Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
File: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft (raw, json)
Hash identifier: COX/DQVJAZ0eBZ80+sCimsNwHFJapXhkzSpndXIw620=
Subject key identifier: 19:8E:E9:2C:D9:BB:F0:96:C7:EF:89:AD:D9:E5:3D:B9:36:58:73:1C
Authority key identifier: E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
Certificate issuer: /CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Certificate serial: 019E1D230D8B38978E7DA6B70AFE1B5329D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
Manifest number: 0585
Signing time: Tue 12 May 2026 17:01:36 +0000
Manifest this update: Tue 12 May 2026 17:01:36 +0000
Manifest next update: Wed 13 May 2026 17:01:36 +0000
Files and hashes: 1: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl (hash: nk7ifCkW4j9yYHxQierhAJbFKZxZ7DrhK/6+4z7Gj34=)
2: BBnqz5PLnc70z9FSlT2QAxBx39w.roa (hash: JhXejmhrfNsZN3gNHBNgoJlEzQDItwOGR9bEap0U8kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:0d:8b:38:97:8e:7d:a6:b7:0a:fe:1b:53:29:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Validity
Not Before: May 12 17:01:36 2026 GMT
Not After : May 13 17:01:36 2026 GMT
Subject: CN=198ee92cd9bbf096c7ef89add9e53db93658731c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:29:95:7e:d7:dd:0d:b4:8a:67:a3:4a:b3:
8c:9f:9f:b5:d3:39:1d:9c:9f:d7:e2:1f:9a:46:a3:
c3:a6:22:ca:0a:7c:96:a9:0b:c8:0b:2c:a8:5f:6a:
a2:db:c6:f2:1d:b7:d5:9f:cb:70:b2:67:9f:e7:6f:
7b:49:33:2c:12:97:40:82:fb:3c:17:30:27:d7:66:
75:ad:71:e1:3e:70:90:f6:8e:e7:c9:13:f9:ed:2a:
7e:2a:c0:2c:01:dd:77:26:2a:de:be:33:b2:bf:65:
1c:4c:ec:0e:fe:c8:83:f1:eb:ec:89:df:d9:dd:80:
95:35:f5:29:fa:8a:47:f6:dd:96:24:b6:af:da:9b:
8f:a8:c5:6c:29:75:8d:9b:2f:3f:3d:65:01:5c:86:
cf:fd:c4:c8:7d:0f:e7:5d:6b:3f:a5:78:c8:b2:24:
b7:aa:1c:5e:4c:a6:d1:40:fe:90:a5:8a:69:13:02:
b8:73:85:58:31:27:c1:64:ab:ff:05:cf:bc:e7:40:
fe:81:d1:42:b7:a5:29:3b:de:14:41:4e:ce:eb:4d:
ca:68:e0:dc:69:c9:5a:ab:5f:bd:48:a8:de:87:f0:
e4:d7:6b:c5:d2:4d:7a:d5:77:ff:26:59:aa:39:4c:
f0:7a:e1:7b:9e:c9:24:e4:4a:bc:1a:e4:d9:44:06:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8E:E9:2C:D9:BB:F0:96:C7:EF:89:AD:D9:E5:3D:B9:36:58:73:1C
X509v3 Authority Key Identifier:
keyid:E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:af:17:d5:36:61:52:f3:65:4f:30:75:67:c1:b2:e3:7c:4c:
89:01:da:fa:f7:6c:37:f8:a9:f6:87:67:06:5f:74:33:94:cb:
dc:ff:e7:82:71:df:51:2f:17:25:19:89:16:6a:fa:8c:d6:17:
47:60:13:bc:1c:48:85:ff:55:91:8d:a4:0a:ea:7c:9a:4c:18:
ed:dc:ff:da:a8:ed:02:64:f1:eb:37:8a:1a:00:5e:c7:a9:22:
44:87:b0:70:72:b4:35:07:4b:ac:e0:7c:77:4c:80:bf:5b:0e:
46:2b:93:7d:42:44:9d:6e:af:06:07:ac:2d:58:2c:04:6a:46:
51:4d:e6:0b:14:c6:b8:e7:20:6b:e9:bc:2c:4c:0e:c1:1c:7f:
b8:00:78:b6:80:98:87:74:8a:0c:da:43:b3:84:88:62:23:76:
a5:f4:9a:2e:46:d0:f8:ac:a6:0e:b0:ed:15:40:12:13:44:72:
23:85:5a:62:a0:ad:8a:6f:e1:34:17:f5:58:72:72:94:8d:71:
c2:01:ce:b7:e8:8c:df:e0:a4:f8:f5:aa:9f:58:f1:0f:47:f1:
e3:03:00:78:ea:ca:c1:3a:69:d4:4c:82:09:1d:ce:fa:54:ae:
64:e0:d3:43:6b:01:df:35:82:ee:85:25:4f:75:e7:d7:f4:73:
e2:12:a6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:19 2026 by rpki-client