Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier: 0dedAFTnL60F+cxyCVRiZDHl+SThAlHeadxQjJptoFc=
Subject key identifier: 7B:1E:5A:E0:D2:5F:9D:3C:81:79:A6:21:DB:80:55:B9:16:CF:A2:80
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 019E1BD932DA90584842FF7A627B8DD80D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 11:01:19 +0000
Manifest this update: Tue 12 May 2026 11:01:19 +0000
Manifest next update: Wed 13 May 2026 11:01:19 +0000
Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: UeQ969SsA/cV+YIasWbRLrg1WwGKdINYWx/Tdk0Vz34=)
2: QGU4wxB9l82WtX2GlBPNcSFE_oI.roa (hash: lXWG4OK0FlcLIlRlfiL6ejBSOQfloGthHWkReJ7gUs4=)
3: oAirDjtYSawIz9t2W1uTMzbfgmg.roa (hash: hcXXhAATQAv1P0WpVCcSM3rmQFyzufHtTmG7E5Wcw3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:32:da:90:58:48:42:ff:7a:62:7b:8d:d8:0d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: May 12 11:01:19 2026 GMT
Not After : May 13 11:01:19 2026 GMT
Subject: CN=7b1e5ae0d25f9d3c8179a621db8055b916cfa280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:d3:7d:60:50:34:af:e2:a4:a2:35:63:39:
6e:28:cc:87:34:4d:08:5a:53:0c:0a:61:15:0e:80:
3f:2c:94:0d:e8:79:33:40:a1:9b:7d:6b:5f:9c:7d:
47:7e:a1:79:59:df:10:56:63:e6:c1:3a:f0:86:26:
12:99:84:15:1c:02:ee:33:b2:ef:65:a9:a3:7b:6c:
41:34:d9:c2:6f:e3:32:01:dd:77:80:98:9d:a7:b2:
a0:e1:84:4b:35:89:68:5f:bb:6d:6b:48:07:e7:d3:
cd:e6:31:74:95:49:bf:ea:47:03:57:e4:6a:53:2c:
e3:c0:d4:bf:ee:19:f0:35:59:cc:ed:3c:ba:56:8f:
ce:00:94:6f:e3:f5:c9:b8:cb:33:b2:45:53:86:11:
1c:37:02:96:52:5c:32:55:5a:8b:7e:10:76:ee:7e:
51:8c:e9:d5:0d:e9:bf:b8:59:62:aa:f2:97:9f:f4:
10:f6:91:f5:fa:33:88:b2:7a:0b:48:d7:e7:70:af:
5f:03:9e:82:34:a2:a8:42:43:47:b4:94:84:f3:79:
2c:a9:8b:6b:af:db:08:d6:9b:49:ca:43:f2:ae:30:
bf:c1:31:ab:11:ca:1a:9e:00:2f:3e:33:08:5d:f6:
2c:05:d2:59:23:29:72:64:a2:70:49:c8:8c:8d:0e:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1E:5A:E0:D2:5F:9D:3C:81:79:A6:21:DB:80:55:B9:16:CF:A2:80
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:43:1d:24:51:a2:4f:f6:8a:21:e6:c6:45:7d:74:7e:ff:9a:
63:68:d3:e6:d0:15:b3:dd:37:15:95:30:84:71:55:07:69:5e:
93:ed:84:09:8d:b8:56:7a:b9:f2:40:5c:66:bc:25:e2:0a:0d:
fe:14:8d:ac:02:66:b6:43:53:e8:94:ce:1c:1d:bc:8b:5d:7f:
46:8d:e8:46:99:b5:8e:e2:dc:4f:c5:26:85:e3:71:7e:4d:56:
0f:95:d9:a3:dd:f3:10:56:94:33:fc:7e:80:11:b8:06:d1:19:
63:3d:4c:3b:d6:dd:0e:63:d3:4f:a9:b9:95:e8:40:92:48:e4:
b2:d4:1d:f8:18:07:93:e4:16:35:ac:01:a3:24:98:d3:df:75:
2b:88:c1:07:ef:bc:2b:ec:9c:5e:2c:27:f9:ae:39:91:01:6d:
3f:30:c8:c2:e4:23:d8:0f:26:da:3d:d7:96:15:23:15:83:dc:
4c:c0:da:4f:9d:1f:b1:43:71:b2:71:3f:c9:4c:b1:e1:b6:8e:
58:f7:20:f0:a3:3e:35:7c:dd:c6:3e:35:32:ce:36:3c:e4:a3:
9e:13:a5:a4:83:57:cf:d5:81:66:6d:2b:c0:7f:ad:47:c5:e2:
5d:2f:f8:e8:3c:88:e6:05:2d:f4:7b:7f:31:17:5a:87:13:92:
a0:23:bd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:17 2026 by rpki-client