Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
File: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft (raw, json)
Hash identifier: Q632ackMh3Q4oshmGEx7h+s3F061noLrsLjB6DeCgCw=
Subject key identifier: E9:3D:C5:D5:21:B8:84:36:3F:AC:8F:2D:62:2B:39:68:E5:56:74:E8
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 019E20923557C8CA05F68D7A8A81BB105B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
Manifest number: 0E22
Signing time: Wed 13 May 2026 09:01:53 +0000
Manifest this update: Wed 13 May 2026 09:01:53 +0000
Manifest next update: Thu 14 May 2026 09:01:53 +0000
Files and hashes: 1: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl (hash: j9PN5ALM5nlwPkcUYN/zPt7RgSjKiKyyoZlhI66waa0=)
2: emclNVVbrOSgwEekW1bHsSKyOAU.roa (hash: umsW/YEVV8b6bDEdAr61c5AeNAQYb7n62AaiTl4HN1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:35:57:c8:ca:05:f6:8d:7a:8a:81:bb:10:5b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: May 13 09:01:53 2026 GMT
Not After : May 14 09:01:53 2026 GMT
Subject: CN=e93dc5d521b884363fac8f2d622b3968e55674e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:5f:1e:15:0a:8d:04:b4:fa:12:1d:16:de:
a7:31:a7:be:a7:51:cc:a2:5d:80:73:8d:a6:fa:48:
45:24:8b:8f:cb:c5:bb:4d:c8:d7:27:dc:bd:3a:c0:
af:df:60:a0:b7:8e:30:0e:11:ee:3c:c6:14:af:af:
81:78:fc:6a:84:79:1b:fa:05:6f:73:db:e0:6d:2c:
23:9c:bf:d5:c8:a8:75:42:e2:3f:d2:02:f0:e4:c9:
74:c9:2e:d2:f3:f3:4c:5a:06:0f:a8:73:83:49:a0:
17:ec:42:fd:c8:76:2e:4e:71:cb:1e:4e:0c:7f:b0:
2f:74:5c:92:22:57:a1:db:5a:7f:6e:01:05:61:fb:
e9:18:37:08:bf:5b:75:71:e6:76:68:ca:fb:bd:08:
b3:5e:8b:df:5c:3c:80:15:b4:fe:3a:57:6b:bd:fe:
c3:ea:50:b1:c5:eb:15:16:31:06:6d:5e:be:3f:9c:
98:25:21:ca:8a:01:3b:bf:50:31:3f:d9:5f:c2:f0:
8f:ca:81:69:c7:ea:d3:27:7d:33:13:cb:fb:f2:87:
a8:b5:f8:74:fd:14:55:ff:fd:67:2c:0d:16:49:ac:
6e:fe:7e:44:6a:b7:7b:8b:c0:fa:cc:80:33:f5:8f:
93:46:42:c8:c6:aa:9b:38:ea:cb:95:d1:e6:c1:b3:
8a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3D:C5:D5:21:B8:84:36:3F:AC:8F:2D:62:2B:39:68:E5:56:74:E8
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8a:53:15:57:9f:bf:a1:fb:1c:71:54:18:15:a1:b4:78:74:
a0:76:32:aa:8c:3a:6a:73:17:5a:18:09:47:05:c9:51:39:95:
61:45:51:e6:1c:48:d1:cf:e7:04:a1:cb:4c:84:09:dc:d4:7d:
fe:58:45:4e:1c:51:f4:6c:b6:24:8e:e9:49:03:95:73:5d:15:
14:40:c7:eb:17:18:af:0f:95:83:1b:e2:aa:e4:80:3b:b2:a0:
85:74:7d:5e:0f:f5:bd:fc:ce:dc:d9:98:2a:63:4a:f0:71:0b:
ff:93:50:6f:ff:15:1d:c9:e5:d2:2f:90:92:c4:e8:b1:da:9a:
7e:07:e4:0c:4b:59:5b:fc:a4:3e:05:77:d1:78:dd:07:c5:0d:
dc:e3:84:85:ae:88:27:01:d8:94:2f:7b:0f:cb:d7:31:2c:19:
a3:38:89:7a:66:be:0d:5d:a9:6a:17:2c:bc:cd:e3:31:dd:fa:
b6:57:c8:b3:6e:b0:e7:ad:82:56:80:41:01:e5:db:da:b8:28:
2b:a7:06:e6:f8:15:60:4c:ef:de:a2:36:4d:7e:58:cb:94:ac:
cb:53:ca:a0:5a:2d:84:36:e7:73:a9:14:bb:42:99:f6:d6:59:
3e:ae:3e:fb:39:61:81:f3:a0:93:e4:a6:88:51:9e:f8:de:8e:
c0:4e:b6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:49:12 2026 by rpki-client