Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
File: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json)
Hash identifier: +E23FQ7V3kZ6NdeTkv6HY9UpDkibBcbsXBSH5NT8v6E=
Subject key identifier: 9E:A3:7A:45:E4:E1:FD:88:79:19:C3:42:2E:AB:96:3B:BA:36:E7:8D
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 019E1CEBEDF4851523B6321B576DFA43CB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
Manifest number: 0A05
Signing time: Tue 12 May 2026 16:01:24 +0000
Manifest this update: Tue 12 May 2026 16:01:24 +0000
Manifest next update: Wed 13 May 2026 16:01:24 +0000
Files and hashes: 1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: l/lu8qg72fGrsVUNOJLNwKv4hVFrJ1H7T63r6faRJK4=)
2: iJ2dkGge62Vh8toLziz4BBDFsIU.roa (hash: FGUiRuQcTHwY2x/0lhI9Cq7axh0DNfE+YZZ6Pi8PjoE=)
3: yi1fK_-RnGIR53EDaGJ-NbFb4cw.roa (hash: 8qVvUWprWEP3+o1dHxaz8tb18/xPwq5gKAudzTrXXEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:ed:f4:85:15:23:b6:32:1b:57:6d:fa:43:cb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: May 12 16:01:24 2026 GMT
Not After : May 13 16:01:24 2026 GMT
Subject: CN=9ea37a45e4e1fd887919c3422eab963bba36e78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:ee:c5:d5:65:2d:67:f4:69:9e:6b:e6:a8:
2b:b0:e6:b6:c0:3a:73:44:7d:43:11:4a:f8:8e:6e:
e3:c4:c9:e9:cb:2f:01:5f:10:1e:8f:1a:09:c5:d0:
06:f5:10:b0:9c:74:49:c5:3a:dc:35:ea:58:af:ff:
fc:11:25:b1:dc:81:9d:f1:89:89:19:ed:cd:38:85:
e0:da:92:99:63:c0:0e:68:02:81:29:c0:c5:08:18:
e7:c8:54:f7:36:ff:cc:4f:88:72:93:39:63:b4:11:
b0:01:ef:ee:b5:0f:a2:88:1f:f0:ae:92:c4:f2:ca:
57:96:5b:2f:a0:07:39:38:73:70:89:70:e0:f8:d7:
e2:ce:3b:99:35:d8:f5:b5:9a:38:ab:db:3e:73:4b:
f6:21:5d:e4:62:cf:c6:37:1d:0a:1c:ca:0e:fc:83:
85:89:51:1c:82:93:c7:4f:5f:f2:b8:c1:27:a5:f0:
48:35:3d:a7:31:fd:a5:ca:ff:43:2b:18:82:cb:90:
70:96:54:b5:83:16:90:8b:b5:15:e7:af:ab:0f:67:
ec:f3:9c:8f:88:03:86:e4:7b:18:39:01:65:a3:5e:
64:7c:3d:5d:5a:c7:6c:7e:60:b2:6b:32:d7:bb:27:
c5:eb:d9:94:56:48:c3:a2:de:4d:15:d8:73:3a:5c:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A3:7A:45:E4:E1:FD:88:79:19:C3:42:2E:AB:96:3B:BA:36:E7:8D
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:58:fc:4f:e5:d3:b4:ad:ed:48:30:5f:15:21:d7:eb:bc:f9:
09:bc:b9:8a:8e:f4:bc:7d:fd:9e:59:57:d4:82:e9:a0:e8:42:
fd:f0:64:14:02:8e:2e:a6:12:90:f6:03:bb:54:57:70:0e:6f:
ff:e3:f0:f0:86:c1:94:f3:2d:d9:3e:ed:1c:3a:bd:1b:d3:64:
84:b7:27:1a:1d:fc:18:2f:d2:47:af:08:22:45:b6:17:04:de:
67:d9:a9:33:d9:25:3c:bd:23:6f:65:e8:4a:74:ae:0c:5b:3e:
a5:ad:77:50:8a:df:f4:08:0f:50:a2:4b:19:d2:54:ab:02:d6:
e4:f9:e3:db:9e:e7:4c:4a:8e:e6:c7:7c:e9:03:ab:d3:2a:c8:
d7:02:67:bb:28:83:00:b0:a1:ed:d5:68:fb:6f:c1:d4:15:8f:
32:2b:91:71:18:79:5b:0d:d2:81:37:ad:8d:e1:27:c7:ac:33:
20:ad:fc:bf:b3:da:fd:29:93:20:57:ec:cc:c4:dd:a7:f8:f1:
ae:7d:9c:f0:06:ba:87:71:4e:45:29:11:b9:67:7a:e8:a3:0a:
d6:dd:f5:20:16:57:c7:74:08:aa:de:01:48:b5:f8:43:d0:7b:
08:45:f8:0b:c7:ca:d9:51:d2:46:ff:ef:8d:d1:9c:38:f5:4e:
d8:36:61:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:19:15 2026 by rpki-client