Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: 8UUm7acPU3T0395Id5wOKfjFbkCjEL6umqhoHPtcbPA=
Subject key identifier: 8A:B6:88:54:F9:14:95:03:B2:B4:79:1E:97:5D:1D:B5:1C:FE:23:21
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 019E1D22F9B701341A9C9CD3F79C21F67FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 0780
Signing time: Tue 12 May 2026 17:01:31 +0000
Manifest this update: Tue 12 May 2026 17:01:31 +0000
Manifest next update: Wed 13 May 2026 17:01:31 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: l4c0jh+sphGJ2jfcZy3BPYPZcCgTReOR8LVWJlKKGa0=)
2: p_0XKV3exhd9uWdO5Cc3FmTs35I.roa (hash: vHzaqcFQuYBAr6NOnDqMX/4qIu/wE1PoUiKrWppcY/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:f9:b7:01:34:1a:9c:9c:d3:f7:9c:21:f6:7f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: May 12 17:01:31 2026 GMT
Not After : May 13 17:01:31 2026 GMT
Subject: CN=8ab68854f9149503b2b4791e975d1db51cfe2321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:ff:5e:7a:b1:dc:99:89:ed:68:b1:2e:2d:
28:62:2f:11:b3:41:3b:1b:fb:75:3d:51:da:b6:fe:
6f:bc:cf:eb:64:fa:46:e4:d0:dc:70:38:88:5b:aa:
84:4d:d6:b4:05:3d:d4:f9:00:66:3d:ed:78:1f:ad:
f4:c0:ab:d3:21:a4:4b:08:fc:26:95:27:20:a7:a8:
c2:50:3b:b4:be:c4:7c:bd:26:e8:fd:e6:1c:67:d9:
64:4f:6e:64:8e:8e:48:57:13:77:ec:18:d6:00:f3:
c9:8b:e2:cb:d1:b2:7f:a6:5d:ba:8e:8b:92:c5:5c:
57:90:2a:6f:4d:9d:72:dc:d3:ba:ea:91:c2:2a:94:
c4:1c:35:a5:3c:fc:dd:58:ed:75:2e:fe:6c:2b:21:
f8:ab:c9:73:5e:a3:aa:4c:a4:4f:53:04:4e:58:9f:
21:ef:90:20:41:d7:50:35:29:4b:40:99:81:81:89:
15:20:17:a7:a7:40:f8:20:9f:a7:4f:d2:d9:4c:af:
0e:55:b0:de:cb:a4:bc:d2:c7:70:ea:87:11:16:bf:
b7:60:1a:77:10:d9:d0:c9:51:44:48:dc:49:0d:5f:
c3:05:fd:46:4f:2e:ae:5a:0c:8e:3c:82:10:b6:e6:
0e:e2:2f:7f:ec:d7:1b:78:0c:7a:09:03:bd:26:d4:
3d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B6:88:54:F9:14:95:03:B2:B4:79:1E:97:5D:1D:B5:1C:FE:23:21
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:aa:5e:36:ef:07:74:3d:87:22:bc:4b:db:ee:cb:b8:19:9f:
52:da:2d:15:eb:85:d1:77:c7:aa:a4:23:ac:71:0d:31:93:73:
71:c4:77:27:f2:c8:66:e5:7f:0e:8c:d2:da:b7:79:51:2a:a9:
6d:88:a6:94:0c:0a:cb:27:3b:99:89:fd:c3:d2:80:89:44:5f:
a3:4d:94:87:27:ed:03:7b:59:64:96:23:e0:95:47:6b:13:6b:
a8:41:4e:f8:91:c9:de:7d:64:a0:33:c8:69:0a:1d:0e:86:05:
3a:76:bb:a6:46:74:92:a6:50:35:2c:df:50:6c:f5:f5:05:e2:
e2:98:46:57:1d:6c:2c:ba:1c:39:be:41:82:56:03:50:81:5b:
81:6f:53:67:86:d9:a6:ec:cd:16:46:b7:61:77:b0:eb:12:1d:
c4:e9:36:2d:00:8b:fc:a8:ba:b6:c3:9b:d2:5a:9c:03:8d:e4:
c2:93:b4:fa:8a:7e:0d:d3:1f:91:cf:f2:68:b4:81:f5:51:40:
50:94:9e:fa:d5:0c:18:4b:79:92:54:e3:44:96:25:2f:e2:2c:
2d:50:95:e7:0d:49:9c:d9:19:7a:be:bd:5c:0d:f6:07:58:bc:
46:5d:b6:df:b7:75:1f:3b:fb:30:53:d3:c1:3a:f8:39:c8:18:
da:26:5e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:23 2026 by rpki-client