Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: ED70FmoxkDKk03ykP8nij6Pv4NGT+8sBw9u4HJPaLXY=
Subject key identifier: 04:64:9A:DB:06:15:FE:85:6F:F4:73:8D:34:41:48:B2:F0:CD:CB:86
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 019E1D90E1383D63C077504BD26F82DD8D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 0C7D
Signing time: Tue 12 May 2026 19:01:34 +0000
Manifest this update: Tue 12 May 2026 19:01:34 +0000
Manifest next update: Wed 13 May 2026 19:01:34 +0000
Files and hashes: 1: 1-qSiDXrAhQQiEkJKVibhHHT9XHY.asa (hash: ek3lFQhBM69m11IFyrspDmCB7+jlGlnfEWGxNiaYwFg=)
2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: c3M06ioqv9ZH5tlw8S+NtQK3pIoWz3NsZWwAy1r8tTM=)
3: s-PKc_tu2wV4rS8DFKDtN3pEWOo.roa (hash: RIeIk6mysjr3waBR5H6D0lD1jhhyLuowL03Fip2BNmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:e1:38:3d:63:c0:77:50:4b:d2:6f:82:dd:8d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: May 12 19:01:34 2026 GMT
Not After : May 13 19:01:34 2026 GMT
Subject: CN=04649adb0615fe856ff4738d344148b2f0cdcb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:e3:37:2d:1d:64:57:f8:35:ef:f0:2b:24:
f9:10:c1:75:24:24:48:40:15:25:33:21:39:45:70:
3d:12:dd:a0:26:e8:a5:01:fe:df:43:22:3d:51:74:
30:2d:a3:70:00:51:17:08:2a:30:b3:dc:c6:6b:4d:
f0:cd:02:b2:92:1e:38:f6:65:19:82:af:6b:99:3d:
18:bd:6e:dd:7c:84:ee:2c:e8:83:f5:53:b9:6f:63:
f1:93:f0:4f:31:3c:20:c6:29:01:d9:b5:b6:51:1d:
dc:fd:19:89:27:d9:e6:df:1e:b2:d6:b2:76:6d:10:
ff:20:e2:b7:b9:0f:b6:12:05:7a:72:fa:d0:c1:e8:
fc:1f:38:26:0d:0e:d0:69:4a:ca:70:91:9a:e4:d1:
1e:db:08:92:b0:70:ab:0b:72:0c:b5:ee:67:58:12:
8d:be:34:35:08:1a:e0:d3:42:c4:87:a6:90:8e:fd:
60:df:5e:4a:0c:f5:7e:02:9c:08:47:14:14:61:a9:
70:32:9d:eb:db:b7:63:cf:de:31:12:48:52:97:ea:
40:3a:cc:1c:6c:c7:30:f8:81:31:62:b0:bf:92:90:
9f:3b:b5:a5:f8:c9:1d:b9:a6:9a:5c:42:f0:cf:27:
aa:20:91:a7:95:68:2b:71:73:65:e6:09:0d:89:57:
89:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:64:9A:DB:06:15:FE:85:6F:F4:73:8D:34:41:48:B2:F0:CD:CB:86
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b0:34:ac:7b:99:0b:67:ba:1d:4b:74:1d:1d:57:17:8e:c7:
b0:f4:90:3e:03:59:07:c9:f9:3a:1f:a2:f5:df:34:c0:56:d2:
70:57:b2:dc:32:af:5f:b3:80:0c:79:31:9b:28:d1:b9:98:5f:
49:f2:fd:7d:2c:6a:9b:cd:2a:a6:2f:5f:0d:0b:71:13:b8:02:
56:14:c6:e3:e3:c6:b4:a7:fc:b7:0e:fe:22:3f:0d:35:31:c7:
41:66:5b:02:cc:c5:d1:88:f0:a3:33:e4:97:b7:90:70:87:d6:
c9:71:05:c2:0c:4e:bf:ad:a0:2d:6f:9f:7d:6e:a3:f7:99:3b:
e4:71:68:c0:60:f8:e2:ae:1e:dd:f8:a4:f0:7c:ee:ec:43:be:
07:7c:54:cc:7d:35:2e:a6:fd:1c:73:56:0b:c9:c1:5c:b1:e4:
85:5f:05:87:4c:58:ba:96:39:77:6d:84:8d:53:da:86:c5:06:
8b:89:c5:a0:e7:05:89:c7:d0:bf:0a:a6:61:10:4a:12:0c:4a:
76:d2:22:47:7c:b7:a7:6a:46:d6:f1:fd:40:47:b1:de:f4:01:
3f:e9:12:b8:6b:a8:1c:42:7d:13:c4:fd:ed:85:02:59:09:a1:
93:db:b9:18:18:89:ad:0f:1c:61:44:e5:2f:ed:84:c8:5c:73:
2a:e2:ef:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:36 2026 by rpki-client