Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
File: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json)
Hash identifier: LPgJn8L6m1GiaO2qqP6YmR+n2L8a7Q+RjzppxNPCI2w=
Subject key identifier: 38:FD:E7:A1:09:BB:57:8D:56:53:96:3E:13:66:2B:72:F2:A1:B4:A1
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial: 019E1D2270B96B0524F3055A6ACBCB79318C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
Manifest number: 0931
Signing time: Tue 12 May 2026 17:00:56 +0000
Manifest this update: Tue 12 May 2026 17:00:56 +0000
Manifest next update: Wed 13 May 2026 17:00:56 +0000
Files and hashes: 1: 4Ja60_Ob1qyQ36cA5voSc2uJesU.roa (hash: phe7oxYicIsE5Su+Fgz6QVulHqYmo2k2ps7HRljB/84=)
2: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: vY/+JBgFSoSVvJJGvhiZjKAXmUQ8dzWZRpS2qMjDLLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:70:b9:6b:05:24:f3:05:5a:6a:cb:cb:79:31:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Validity
Not Before: May 12 17:00:56 2026 GMT
Not After : May 13 17:00:56 2026 GMT
Subject: CN=38fde7a109bb578d5653963e13662b72f2a1b4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8f:fa:91:cd:77:6a:c4:fd:fe:1c:7b:03:ee:
e7:88:81:c9:25:a5:63:e3:a0:72:7e:b4:5a:b8:37:
ef:e2:6b:10:72:65:b7:9b:62:4b:ad:68:99:69:64:
5d:6b:94:e9:7b:c9:94:78:00:e9:af:70:4c:1a:17:
99:b6:3e:08:5e:62:df:09:65:06:0b:e6:33:b6:49:
7e:6a:f7:4a:cb:f6:6c:fc:1d:7a:23:b0:8a:55:88:
c4:a8:36:15:4f:fd:e6:f0:39:0a:c6:95:25:8d:7c:
60:bf:a4:51:31:ba:d6:8a:01:1f:14:f9:f2:6c:53:
e3:4f:c4:91:9a:c7:9f:7a:19:a8:34:25:02:72:8c:
0b:e2:5d:f0:5b:3f:d1:a0:b5:23:08:ba:e2:8a:47:
6d:a3:7c:54:f9:9a:28:90:8b:f1:fb:32:23:c5:84:
8b:35:90:f1:52:30:94:9a:99:a2:48:b8:3a:75:26:
b9:a0:9b:12:2e:5a:c3:3b:6c:ad:05:ea:0a:a9:85:
76:7d:1c:13:ce:1f:ba:59:2e:18:d7:f3:c3:e9:6b:
9d:fe:40:f7:57:a8:7e:73:e4:af:45:01:17:d4:2f:
7f:7c:5f:a8:2e:c8:60:e9:63:82:d9:1b:6a:72:0d:
96:da:14:f8:36:92:ce:dd:ad:37:3e:d8:52:fa:ec:
9d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FD:E7:A1:09:BB:57:8D:56:53:96:3E:13:66:2B:72:F2:A1:B4:A1
X509v3 Authority Key Identifier:
keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:89:9d:0e:5d:3d:f1:44:9c:8d:e8:dd:77:0e:f7:76:36:a2:
f5:d6:ab:94:bf:f4:cc:da:6f:1f:7f:4f:2f:e2:31:e1:46:8b:
e7:50:73:bd:0d:a1:cc:b3:12:e5:89:a5:ed:62:1f:0b:cd:06:
33:d6:7a:15:b3:2d:ac:4f:ce:68:e9:23:a9:b4:c2:d2:1b:9d:
be:d5:d0:89:84:e9:0f:35:8a:ec:64:64:97:1c:81:42:92:86:
95:71:d8:7d:52:70:1f:e9:14:2b:f0:47:cb:32:59:3e:7e:e5:
eb:bc:1f:4e:cb:a1:d1:d3:1a:9e:2d:01:9b:10:ab:e5:73:dd:
85:ac:63:9d:a4:ea:2d:0e:06:03:fa:40:51:40:ae:73:64:c2:
7f:b1:e8:f0:31:e7:34:2b:87:2a:b1:38:4b:8f:51:02:8a:a4:
09:da:7c:3d:ce:f5:ff:42:9e:f7:1b:f4:fc:b6:a8:dd:c0:34:
7f:31:a8:43:5a:f2:92:b9:98:62:16:10:6b:e8:68:06:0e:c0:
03:18:44:66:e5:01:30:21:f7:f9:ab:f2:89:37:20:99:7e:88:
53:76:60:59:6a:47:84:5b:9d:d4:b7:14:44:56:6d:5c:ce:a6:
c2:48:f0:80:5d:b3:5e:3a:6e:30:5e:dc:81:ad:f5:6d:6b:9b:
91:2d:72:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:22:23 2026 by rpki-client