Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
File: S4cDP8aofTuNDLPOGrK6u-UroxE.mft (raw, json)
Hash identifier: KGNH7SEBJn25xTia4F/H31DdBkODt2ek4jCU/zW9U6E=
Subject key identifier: EB:76:4A:F1:DB:E9:04:31:B9:58:E3:19:7D:F3:DF:07:9C:3E:A2:57
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Certificate issuer: /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial: 019E1D90D5CE6D11ED17C8D71BD642B5EDA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
Manifest number: 17E5
Signing time: Tue 12 May 2026 19:01:31 +0000
Manifest this update: Tue 12 May 2026 19:01:31 +0000
Manifest next update: Wed 13 May 2026 19:01:31 +0000
Files and hashes: 1: A8DjBFWApaOvVsNL6vXCg0QZ-Zs.roa (hash: 9eSIPzP882gnq+toY+f9OquYBfy9B8LbOEOMMknDFO4=)
2: ADpY0RLDCpkkHtiKPRNOvIWTc8o.roa (hash: judBBvzLbMYur3XpExAgR3vsTfmpZxb1unhrGpyJGfs=)
3: S4cDP8aofTuNDLPOGrK6u-UroxE.crl (hash: 0OvhXBBIMxcOtmJlDoz2SmJJDLFAXssK2xcemXgZqGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:d5:ce:6d:11:ed:17:c8:d7:1b:d6:42:b5:ed:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Validity
Not Before: May 12 19:01:31 2026 GMT
Not After : May 13 19:01:31 2026 GMT
Subject: CN=eb764af1dbe90431b958e3197df3df079c3ea257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:96:d7:c5:e5:80:55:2d:b7:6b:50:2d:fb:
11:d5:cb:63:36:9f:24:6c:32:65:75:0e:13:b0:df:
5f:e7:e3:30:f2:d6:1c:05:ed:49:49:8a:d7:54:10:
8d:e9:11:55:c8:5b:9f:b4:c5:7a:40:46:81:b7:5d:
7b:f0:d3:bf:7c:23:af:56:c3:bf:7c:d5:f3:cd:1c:
ea:2e:a6:8e:fa:17:ad:35:84:4e:50:31:a2:4e:81:
89:44:fb:64:c8:e9:1b:23:5c:d7:c2:fe:18:be:6b:
41:44:89:47:88:6c:e0:3b:8a:37:2a:17:1c:2f:46:
9b:37:fb:7f:1c:4b:9a:0e:9a:ad:62:e8:cc:d6:f3:
d7:84:96:c9:c8:0e:fa:84:fb:23:08:9f:9c:29:ef:
39:61:af:af:46:f9:82:93:46:b3:27:b6:22:d9:dd:
43:43:6d:52:04:99:b5:57:2b:76:91:5e:79:ee:e3:
a7:14:2d:40:1f:2f:44:9c:51:a5:25:0b:88:46:c2:
4b:a5:95:bf:40:dc:7f:db:de:de:09:0f:bb:c3:e6:
f3:23:57:e6:2b:96:36:34:fa:17:35:1d:00:e9:9f:
10:51:4b:46:b3:fd:19:4b:c7:37:ea:e0:6b:9f:f4:
3a:65:d1:e9:17:54:84:f3:a4:fa:07:4e:83:86:6d:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:76:4A:F1:DB:E9:04:31:B9:58:E3:19:7D:F3:DF:07:9C:3E:A2:57
X509v3 Authority Key Identifier:
keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0e:be:93:5b:ab:77:ac:5c:15:0f:1a:46:1d:2f:21:16:ad:
05:41:9d:77:86:3c:20:84:7b:03:2a:92:e1:3c:21:75:44:0c:
bd:0b:a6:d6:d0:19:43:59:9a:7c:d7:da:8e:28:85:97:1d:14:
3b:f0:ed:f9:ff:87:e5:6a:78:06:3b:68:16:4d:f5:64:47:22:
5b:03:8b:aa:c5:87:d0:c7:e3:0b:46:3d:5a:24:4e:55:a2:7e:
5e:cf:1d:4e:5e:aa:5c:67:19:49:a3:94:f2:96:36:c6:6a:2c:
37:d8:af:65:81:b3:bc:4c:9b:c9:84:4f:fd:be:67:4e:10:8f:
62:82:4b:4a:0d:b2:89:27:1a:ed:2c:b3:33:7d:f2:90:ce:21:
bc:84:fc:65:f6:fb:2b:a7:f4:d9:17:dc:11:ee:b4:5f:8c:ee:
29:5a:ab:93:7b:6c:73:67:3e:cd:fc:d9:a1:5b:47:31:8d:34:
86:05:57:b0:9f:a3:9f:22:45:55:e7:6f:ca:4e:3a:a6:91:0a:
15:04:ec:ab:84:b9:52:6c:7a:88:fa:f3:7a:48:a6:f2:63:7b:
69:1b:63:70:00:1f:86:77:fd:bb:14:dd:0e:a4:cd:98:1c:2b:
88:1c:c6:9b:3c:3b:59:dd:f9:d4:71:cd:3b:0b:e9:1f:41:d9:
24:38:23:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:25:01 2026 by rpki-client