Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
File: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft (raw, json)
Hash identifier: OQdI37KM9Z+6ZQjxJ/vallqSfkdsgYzoYBg1RoXG564=
Subject key identifier: 02:F2:08:F8:80:3F:96:61:01:16:B7:2D:DC:E0:CF:DD:E2:CA:C8:F3
Authority key identifier: E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
Certificate issuer: /CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Certificate serial: 019E1DFDE0A58C28A3A90453D3B1BFFA2973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
Manifest number: 07C1
Signing time: Tue 12 May 2026 21:00:37 +0000
Manifest this update: Tue 12 May 2026 21:00:37 +0000
Manifest next update: Wed 13 May 2026 21:00:37 +0000
Files and hashes: 1: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl (hash: oqTbLQs3qedChrx7Jpo4uWDLKk7KXDdbjzlQPN/w7OI=)
2: 6-2FD8HR51guZuZo3woN4IVR9zc.roa (hash: PJc3A8dXSGr4yP32dRfCtlI52+k/p1Mtsy/ZQcI6iOs=)
3: X7BmyTsEbGnFLW3J_leT1himypU.roa (hash: YLQzVzV/7MjHj/da8FwrBCVQuruzlxfvIrqTRIBeu1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:e0:a5:8c:28:a3:a9:04:53:d3:b1:bf:fa:29:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Validity
Not Before: May 12 21:00:37 2026 GMT
Not After : May 13 21:00:37 2026 GMT
Subject: CN=02f208f8803f96610116b72ddce0cfdde2cac8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:86:a9:43:d0:07:13:30:65:ae:17:28:06:
a1:3e:d5:67:73:75:97:ae:1b:c5:35:12:db:3f:b1:
27:bd:14:20:4b:8c:e0:16:e6:c1:d2:91:f3:0d:ab:
2a:03:c4:4e:6c:df:16:e0:7f:8a:4c:47:e7:f7:76:
30:ca:eb:ef:e7:89:31:b4:e3:ea:0e:5d:18:13:cc:
cb:ea:06:01:38:c9:69:33:39:26:a6:46:98:92:c5:
c3:37:eb:46:37:b6:3c:18:f5:a6:58:dd:07:99:db:
3d:92:5b:df:1a:5f:18:bb:35:54:de:d6:fd:d9:29:
35:d1:e6:bf:87:06:15:04:32:57:7d:2b:85:96:57:
4a:82:0e:ba:d0:a8:b7:4c:24:7e:5e:53:bd:e8:59:
bd:19:39:b2:3b:1b:b0:15:8e:3d:2d:8e:85:5c:e8:
80:05:8e:d1:41:f5:9f:16:3d:ba:2f:b3:ca:98:f3:
86:17:b5:82:1e:ec:67:ff:9a:fa:8c:f7:61:cf:c4:
50:73:3d:a9:0e:d2:1f:0d:f7:2b:9a:ee:ed:a8:b0:
68:0d:73:da:b1:6d:b9:88:01:9b:4f:99:04:ef:83:
86:44:0d:c3:07:7f:4a:49:62:29:aa:55:03:db:49:
52:49:39:04:33:80:92:e9:91:e1:4d:72:fc:fe:ba:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F2:08:F8:80:3F:96:61:01:16:B7:2D:DC:E0:CF:DD:E2:CA:C8:F3
X509v3 Authority Key Identifier:
keyid:E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:97:30:ba:88:84:8f:7a:45:7e:d0:5d:7f:37:ba:8f:2a:6d:
c9:3b:80:11:53:85:96:02:01:cc:93:9d:c2:b8:47:7b:49:3c:
cc:95:2c:d8:39:d4:44:90:bf:68:5a:22:dc:9d:fe:80:37:21:
1e:eb:18:71:58:0d:06:40:0b:c2:19:f9:d6:4c:34:2c:90:9d:
d8:be:d8:54:b4:7f:3f:f3:6b:b0:6b:58:ab:e4:a2:fc:cd:41:
e4:7e:52:4a:19:11:fb:93:10:8e:7b:b8:91:ea:50:cc:d1:aa:
a8:c9:ab:e3:70:07:c1:17:47:c2:e0:09:06:7c:4c:31:39:a1:
e2:24:a3:2b:1f:1a:de:97:9e:d7:8f:0b:78:50:8e:b9:1e:49:
02:54:de:ae:65:84:15:7d:6d:fd:8b:fb:3b:ea:5e:de:f8:53:
9c:76:86:e0:7e:1d:e1:e7:8d:ca:02:98:6d:88:4e:a7:9c:8b:
d7:bf:50:09:a0:aa:f0:3e:94:b9:ac:4b:31:2b:f4:4b:70:4d:
5e:f1:02:d0:a5:0e:fd:a0:b3:86:15:74:0c:d0:2c:38:60:9d:
e0:ae:f0:a0:8d:67:06:8c:49:9c:38:18:d0:6d:ae:fb:b2:2f:
4f:fa:eb:7a:3e:3e:13:3d:b7:ab:44:31:06:ae:48:a9:74:d7:
46:a5:f7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:03 2026 by rpki-client