Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
File: 4WU0PZW9Tbww89ciSVQanUfnbZE.mft (raw, json)
Hash identifier: 9c0M3FOBi6G+Y0shux9WSGJN2wvkRlZE8Vrz2SYc8dM=
Subject key identifier: DB:3D:71:61:32:A2:18:27:8A:14:95:D5:F8:89:1F:3F:0D:74:96:E1
Authority key identifier: E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
Certificate issuer: /CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Certificate serial: 019E2023AE146025B0DE3B3273D3BB7B4212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
Manifest number: 120A
Signing time: Wed 13 May 2026 07:01:09 +0000
Manifest this update: Wed 13 May 2026 07:01:09 +0000
Manifest next update: Thu 14 May 2026 07:01:09 +0000
Files and hashes: 1: 4WU0PZW9Tbww89ciSVQanUfnbZE.crl (hash: CE5/ueYVO0msWx41LAc6rx9O0ak21blyGAs4wsVygH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:ae:14:60:25:b0:de:3b:32:73:d3:bb:7b:42:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Validity
Not Before: May 13 07:01:09 2026 GMT
Not After : May 14 07:01:09 2026 GMT
Subject: CN=db3d716132a218278a1495d5f8891f3f0d7496e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:31:5e:39:75:7c:90:1f:13:5f:ee:92:62:eb:
cc:f9:02:75:0f:36:f4:f4:0d:92:a0:d2:2c:ab:66:
3f:a6:7e:ee:ae:a7:ce:8c:29:16:9d:77:1f:7c:b8:
8f:ab:70:85:e8:12:82:57:20:dc:c7:49:12:88:44:
4e:60:06:89:c6:85:ce:7c:46:ad:70:cb:56:e8:95:
60:4c:30:31:57:b5:2c:10:c4:6b:4b:2d:20:00:08:
48:6a:c6:ee:b5:08:bb:24:c8:24:27:72:28:14:68:
dd:f7:6a:d2:e1:6a:00:4a:a3:f9:57:2c:2c:b0:ba:
e0:05:13:d3:4a:c4:dc:bd:ce:8c:60:91:0f:f3:66:
24:eb:4f:81:1c:5b:83:c4:71:03:77:b5:e2:7c:50:
a1:5b:cb:54:28:79:19:c1:45:f8:ad:8a:46:0c:22:
be:e2:ae:08:ff:ff:41:25:7e:d9:58:9d:23:f9:43:
6d:30:4f:a1:d7:7a:ab:fc:cc:03:22:3a:4b:8b:7c:
d3:f0:e9:37:1a:52:2d:b6:a9:5a:17:51:cb:0e:82:
bb:31:2c:14:fe:14:6c:98:30:50:01:b1:2a:bb:0e:
49:9f:e1:ab:8c:6a:ea:62:60:10:e0:73:2d:35:be:
04:1e:64:1b:c4:ff:4c:b9:55:ce:0e:c5:67:5d:5f:
e1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3D:71:61:32:A2:18:27:8A:14:95:D5:F8:89:1F:3F:0D:74:96:E1
X509v3 Authority Key Identifier:
keyid:E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:de:1c:d8:38:af:96:66:6c:f6:0e:76:90:c2:c6:e4:7c:94:
3f:76:80:15:43:9c:cd:8d:03:3d:56:08:2c:5b:95:28:27:88:
a2:8a:f3:69:64:44:b1:27:74:51:70:0c:47:0f:44:52:e6:38:
01:3b:00:8b:0d:e5:89:20:fd:fb:e5:c4:d8:a2:3d:f4:4f:c2:
2e:34:b0:7f:92:02:e7:04:93:73:07:de:59:e1:65:fd:37:e4:
91:8a:ed:65:39:c9:80:6a:c0:7c:3c:3e:b2:79:d6:c2:44:68:
f4:80:3c:20:68:4c:16:ef:3b:bf:a2:55:b7:e0:7f:d7:a0:23:
fc:37:e0:67:88:2c:58:17:4e:a5:35:54:b8:fb:f9:b4:d9:f5:
1b:31:b2:22:eb:5c:6d:71:d1:4f:e4:6d:a7:47:55:48:d1:8c:
c4:26:11:b2:c1:61:09:f0:92:46:4c:13:70:0b:e2:0b:30:83:
a2:55:50:d0:41:72:35:2a:cc:75:b5:0b:95:28:89:de:30:d9:
99:68:61:7b:1a:fa:a1:0d:ac:f8:92:d0:9e:9c:56:7c:81:6c:
40:eb:5c:e1:f3:86:02:8f:fe:dd:12:57:62:e2:ae:10:16:4d:
8b:01:e0:05:b8:c4:c8:ff:3b:c4:1f:71:3d:09:fe:1d:7e:80:
ed:0e:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:55:07 2026 by rpki-client