Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
File: 4IEr3duyOb5jncddzS4pbE_PSpc.mft (raw, json)
Hash identifier: /13unKhvnzoMWJj0iGT3qFb0OYEFdJVVOPcj4YaXu7Q=
Subject key identifier: A9:B0:EC:63:25:C6:D5:A7:42:99:90:20:00:5A:5B:27:67:2E:1A:72
Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
Certificate issuer: /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Certificate serial: 019E1D22F194AACF98B2CD583593F19BCA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
Manifest number: 158C
Signing time: Tue 12 May 2026 17:01:29 +0000
Manifest this update: Tue 12 May 2026 17:01:29 +0000
Manifest next update: Wed 13 May 2026 17:01:29 +0000
Files and hashes: 1: 4IEr3duyOb5jncddzS4pbE_PSpc.crl (hash: T4h5/6jq8UfIbZuc8bKyrTTf2Yne3Q9/BtpbAzdq8/M=)
2: KoVutq_X-hbyyiE4agG4FTzOf0w.roa (hash: IxlRei0uC7ziEeb5GLb2cYAA8ujLZ81mwnQyJ2ROxvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:f1:94:aa:cf:98:b2:cd:58:35:93:f1:9b:ca:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Validity
Not Before: May 12 17:01:29 2026 GMT
Not After : May 13 17:01:29 2026 GMT
Subject: CN=a9b0ec6325c6d5a742999020005a5b27672e1a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:6b:99:5a:70:fa:84:89:c5:ba:5a:0e:92:
ea:0c:86:75:03:dc:50:49:b4:02:7e:03:08:f8:c3:
25:46:9e:cf:61:0a:9d:f5:d7:c2:69:40:2f:b5:4a:
7e:7f:e2:f0:27:86:24:b6:5f:37:d3:02:bd:0a:32:
ce:cc:ea:9e:dd:2e:70:c1:af:3b:d3:d3:76:07:27:
bb:2a:07:00:cb:b0:5c:43:91:bc:5a:6f:ac:96:bd:
c0:88:69:7a:a1:b3:5d:ad:c0:92:02:ab:0d:82:54:
36:18:6b:f3:61:8e:bd:fb:6c:00:35:3b:8a:4a:6e:
d7:c9:01:d3:5c:c6:04:a2:e3:05:af:e0:76:2b:83:
13:6f:01:bf:75:23:3b:17:92:f7:a7:0c:b3:04:9b:
26:5a:62:d2:24:95:ed:9a:b7:4f:1a:be:ea:f0:76:
28:47:4e:59:eb:8b:95:e4:9a:53:a2:43:d8:f1:bd:
f1:c1:05:44:ec:af:8b:f4:4f:64:ff:08:11:c3:32:
af:7c:7b:c5:6a:9f:44:97:48:7e:f9:51:01:1a:3f:
0b:5a:53:7f:59:2a:2e:49:89:19:53:cf:54:44:51:
ce:1f:e5:b3:4c:a0:92:bf:51:e6:c8:7a:07:11:36:
47:79:0c:0e:0c:d8:df:f5:45:77:e5:3d:1c:86:d5:
06:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B0:EC:63:25:C6:D5:A7:42:99:90:20:00:5A:5B:27:67:2E:1A:72
X509v3 Authority Key Identifier:
keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0c:04:e9:92:95:ab:68:9f:41:fb:5a:60:34:72:88:17:5b:
84:73:af:0d:9b:0e:90:50:d5:c7:42:68:db:f0:ac:1e:51:bc:
b7:48:52:db:e1:62:5a:ed:ed:fe:e3:77:34:63:93:6a:c8:6e:
bc:27:58:d4:ee:fe:10:6e:37:6d:0c:15:21:f7:92:01:2c:71:
dc:1a:ea:fd:9a:59:e6:6e:9e:9c:b4:c9:0b:f8:e2:20:a9:81:
e9:41:28:06:8f:29:8d:95:7f:26:9b:1f:f0:6f:01:a8:02:a2:
ff:4f:54:02:20:c3:aa:a5:fc:06:7d:ec:5b:08:b3:4f:ee:83:
c1:55:1b:e7:16:86:5b:0d:98:2b:e9:08:6c:45:89:5f:6e:c6:
ad:f8:2a:e4:74:a6:0b:a4:64:4f:bb:cb:ef:91:32:ab:93:7d:
0d:b5:9b:08:4b:41:58:a6:4c:1b:41:23:43:41:a9:28:27:ed:
da:60:e4:e7:bf:5b:f8:32:0d:7e:86:65:d9:9a:8e:4f:91:8e:
65:5f:07:b2:04:a3:57:39:29:ec:5a:88:0b:56:e6:73:39:97:
88:e5:02:a0:6c:43:0c:8d:f2:36:9d:1f:42:e4:44:d3:5f:0e:
6a:a6:4f:f5:9b:0c:3a:f3:87:85:44:fd:17:5b:8c:9f:13:3e:
f9:43:e9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:29 2026 by rpki-client