Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
File: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft (raw, json)
Hash identifier: Vhj6dgZ68K/xb4CoL8WktcUiR+RXn9LYJD1ChU3IWFg=
Subject key identifier: AD:43:3C:DE:61:1D:3A:87:4D:B9:EF:19:4E:70:07:B1:20:7B:64:96
Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
Certificate issuer: /CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Certificate serial: 019E1C471BB86A842D255AEC45B9377A2C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
Manifest number: 1245
Signing time: Tue 12 May 2026 13:01:22 +0000
Manifest this update: Tue 12 May 2026 13:01:22 +0000
Manifest next update: Wed 13 May 2026 13:01:22 +0000
Files and hashes: 1: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl (hash: CU2/erCUxjd925+QWm/HnSLoDAi119GLnxHWWHp4ySU=)
2: 4KDzMZ0lkDkjXYe-SrCY9yGDLXc.roa (hash: Fb2sHlsDe7FGoT8knnx86ex85S190han6NaiudJQRL8=)
3: qUacdXtveFfY3GQNxyBrLFI9QWg.roa (hash: 64sJ2iCdgQ8mYBa6Be5jblKVmgBgQDa2NTvtAAMiVRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:1b:b8:6a:84:2d:25:5a:ec:45:b9:37:7a:2c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Validity
Not Before: May 12 13:01:22 2026 GMT
Not After : May 13 13:01:22 2026 GMT
Subject: CN=ad433cde611d3a874db9ef194e7007b1207b6496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:87:d4:b3:b9:f2:83:0c:0c:48:75:18:eb:
ec:1a:64:30:c6:9b:bd:21:7a:8d:0a:05:83:c6:bc:
f1:ad:4d:de:fc:5d:d6:47:35:e9:19:af:51:9f:55:
a7:ca:fc:7b:79:94:08:48:a6:b6:85:49:fc:eb:09:
53:32:35:20:a1:41:71:5e:ea:11:1f:35:02:90:04:
2a:f9:49:c8:02:74:24:98:03:2f:9e:39:0a:f2:3f:
ea:73:27:2e:58:06:09:8f:89:3d:ae:37:77:8c:ce:
3d:7b:01:82:36:51:36:ec:ce:a5:fd:97:bd:90:bc:
26:de:de:9c:63:81:05:3c:f8:be:1d:bf:80:a1:a3:
44:50:0b:a0:6b:79:59:cd:1c:fa:4e:4c:72:0f:c0:
a2:e9:d4:ce:46:87:c1:db:09:c5:46:8d:eb:5f:b7:
34:61:95:61:0a:f4:1a:15:81:23:7f:37:be:49:d9:
12:34:56:e3:63:39:f5:c5:cc:8b:11:96:ef:49:94:
4b:d3:8b:c1:fd:43:78:dc:65:e5:45:18:11:ee:79:
bc:e0:01:3a:e4:e2:a5:3c:2a:f7:74:d1:25:a7:60:
06:ca:3a:0f:e2:62:70:cb:70:68:68:d7:fb:bf:4e:
1c:e4:ba:29:ea:e5:f7:00:2f:a5:87:3b:88:62:0b:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:43:3C:DE:61:1D:3A:87:4D:B9:EF:19:4E:70:07:B1:20:7B:64:96
X509v3 Authority Key Identifier:
keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ff:6a:d1:70:b1:bd:0a:20:8e:ba:64:5a:62:ff:2d:26:38:
95:2f:6c:af:54:3b:a1:4a:c6:00:90:5f:8e:a1:22:a6:9c:83:
87:b1:f1:dd:70:49:9d:14:cc:1d:3c:f9:ef:a0:b5:3a:64:fe:
e5:6c:c0:b3:c6:29:91:9d:83:1c:67:4e:1e:f1:08:9f:50:8f:
b5:d4:f5:f4:bb:44:e6:ef:1f:3a:bd:30:1e:0e:eb:5b:66:f8:
71:78:dd:b4:ef:65:7a:22:4f:c2:d4:00:f1:a7:be:7d:87:7d:
ee:5f:e0:89:6e:a1:b3:c4:23:87:93:d1:d1:20:1b:75:30:02:
2c:07:db:59:f6:a4:c8:a3:7a:6e:0a:d0:a0:0d:e7:19:d7:2f:
59:f9:f1:bb:f2:bc:99:91:23:12:1e:70:02:02:85:0a:9a:70:
e2:05:f3:ec:0d:b6:d9:8e:f3:3e:dc:ff:d8:3e:4d:b6:83:e8:
80:b6:d4:e7:95:d1:6d:8e:fd:6d:63:32:dc:d0:71:80:d1:b6:
85:61:5f:e5:90:e6:94:be:04:d8:9d:d5:fc:af:ff:73:13:b6:
d9:0c:a5:98:d1:e5:94:87:f6:53:ef:f6:49:b1:08:c0:b8:f7:
81:69:31:86:9a:eb:c2:71:70:67:30:0f:93:7d:34:aa:01:34:
55:9d:64:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:43 2026 by rpki-client