Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
File: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft (raw, json)
Hash identifier: 5VNQ1icSAQcYQxUqrIFGzaLa/RHA3JZ2GK3mShvGuqs=
Subject key identifier: 41:BE:A3:BB:BA:D5:06:52:3A:41:18:CC:57:97:40:A7:25:DF:B4:BC
Authority key identifier: E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
Certificate issuer: /CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Certificate serial: 019E205A966D2950C3EE2E01EC0CA2268776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 08:01:08 +0000
Manifest this update: Wed 13 May 2026 08:01:08 +0000
Manifest next update: Thu 14 May 2026 08:01:08 +0000
Files and hashes: 1: 28-UkpXxAzZbO8vuIBQRnkr5eRE.roa (hash: YFs8JOoUa4SUku2tRg5QnVz5rp4j/Pv7WxhvaMnlFHg=)
2: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl (hash: CVgYwnXjtHmYPnFRLNnP6lgLh7uT3RG7/5fqM2jJTQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:96:6d:29:50:c3:ee:2e:01:ec:0c:a2:26:87:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Validity
Not Before: May 13 08:01:08 2026 GMT
Not After : May 14 08:01:08 2026 GMT
Subject: CN=41bea3bbbad506523a4118cc579740a725dfb4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:65:4f:ad:a7:c4:af:9b:44:92:d6:7d:c5:
dc:37:d7:22:d6:bd:f7:9c:f2:54:40:e7:89:7a:7f:
5d:8e:97:eb:0e:00:66:ad:e7:d9:6b:20:b4:bd:2e:
50:f8:a6:e3:aa:44:71:14:be:23:53:50:ec:25:7d:
35:43:e2:81:d7:e3:a9:52:a5:58:f3:c4:72:62:40:
7d:25:78:26:26:65:bf:6b:ab:c4:04:4b:e4:a7:a8:
64:77:1a:55:91:d2:4f:da:89:c9:d0:1b:72:bf:cb:
27:dc:17:07:6f:86:b0:e4:c0:b2:27:79:19:17:ca:
75:d4:ff:5a:b9:d0:1e:af:9d:28:25:27:b2:a1:e2:
4d:f7:9f:88:b0:0e:ec:7f:5e:d3:3d:66:25:5b:38:
cb:1a:46:d3:e1:a9:3a:be:1e:3e:22:d8:e0:63:fb:
83:6d:2e:06:89:41:c8:ae:80:23:fe:68:8d:a4:88:
91:fb:cb:31:26:73:60:b7:6f:14:bc:b0:aa:8c:2c:
24:e0:a3:a0:6c:0e:f1:8a:c3:c7:7c:bf:15:12:5d:
05:4a:3d:8e:27:96:25:0e:60:05:5a:78:dc:ba:2a:
ce:9f:c3:a2:7c:97:0e:bc:7a:f4:9d:d1:3c:39:bf:
b2:e6:61:3d:e7:fd:03:b1:83:0b:67:94:d3:4d:90:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BE:A3:BB:BA:D5:06:52:3A:41:18:CC:57:97:40:A7:25:DF:B4:BC
X509v3 Authority Key Identifier:
keyid:E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8e:36:d5:0d:94:fd:db:7b:41:52:59:de:8f:0b:ad:bc:e3:
d2:be:fc:28:b8:7d:88:32:bf:70:66:5a:44:64:d9:36:72:7a:
82:37:dd:26:7e:b9:74:ea:bc:6b:87:60:b0:22:e7:35:f1:7e:
b8:e7:2c:dc:c1:bd:7c:43:98:d2:8d:2e:97:17:6c:4c:6b:e6:
61:11:04:ba:a4:6e:06:40:fa:12:49:60:fe:1e:5d:38:e9:58:
56:21:a0:98:e7:05:4a:2a:2b:4c:b6:c4:13:69:d5:90:d0:62:
3a:70:b8:4b:4d:58:3d:cb:f8:8f:63:eb:96:37:6a:21:c5:ab:
77:c3:cf:b2:33:16:30:9f:e8:bc:5f:e8:75:f4:2f:36:44:46:
98:99:bc:ce:49:a4:67:12:c0:e6:d3:12:a5:1b:85:d0:5a:ce:
de:51:86:af:5d:4f:00:50:b7:cd:6c:d0:bc:6d:5b:07:c4:79:
ca:90:f4:fe:6f:bc:24:14:77:68:0e:20:e9:c1:b9:00:29:89:
34:fc:69:b6:58:7a:6e:d5:36:f0:4a:06:57:ea:33:1e:11:0c:
a8:1c:a0:f0:39:a4:b6:4a:5f:5c:cf:cd:40:a8:1e:01:5f:40:
82:91:c9:40:68:fb:11:04:a5:e5:b1:f0:f5:6e:69:90:d7:bf:
c4:82:f0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:49:44 2026 by rpki-client