Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: 3llwuS/eOdUQ9/4HmvF4Q+12hSfXSFqGmw7G3A6GbH0=
Subject key identifier: E9:39:57:76:6B:E3:BD:69:E2:18:3A:16:4C:CB:42:D0:F7:66:AD:84
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 019E1DFE53DCDF95B9536D4F969D6FE63E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 21:01:07 +0000
Manifest this update: Tue 12 May 2026 21:01:07 +0000
Manifest next update: Wed 13 May 2026 21:01:07 +0000
Files and hashes: 1: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: Nl7viN28ipopBNBiea+HgAylLSbHo+ICFT0rHHLoCpA=)
2: swB-_KyWrdCTLsFeJA5Bb0yEuQw.roa (hash: Xe4yfVJ7GclnsKO5T3vlkkQQQKjDz34ASisy6nJh1ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:53:dc:df:95:b9:53:6d:4f:96:9d:6f:e6:3e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: May 12 21:01:07 2026 GMT
Not After : May 13 21:01:07 2026 GMT
Subject: CN=e93957766be3bd69e2183a164ccb42d0f766ad84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:f1:00:e0:7d:41:11:d7:d5:55:ab:45:c1:
d8:a1:c5:fd:6c:a3:14:7f:1e:64:23:65:8f:3c:72:
20:d4:34:61:45:0b:60:2c:38:03:f5:2f:6e:e8:09:
7f:7b:a7:ac:b6:90:ed:d2:cf:6c:4a:9f:c9:9f:15:
43:c2:98:7e:2b:d0:1a:de:e7:48:12:e3:24:6e:4d:
19:8f:46:4f:b2:3a:61:19:9e:f2:bf:e9:0b:42:ec:
c0:a2:1d:95:f4:ce:8c:a7:df:6a:4a:7d:aa:1b:02:
e4:04:ad:1a:40:31:d6:e4:23:7b:44:e0:06:8d:88:
a8:54:88:74:54:b8:0a:67:5f:2f:f5:9a:d5:c5:df:
f2:d1:e8:9d:93:c8:37:2e:cb:9b:e1:d0:da:a2:6f:
e4:dc:13:0c:f7:ef:97:da:da:27:28:72:61:fc:3a:
b1:4f:69:52:9f:da:40:ef:d7:d4:cb:9d:2e:4f:fa:
6e:05:7b:86:e5:e4:9d:a1:7d:9a:8d:1e:66:48:49:
37:8c:9f:4a:9b:48:d1:5b:41:2e:6d:fa:6d:17:88:
4b:60:b9:72:37:8c:3b:14:e0:d7:77:7c:8b:fe:f6:
ae:d5:9e:72:94:e9:be:56:e1:27:4c:90:fb:4f:b3:
2e:8e:ea:d3:80:c2:dc:7a:ab:30:47:d8:b9:4a:9c:
88:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:39:57:76:6B:E3:BD:69:E2:18:3A:16:4C:CB:42:D0:F7:66:AD:84
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ee:d0:ca:c4:a5:47:8e:25:19:89:1f:3e:c7:4f:6e:20:c0:
4c:50:e7:e2:a3:61:20:1d:6d:87:d1:cb:21:03:82:bd:c3:ea:
f5:64:17:0f:b4:dd:85:d2:f3:5f:f4:bb:1f:87:69:53:76:af:
bf:dd:db:63:39:88:b8:8c:58:10:af:6c:54:cd:55:cd:b7:b7:
f5:5b:59:6d:4a:f5:61:ec:34:f7:82:b4:de:53:18:f6:8e:c2:
c3:eb:a4:dd:34:1c:97:3c:19:5d:79:6e:a1:e1:10:32:83:42:
d8:6e:7b:c3:53:56:1b:51:1b:66:7d:69:d2:3b:6d:ea:ac:47:
eb:57:cf:82:c9:92:bb:cf:c3:8f:98:0d:e0:c4:4e:33:3c:5a:
c6:ae:14:41:29:86:e9:b3:5e:ce:d0:81:86:8b:8c:81:51:fc:
ac:2b:5b:6d:16:65:22:8e:da:de:35:cd:fb:f2:dc:fc:2a:26:
da:70:52:f1:cf:70:e2:ab:3c:1a:72:f5:4a:1e:5f:3c:9d:04:
f6:cd:02:51:22:7b:75:13:4a:7d:e5:43:c6:fa:23:c9:ab:31:
1e:88:82:fc:90:19:c6:28:d4:76:3a:ee:13:71:a1:b2:c5:8b:
09:95:60:22:42:9c:82:7c:10:0d:14:db:cf:d4:d1:ab:f6:59:
f7:e2:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:51:26 2026 by rpki-client