:
b5:a5:c9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:03 2026 by rpki-client