Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File: A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier: 5TTyqBMm6CnlZa7ZLbkoM+3a4GvnjgP4pDL9vdkin4I=
Subject key identifier: 08:75:3E:59:13:EF:39:D9:46:AA:30:A9:C3:B9:8C:58:F4:28:77:89
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial: 019E1D90D4C1C952AE396AE01C53B5F2DC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 19:01:31 +0000
Manifest this update: Tue 12 May 2026 19:01:31 +0000
Manifest next update: Wed 13 May 2026 19:01:31 +0000
Files and hashes: 1: 1-7mCdJzh3AJCBzQkr7Lm8UYkVoI.roa (hash: 8hePNi3TWg9ikxMqqbDcHn46RE1As5QHT7LFgD1DtFs=)
2: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: yqK3K8DutkD/kZZ3HKM5K4k57qFX2gxEo9iDfyUi1Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:d4:c1:c9:52:ae:39:6a:e0:1c:53:b5:f2:dc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
Validity
Not Before: May 12 19:01:31 2026 GMT
Not After : May 13 19:01:31 2026 GMT
Subject: CN=08753e5913ef39d946aa30a9c3b98c58f4287789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:a0:0d:c0:05:cf:db:1d:2e:90:0e:dc:20:
72:8d:bd:14:f3:2f:cf:34:3e:14:45:f4:cd:0e:8f:
d3:16:3d:79:c8:d8:38:94:d0:a7:9a:51:5c:8b:26:
a3:c9:57:67:41:9c:81:1c:b2:a4:fd:2b:8f:ba:f0:
7a:f6:d7:1f:fa:3f:37:67:e2:64:23:9c:0c:b9:4c:
4e:6e:b4:5e:47:cc:f9:5d:90:c1:ca:54:95:8a:03:
97:50:4d:3e:3d:5b:aa:4c:47:c1:eb:53:f3:09:3d:
8f:c3:e0:df:cd:76:fe:2d:62:11:8e:52:18:4f:13:
cc:46:1c:cd:ac:ff:5e:f0:7d:df:e4:39:0d:29:b3:
2e:8d:0e:28:10:58:9a:72:94:fb:20:b2:97:01:20:
7b:f9:55:47:a0:0f:af:ba:2d:7f:1f:d1:7a:46:85:
10:99:33:e3:ce:32:89:a0:2e:c4:e5:67:00:5c:00:
fe:a4:58:b3:1f:01:41:5d:48:f0:bc:7e:ee:1a:7e:
15:b0:b9:b3:e6:69:72:ca:cc:6b:87:c4:8e:95:a6:
1e:d7:3c:d8:1f:5f:ee:56:c4:47:29:a2:2c:52:95:
f7:12:7f:b4:f8:ef:30:d0:40:ff:67:df:85:05:41:
3a:ee:ae:18:af:60:bc:12:8b:1f:aa:8f:0b:85:0d:
c2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:75:3E:59:13:EF:39:D9:46:AA:30:A9:C3:B9:8C:58:F4:28:77:89
X509v3 Authority Key Identifier:
keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ac:43:32:19:22:c1:f5:01:26:5f:d9:a5:44:a5:03:73:67:
ec:17:8c:00:44:b2:b1:2d:69:86:04:cf:94:34:44:91:d8:43:
6f:46:58:f5:c9:28:d6:7a:0b:d4:d7:f2:51:b7:33:63:f0:8c:
2e:02:10:98:87:b0:79:57:7d:a1:0a:65:98:25:85:c8:b6:3a:
51:a4:5c:9d:7a:81:5d:41:4e:54:8a:06:5d:20:d0:59:41:0f:
64:9e:82:fb:97:14:0a:99:e9:a6:c7:dc:ce:85:5d:b4:aa:77:
6c:25:01:5a:93:25:7c:6c:b7:c0:90:12:98:dc:71:1f:5d:27:
ea:33:0a:91:20:6a:e4:b7:66:f0:0e:b5:85:63:e3:b8:8c:46:
93:27:cb:a0:17:81:8c:54:9b:ae:ed:bb:fe:14:b5:37:15:81:
2d:fc:ca:4c:ea:34:ce:90:07:ac:63:1e:1e:c3:86:91:df:62:
71:ed:98:3e:d9:41:fe:32:4c:1f:ee:19:b8:e6:ad:1e:cd:1f:
4a:9e:ef:ea:e5:aa:7c:25:f1:72:68:20:bf:58:c1:55:f9:d9:
89:79:cc:8b:3c:d4:e9:4b:66:70:cd:29:7c:a5:51:0d:6c:b6:
87:2d:ba:cc:45:8c:01:a0:42:84:fa:19:ff:a0:cc:dc:91:07:
22:90:22:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:39 2026 by rpki-client