Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
File: 4chbPfGRu7SHTyElY_U2-CPqQzI.mft (raw, json)
Hash identifier: +MRV0C/6HnJOitYdzDnj9ZW24eZjX1R8/HesG1wkRkQ=
Subject key identifier: 43:62:03:DD:93:4B:A6:BE:FD:2A:2C:5D:2C:3A:0D:FC:C9:82:50:56
Authority key identifier: E1:C8:5B:3D:F1:91:BB:B4:87:4F:21:25:63:F5:36:F8:23:EA:43:32
Certificate issuer: /CN=e1c85b3df191bbb4874f212563f536f823ea4332
Certificate serial: 019E1C468728A2A680F33D0699AF22A2062F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
Manifest number: 73
Signing time: Tue 12 May 2026 13:00:44 +0000
Manifest this update: Tue 12 May 2026 13:00:44 +0000
Manifest next update: Wed 13 May 2026 13:00:44 +0000
Files and hashes: 1: 4chbPfGRu7SHTyElY_U2-CPqQzI.crl (hash: WdzGg2cBLAceDVwVJI0cG55wsil4bue37yngRsYV+bE=)
2: HGJATmPx_lb-up56PA9sws4LXzM.roa (hash: rP4ippAFPKo3N/gSznr5pBHOOcDkPGB3VJz0DMBiGGk=)
3: ZKlPGz4kI_uOgsyApeExYa33cEk.asa (hash: gHtpE0/vy2kYs9vRGqmcozAsLFQTnGOPyUQhZ0q23wc=)
4: vR8-TTbXfVDHZdgSnOr8TDlwnBk.roa (hash: jMzlWmBuharjGRH2L1aGRJN/4ce3UkOwdCSnIziX6x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:87:28:a2:a6:80:f3:3d:06:99:af:22:a2:06:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1c85b3df191bbb4874f212563f536f823ea4332
Validity
Not Before: May 12 13:00:44 2026 GMT
Not After : May 13 13:00:44 2026 GMT
Subject: CN=436203dd934ba6befd2a2c5d2c3a0dfcc9825056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:da:c3:f5:38:cb:ea:e9:b9:e2:5e:cd:28:
f3:35:68:94:55:30:73:66:7a:b4:6d:da:a1:a6:99:
d0:8f:dc:76:1f:1f:35:19:cd:80:de:00:11:5a:33:
5c:13:cf:98:e0:98:dc:fe:1f:a1:d6:91:d5:21:70:
69:de:a9:91:a6:09:24:d6:cd:44:17:18:b0:c0:99:
cf:c7:47:f5:53:ef:ed:ff:cf:71:b0:eb:4f:4f:59:
25:6b:81:72:e3:d0:5a:59:86:e1:de:92:5c:aa:f0:
90:9e:39:c8:7d:80:a1:fb:3f:73:ff:2a:59:c0:db:
38:c5:b8:d9:84:c8:9e:05:e2:b1:ab:2c:1e:96:55:
37:fc:32:2e:ee:c7:09:fb:74:ff:7c:5f:33:b6:dc:
58:13:89:a4:d6:22:30:fc:b0:ce:61:a9:8e:67:56:
7b:7a:99:4a:81:70:97:fc:c2:51:ab:7e:85:47:f7:
02:67:53:03:e2:54:40:8a:5f:c8:a3:84:1f:c8:48:
a4:65:9d:ed:f2:0c:10:28:3e:6a:ea:00:22:79:36:
e1:c5:8f:19:93:1e:dd:d0:15:b1:a7:06:3b:33:67:
5c:6a:86:78:eb:3a:9f:7a:15:e3:b3:6e:29:7e:24:
44:0a:04:ae:c6:7d:a3:ae:03:01:f1:59:fb:b7:cf:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:62:03:DD:93:4B:A6:BE:FD:2A:2C:5D:2C:3A:0D:FC:C9:82:50:56
X509v3 Authority Key Identifier:
keyid:E1:C8:5B:3D:F1:91:BB:B4:87:4F:21:25:63:F5:36:F8:23:EA:43:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:05:0a:4e:ca:24:10:7b:34:20:24:59:37:58:09:ed:cf:9b:
4b:95:5b:e3:2a:20:e4:90:b2:68:65:61:a8:08:79:73:5d:38:
53:27:af:8e:72:7b:18:4b:24:6d:1a:15:ac:5f:91:41:24:d1:
9a:d8:f1:a9:6e:d1:ea:06:e0:82:1b:64:84:fa:a5:2b:1d:b9:
0f:f7:88:e3:7a:3e:82:d5:08:a9:fa:6f:77:d8:e7:8f:51:b7:
db:27:c7:a1:7d:ca:65:1a:99:2f:49:34:c9:91:52:c0:d1:1e:
7b:9b:93:97:ba:96:ed:03:5c:fe:e3:3f:05:b9:62:60:b6:54:
6d:e3:24:2a:b6:5b:5a:e7:a7:dc:2c:54:e0:dc:9c:46:93:fa:
ad:c3:a9:99:a3:bd:59:c8:6a:71:d1:a3:47:0e:1e:33:7a:8a:
31:e7:55:3c:9a:f8:9e:87:60:bf:b7:df:df:8a:9f:76:f8:04:
57:62:a8:38:39:50:be:65:cd:9a:89:cc:e4:2f:55:6f:b5:cc:
36:aa:d6:c5:71:1b:ac:e7:37:c7:c5:4c:2a:f0:a7:13:50:68:
69:32:37:cc:16:0e:74:80:9f:b7:8b:dc:c6:6a:9c:94:42:79:
1a:ef:6e:0b:af:e6:04:93:e8:7c:fd:cd:25:c5:cd:48:e5:fc:
49:14:4b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:41 2026 by rpki-client