Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
File: 4Zd4WdBx9xUIN7KstDU_8z79gxw.mft (raw, json)
Hash identifier: RGXf9DPSJfIVZy6UkFRI+jWHuDmK+014CjS8dLHYsSw=
Subject key identifier: 15:08:ED:8A:36:B1:67:51:60:7E:D7:8B:5A:94:76:B6:67:95:8D:2C
Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
Certificate issuer: /CN=e1977859d071f7150837b2acb4353ff33efd831c
Certificate serial: 019E1D231768AF27A9B88A34BD4E9CD95B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
Manifest number: 16D7
Signing time: Tue 12 May 2026 17:01:39 +0000
Manifest this update: Tue 12 May 2026 17:01:39 +0000
Manifest next update: Wed 13 May 2026 17:01:39 +0000
Files and hashes: 1: 4Zd4WdBx9xUIN7KstDU_8z79gxw.crl (hash: SNukMvThWgLARx2B0sjhqeXNxO/8WAwjs0fQlcyCfSs=)
2: ZYafFY5hgrZvAujIo4WJUy5Xkqs.asa (hash: gV/VgEXsJQud2DLaq6P58qMjbq6QyvStYKRKnU9km8E=)
3: vAtADiVzn1Bh76pWGdcxSENwoAM.roa (hash: QoQZh2KeNuOMLkkI0LNnA2kiP20KbUQKF1Cg2Ja7ZC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:17:68:af:27:a9:b8:8a:34:bd:4e:9c:d9:5b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c
Validity
Not Before: May 12 17:01:39 2026 GMT
Not After : May 13 17:01:39 2026 GMT
Subject: CN=1508ed8a36b16751607ed78b5a9476b667958d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:13:3a:7a:ee:e5:77:63:c6:06:51:4d:4c:
64:d9:c5:bf:1b:ae:01:bc:c4:69:0e:77:50:e2:2c:
2a:6f:ba:72:2a:a2:03:67:e8:8f:69:fa:95:30:c5:
a0:55:28:35:2a:7b:e4:8c:b8:3a:12:b5:fd:51:1f:
7f:0f:a3:de:0b:b9:79:ae:45:ab:df:1b:8f:30:63:
43:ef:9d:d8:96:97:cf:96:d5:f1:ae:a1:3d:54:12:
34:47:56:a9:92:a2:a1:7f:a4:c2:7e:ae:ba:35:2e:
00:08:c9:33:65:1e:55:4b:df:84:f3:27:5e:cf:59:
a1:9a:e9:26:97:7a:0c:98:81:02:34:e8:1f:e4:d7:
da:72:42:c3:9f:4b:84:f7:b7:04:ce:98:d7:96:16:
1d:6e:c1:7e:13:07:de:be:c1:47:71:14:b7:04:66:
3d:12:58:06:eb:59:23:cd:72:52:72:7d:f3:ba:dd:
e8:d1:ce:cb:ac:a0:77:de:08:97:11:31:85:e6:7c:
13:99:a2:3a:03:4d:9f:b0:e8:88:67:7e:72:9d:ca:
3b:c3:54:d5:e4:88:a4:a3:58:cb:a7:6e:50:ef:c1:
37:47:8e:df:ae:94:41:30:a6:72:4a:89:cb:1a:66:
cb:fa:e6:98:bd:04:44:ac:f1:2c:75:63:7a:46:b9:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:08:ED:8A:36:B1:67:51:60:7E:D7:8B:5A:94:76:B6:67:95:8D:2C
X509v3 Authority Key Identifier:
keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:55:b1:a7:73:b9:7f:bf:95:c2:ea:07:46:89:da:22:e2:7f:
e1:dc:22:57:cf:47:66:ed:62:5b:3e:71:0d:d5:2a:8c:36:4e:
a7:c1:fd:20:af:a7:3f:8f:68:99:e3:67:d5:fe:25:2b:2a:67:
98:e3:d7:27:df:da:cb:a1:34:cf:42:4f:74:de:05:d5:15:5b:
46:44:7b:7a:3a:67:95:86:03:17:d2:20:ba:d4:d5:e1:4b:3b:
f1:1c:3a:ec:33:70:49:c7:b7:86:f6:46:0e:2c:a7:8e:a2:a0:
9f:64:e8:3f:ef:21:ee:2e:a1:1c:f5:b6:f7:f6:43:2b:4e:01:
1f:81:cb:0f:5b:c9:88:7c:9b:94:e8:1a:e6:ab:28:a7:92:48:
29:92:ff:02:78:ed:d6:7a:f6:b7:5a:f3:70:fa:f9:73:3f:9b:
27:36:c1:30:dd:60:a8:31:33:39:b2:d2:4d:f0:4d:01:26:50:
9e:fd:f9:d3:e3:a5:ea:b2:2d:70:4e:bb:72:14:a6:26:b7:e0:
c6:dc:9f:32:96:74:73:ef:dd:a3:5d:6b:ae:85:d1:a1:2d:06:
48:22:08:84:f1:3a:33:bb:4f:a9:09:9b:10:fa:30:d8:22:50:
1f:5d:93:54:1d:d9:da:ad:df:60:73:93:fe:ee:ad:27:e6:c7:
7a:bb:2f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:38 2026 by rpki-client