Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: 5AQgNhO4BfLaOBHYwmW9lHNiMoPgeRWW2AS+LeLP9e0=
Subject key identifier: 71:84:53:01:C2:F2:5D:25:C9:6E:A1:07:61:7D:B3:9D:41:77:E0:43
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 019E1BD92261E20DACAB4E15B7F9883223C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 11:01:15 +0000
Manifest this update: Tue 12 May 2026 11:01:15 +0000
Manifest next update: Wed 13 May 2026 11:01:15 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: CFDL45PuSwqE1GZcQMfULYtXXlG3eUUdHiQGAsHTjCM=)
2: J1Zd6j9Lcwtys2PuV4W0VrM-mt4.roa (hash: 0QTHJDhGxK5m6zxqs1yz2ztZUhs7s6VuZHp2XlfhZqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:22:61:e2:0d:ac:ab:4e:15:b7:f9:88:32:23:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: May 12 11:01:15 2026 GMT
Not After : May 13 11:01:15 2026 GMT
Subject: CN=71845301c2f25d25c96ea107617db39d4177e043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:b1:5f:4e:27:6e:62:dc:be:65:39:40:ac:
f8:49:c4:98:8a:ce:59:11:7a:6e:62:12:1a:ac:47:
30:f2:79:78:e0:2a:57:e7:0e:3a:0f:57:ac:7a:c1:
de:c1:c5:59:f4:a6:c7:7d:5c:7a:23:64:b0:8c:2a:
49:6a:c9:76:9f:20:b5:01:d7:38:b8:e4:3b:5b:e8:
ad:95:71:66:d0:c0:04:85:1b:97:c2:5a:49:a4:34:
7f:e0:95:86:5f:ab:61:fc:6d:e4:1d:c2:07:7d:2c:
c8:17:c5:6f:29:96:60:cd:f6:1a:3a:6c:fe:66:6a:
b7:58:a2:36:64:6a:8f:2f:ee:9d:bf:4e:20:8e:6f:
a9:ee:76:35:a4:2c:c5:c6:61:11:ff:7f:ba:33:7b:
94:4c:d5:45:32:11:99:71:57:ef:09:8e:bb:7d:9d:
ba:cc:79:cd:88:d8:68:9e:14:33:62:ac:93:2b:d5:
81:ef:0c:a0:19:21:4e:cf:40:ae:f5:b1:38:9f:b0:
c5:d0:12:82:2b:b7:51:3e:ab:75:4d:0c:f0:2e:94:
0c:47:d5:50:bc:06:f5:85:ce:ce:f4:09:bf:c3:04:
b9:f1:b2:8e:c1:d3:d6:b9:8a:de:08:25:47:49:40:
64:21:11:92:26:93:fb:66:50:a1:37:0c:d8:fb:a7:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:84:53:01:C2:F2:5D:25:C9:6E:A1:07:61:7D:B3:9D:41:77:E0:43
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7a:bd:94:ff:a2:86:38:96:02:8b:fd:e2:3c:77:17:30:6f:
1e:7f:c5:3c:40:c7:02:85:80:11:32:5b:86:ca:52:f5:56:6d:
07:25:e1:52:96:5d:80:ad:8c:46:1a:3e:7c:e6:13:60:b8:1f:
cf:33:59:b0:fd:8d:94:50:06:55:15:fc:60:8a:84:b3:16:0a:
f5:42:24:a5:00:d8:cb:32:8f:e1:cc:95:5c:f0:03:83:9f:d7:
f0:59:a8:8d:7a:1a:00:3c:61:a8:dc:1a:49:e5:ee:cc:a3:94:
a5:3e:b0:78:94:83:7d:bb:75:f2:00:5a:87:11:95:e7:94:68:
87:26:4d:f6:f9:d2:23:46:ec:32:69:6b:e9:55:8d:15:13:0f:
4d:b8:96:16:5f:3a:ec:34:a1:bf:34:0f:d8:57:a5:b3:0e:de:
45:76:44:49:2f:1a:22:0e:8e:69:85:b6:70:d6:b9:36:11:65:
a7:21:98:57:da:26:c9:50:3a:27:69:14:b2:f1:0b:7e:af:10:
76:a4:54:18:2f:4c:a2:ab:7d:50:55:df:06:93:68:d1:2d:50:
d3:dc:ca:1d:0f:2c:ac:6e:25:62:af:e5:a2:a9:20:c2:e5:6e:
d1:a1:89:9f:6c:e8:e5:47:a8:9e:6a:c0:be:44:d6:f3:6b:10:
bf:ee:41:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:23 2026 by rpki-client