Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: 2Fcjb6nfGZohrZtRGu6xHMSYXsPm28Pdh3SRfZB8DZ8=
Subject key identifier: BB:35:50:EC:01:A7:A4:04:43:C5:CA:E6:C4:B5:3D:58:AC:26:F2:C2
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 019E1D90212C45AF230CF526324319F9C819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0FBE
Signing time: Tue 12 May 2026 19:00:44 +0000
Manifest this update: Tue 12 May 2026 19:00:44 +0000
Manifest next update: Wed 13 May 2026 19:00:44 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: qVmN51+d/J0DIB5O/pLaNLL2lQvmgtkpadutmwoympw=)
2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:21:2c:45:af:23:0c:f5:26:32:43:19:f9:c8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: May 12 19:00:44 2026 GMT
Not After : May 13 19:00:44 2026 GMT
Subject: CN=bb3550ec01a7a40443c5cae6c4b53d58ac26f2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:d1:b1:29:2e:d1:f2:a7:5a:9e:39:91:9d:
a0:99:e7:47:99:c1:eb:00:54:21:02:31:de:83:46:
e2:5d:26:dc:dd:67:f8:7e:71:5a:fe:c2:4f:f7:a0:
47:b8:ee:0d:94:04:9b:90:81:1b:d6:b2:86:bd:f3:
b2:50:b0:c7:e7:94:af:3c:8a:bc:8c:04:55:6b:f5:
3c:38:9c:ef:0e:b2:d7:0f:a0:2a:49:57:38:22:a9:
1b:f4:a8:33:e7:af:e7:ec:02:ad:7c:48:a6:a3:c7:
04:62:94:bd:3e:9c:4f:a2:c5:2a:d3:78:97:db:38:
52:33:73:d5:96:60:5b:b8:d9:d8:77:fc:22:cb:85:
ec:6b:2e:20:c9:f9:37:67:2b:5f:8f:bf:07:7e:d1:
d6:a0:0b:53:f4:ae:6b:59:92:95:0b:ed:5e:9c:6a:
24:5c:20:a1:fb:55:a0:ee:a4:f8:80:11:c2:86:1f:
2f:69:7b:5c:6c:32:90:3e:a7:72:c8:98:3b:3a:cc:
f4:0c:b6:7a:a0:a4:59:a2:5f:5a:31:55:6b:2e:41:
19:75:8f:cd:14:f7:a0:c7:32:4a:98:50:2c:35:5a:
36:5c:01:c6:fe:dc:44:03:ad:97:4d:b2:6a:9b:4b:
34:dc:c4:30:6a:42:a6:67:9b:fd:fc:d5:5c:88:e8:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:35:50:EC:01:A7:A4:04:43:C5:CA:E6:C4:B5:3D:58:AC:26:F2:C2
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:fe:d2:4e:2f:fe:96:ba:db:4b:fa:7f:2f:9a:3f:25:59:62:
fe:bc:c9:16:c0:7c:bc:50:83:c5:d8:b9:be:cc:9a:71:2e:0a:
f8:06:11:9f:aa:17:63:42:3b:0d:4d:52:47:a3:d1:21:84:d0:
36:86:39:57:62:3d:94:90:47:a1:50:b1:72:83:f6:cd:e7:24:
c7:30:6a:25:62:a4:7d:20:39:64:aa:58:a7:b4:19:44:1a:13:
d3:67:94:25:e1:75:67:5d:bc:23:72:5d:81:ae:cc:49:1d:4e:
3b:47:92:df:96:0d:c8:07:1b:55:a6:bf:01:e0:88:32:02:06:
4c:b2:61:86:06:33:ed:6b:47:3d:2b:5a:10:98:7d:75:9c:ee:
36:9d:a1:ac:df:35:58:7f:8b:d6:36:e1:4c:bc:e1:21:41:8b:
03:04:cf:b8:99:30:ef:fe:f5:7d:38:a5:c1:6a:27:82:84:75:
d2:12:ce:e4:4d:f2:5e:7f:46:22:b1:21:b5:c8:f5:61:f1:9a:
37:33:77:13:f6:e5:03:0c:7b:82:5c:be:90:43:a3:c2:81:7f:
39:d3:e8:86:01:e2:28:f7:1d:b4:1e:b3:70:c2:ca:f0:e0:ed:
08:7b:85:0d:c1:ef:02:0a:b4:76:ad:c3:5e:49:9b:fb:f8:ea:
47:d6:1b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:14:25 2026 by rpki-client