Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier: tIa0DkOt8B4V6koZmbpjJH5CCs5rfBgcQHavaRcWZPI=
Subject key identifier: 80:8D:05:4C:C1:EE:10:F6:60:72:84:F9:39:41:7E:30:7A:06:BA:28
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 019E1C7DA16751D3F8F4B254E762FD143D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 14:00:55 +0000
Manifest this update: Tue 12 May 2026 14:00:55 +0000
Manifest next update: Wed 13 May 2026 14:00:55 +0000
Files and hashes: 1: D6JN_SUanY3VCPcy8MM0wRyWpFg.asa (hash: GO31s3wbPJQu1T3Grsa85oI8sAVmrZULl2h6J3A4Dcw=)
2: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: /AddQbW4Qb5+8k5wuJSf8NKBDRXF/zYXvP01hSt4eHA=)
3: iVwLg--4UDbLvJn4dxkRR2fxInw.roa (hash: wrzc6nRtbm4MeWrVh43cUfhaLyz6R8Fbv5xm23WJS0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:a1:67:51:d3:f8:f4:b2:54:e7:62:fd:14:3d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: May 12 14:00:55 2026 GMT
Not After : May 13 14:00:55 2026 GMT
Subject: CN=808d054cc1ee10f6607284f939417e307a06ba28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:a9:5f:c1:1e:28:8b:ab:c1:ff:39:67:31:
08:00:43:39:b2:68:32:32:11:6d:82:08:bf:36:bf:
a0:00:05:7c:b9:80:14:4b:39:d4:87:a6:a4:ac:b2:
b6:6f:2a:3f:57:b1:0b:39:56:70:50:88:79:f2:33:
35:2c:48:16:3f:12:aa:38:63:00:8e:40:b7:b4:3e:
13:9e:c1:30:3c:da:ab:85:98:57:11:87:23:6f:f4:
38:d2:96:54:5f:b4:26:88:11:a3:19:79:48:15:8c:
90:75:7e:2a:01:26:87:82:b0:43:36:9c:06:c4:67:
f3:16:19:8e:c1:11:ca:9a:01:da:30:b9:c4:7b:ae:
41:80:27:a2:9d:77:90:1a:5a:b5:88:ad:94:e8:c6:
2d:e8:e1:1f:69:e4:89:12:66:34:58:4e:e6:b1:1a:
9b:d8:1a:61:41:a7:ff:78:c2:3c:f2:c7:6c:8d:30:
6a:b1:c6:11:b9:da:12:07:05:8e:08:63:b5:d6:b0:
55:65:7f:2c:45:bc:0a:22:e8:9a:b6:8a:d6:d9:c1:
b0:36:a0:37:07:cc:86:af:c2:4a:7a:4a:a9:3f:ca:
2d:72:b2:8b:6f:16:4a:a0:b4:c5:c1:a1:69:37:66:
ad:b7:27:e8:e5:20:21:93:88:14:fe:88:a4:62:41:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8D:05:4C:C1:EE:10:F6:60:72:84:F9:39:41:7E:30:7A:06:BA:28
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:41:ff:15:e9:d4:ec:9c:9b:fd:ed:b7:59:a5:1d:8d:be:68:
2d:60:47:a5:bf:93:c3:50:8e:a4:fa:17:f0:30:59:c0:14:9e:
d2:b4:44:80:be:1a:6d:05:62:27:01:12:b7:7a:43:9a:44:ef:
f9:d4:69:5f:6e:7e:c2:f4:3b:d2:59:ea:d1:00:3a:7b:3d:ef:
ff:74:02:1a:d8:f7:d7:b1:7d:1f:e0:f0:9a:b4:e0:cd:01:59:
4b:56:25:a3:02:45:c1:d0:53:f3:3e:b6:74:02:9f:68:99:99:
f6:6b:b4:a7:2d:c6:33:45:d5:7d:6e:6a:25:f4:80:7e:41:5f:
f1:e0:b8:f1:79:aa:07:a9:e3:02:94:7e:20:67:1d:43:79:56:
dd:96:22:e2:06:29:c9:59:2b:fb:16:4a:67:69:9b:45:30:cd:
a7:0b:b9:a8:47:cb:05:84:77:dd:f7:77:a3:61:a4:b9:b8:47:
5a:01:85:54:ac:5e:28:18:cd:ed:3b:7a:3d:d8:fb:ad:a9:ec:
72:73:09:d5:79:aa:f5:4e:c1:c7:00:bc:9d:1b:22:e6:25:16:
80:35:4d:ae:3a:e3:52:fe:02:5e:06:3b:2d:8b:0f:3d:ce:80:
e1:bd:10:5c:71:68:a4:4c:51:24:df:da:d2:c2:dc:1a:e8:a2:
46:7c:5e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:34 2026 by rpki-client