Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier: AhzM79M0yhwVwB7sChqet81ncSqI5dPPOyxEtcNYBdU=
Subject key identifier: 4D:85:D8:94:E2:77:0B:45:6B:CB:11:CA:DA:14:FB:C7:FF:55:31:AA
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial: 019E1C0F79D80B92164261C14220F8C21F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number: 1897
Signing time: Tue 12 May 2026 12:00:36 +0000
Manifest this update: Tue 12 May 2026 12:00:36 +0000
Manifest next update: Wed 13 May 2026 12:00:36 +0000
Files and hashes: 1: 2Yc5Pc_w4EBrqOMKmFKQLhTLkdw.roa (hash: xcDU75sza534zn4A1SLY0N4eKvAgRsSzSIlzRIhia7Y=)
2: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: XhEkzr5pJKxtZZ6NKMTjbUUGNWjxBTYj9Bh+KqlFibg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:79:d8:0b:92:16:42:61:c1:42:20:f8:c2:1f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
Validity
Not Before: May 12 12:00:36 2026 GMT
Not After : May 13 12:00:36 2026 GMT
Subject: CN=4d85d894e2770b456bcb11cada14fbc7ff5531aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:05:cb:05:d1:ea:d6:96:d2:ee:8e:9b:7d:
29:45:da:e2:d4:c5:88:5c:4a:b3:e4:8a:ce:53:19:
3e:71:1c:ac:92:8d:dd:c9:a8:53:54:0a:df:9b:a5:
9a:7f:6d:0c:01:2a:6e:3a:16:b2:e6:0b:10:6d:3e:
ee:64:88:39:62:fe:72:b0:f1:f5:39:a8:ae:76:0d:
55:95:47:90:22:6d:2b:03:da:ef:18:e5:d6:28:d4:
2c:c2:07:14:30:34:7e:8f:24:f0:bf:3f:42:66:4b:
74:65:b1:c6:6e:3b:27:68:b1:34:7b:aa:e4:90:0a:
e4:1f:e1:70:7c:32:3c:87:ea:82:97:ef:2c:40:dd:
e5:3e:2e:ad:5f:1c:47:56:45:45:42:87:cf:d9:38:
58:1c:5b:41:c4:30:c2:9d:79:93:83:a0:e8:e3:39:
0b:e0:25:45:25:4d:0c:46:3e:63:7e:15:10:5c:05:
b1:b5:60:a7:80:85:4f:10:cc:3d:1c:c6:a3:20:b3:
04:b8:71:f5:b0:c5:f5:bf:4f:10:30:65:44:3b:78:
d0:c0:97:d4:d7:b5:9a:c3:6f:9f:9f:c8:0e:85:32:
db:7c:53:6e:64:49:85:91:e5:59:e1:54:92:e5:1e:
05:b2:92:b6:9c:f0:59:91:20:73:05:20:f3:08:70:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:85:D8:94:E2:77:0B:45:6B:CB:11:CA:DA:14:FB:C7:FF:55:31:AA
X509v3 Authority Key Identifier:
keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:33:a6:04:48:a5:41:62:51:68:6f:d2:37:6c:3e:75:5a:57:
21:86:30:6c:08:2f:62:3a:29:6f:9e:d2:19:c0:27:96:b1:38:
c8:ef:72:d2:79:69:08:48:86:2c:b0:ac:f1:1c:b6:0b:e0:f3:
c1:f6:0d:f2:72:c7:fe:5a:a9:4d:bc:47:02:4f:73:f2:97:ec:
ac:95:03:22:ff:03:a6:75:0a:0c:25:0c:8c:de:b4:1c:10:2e:
7d:be:b9:5b:f4:f1:0e:cb:18:e7:e3:7e:9b:0b:77:d9:d6:c7:
c6:5a:e5:6c:a1:7c:c6:c5:ec:22:53:18:e7:2d:f9:e5:b6:18:
8d:03:20:93:74:62:fb:22:7d:73:d8:87:02:0d:85:70:43:11:
9c:3c:a4:2d:35:37:05:d2:8d:ee:63:45:4e:f6:6e:03:8f:9e:
56:1b:66:e6:a4:49:55:5b:9c:47:de:fd:71:e8:88:42:67:00:
c7:9b:39:5a:41:0f:24:64:ab:9e:34:47:35:79:27:1b:4e:4e:
72:34:85:4d:2b:93:56:25:70:46:d0:4e:18:3e:e7:fe:66:5b:
0a:72:49:7a:44:ae:ad:d7:51:c6:8a:28:04:71:c8:ba:50:dc:
22:82:ae:9b:e8:2a:bd:3a:44:61:36:8f:5f:44:94:1f:97:b3:
f9:88:e1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:08 2026 by rpki-client