Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
File: 4tY8oFQoMuZCZPOssVYZki_s-Ds.mft (raw, json)
Hash identifier: QXODntIiWEWv7UNS6wd5KdRVTTArS6hv2OA+tk2bM+I=
Subject key identifier: DF:8E:F5:42:6E:69:A0:E8:01:F7:7C:5B:41:FA:9C:2D:21:BE:D2:F3
Authority key identifier: E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
Certificate issuer: /CN=e2d63ca0542832e64264f3acb15619922fecf83b
Certificate serial: 019E1D227C153203FC223E50769CACDD5F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
Manifest number: 11DE
Signing time: Tue 12 May 2026 17:00:59 +0000
Manifest this update: Tue 12 May 2026 17:00:59 +0000
Manifest next update: Wed 13 May 2026 17:00:59 +0000
Files and hashes: 1: 4tY8oFQoMuZCZPOssVYZki_s-Ds.crl (hash: 9XSys9EgVQHE79E4yP422anrwSQ3SFz5UmY1t61HkGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:7c:15:32:03:fc:22:3e:50:76:9c:ac:dd:5f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d63ca0542832e64264f3acb15619922fecf83b
Validity
Not Before: May 12 17:00:59 2026 GMT
Not After : May 13 17:00:59 2026 GMT
Subject: CN=df8ef5426e69a0e801f77c5b41fa9c2d21bed2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9d:c5:b4:4d:94:09:40:7c:d9:97:11:de:3e:
89:9e:5a:92:d4:5a:84:96:1d:05:1c:24:f6:cf:01:
d1:97:6e:af:b3:94:9f:e9:e1:30:31:ad:4f:7a:dc:
ea:0a:d0:7f:9c:75:2b:c2:b1:79:b3:81:6b:ae:4c:
d8:de:16:0c:ec:47:e2:f1:94:80:33:02:1c:76:bb:
5f:82:0d:b9:c8:14:aa:99:90:fe:80:04:88:9b:26:
c5:3c:3e:13:54:3d:ca:a5:5d:bb:81:d0:72:b7:d7:
ff:05:34:bc:69:d0:cf:d3:20:da:52:9a:72:90:73:
ad:f1:10:59:62:7a:4a:06:b5:54:da:30:3a:49:da:
b1:b3:2f:a1:99:b7:27:8d:d8:88:6a:f5:f4:ac:06:
f5:56:0e:fb:4e:ba:bb:ce:54:90:e8:f2:31:a6:88:
a5:bf:3d:06:34:91:e7:35:85:26:a7:bd:1d:0c:ed:
7a:aa:e9:7c:f5:a9:8d:9b:d3:90:77:46:49:13:24:
3b:7e:e2:cb:e7:b9:e2:cf:23:bc:20:da:5c:74:bc:
b7:97:73:c2:c9:20:08:b0:66:a4:76:ea:91:21:a5:
e9:2a:d1:94:ad:83:c2:51:4e:8c:e7:f9:55:49:e3:
e1:70:15:27:7d:5c:d7:9c:be:ff:e9:2a:7d:64:07:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8E:F5:42:6E:69:A0:E8:01:F7:7C:5B:41:FA:9C:2D:21:BE:D2:F3
X509v3 Authority Key Identifier:
keyid:E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:43:b1:d3:4f:e2:c0:9d:97:1c:6a:17:ed:b1:91:97:0b:54:
33:fd:1e:cf:ea:63:c1:32:6a:36:10:d4:45:34:a4:3e:52:64:
f8:06:46:8e:de:a8:89:30:f5:79:f5:1a:73:6e:49:9b:e9:ef:
5e:7b:14:25:99:56:74:02:a6:48:bf:d6:27:c8:7a:4d:2c:4d:
8b:3c:51:13:99:62:b8:b0:59:61:6a:dd:65:b6:5b:43:96:06:
60:bc:ef:9e:9f:7e:46:f8:86:93:fa:07:83:75:10:fc:4c:23:
ef:28:11:ee:8f:e0:9c:76:c7:89:ea:e4:79:ac:ba:31:f2:ee:
d2:52:13:e3:db:0b:97:d5:ef:65:c4:5c:1d:a4:7c:11:0b:8f:
f7:98:a8:7b:10:d6:a8:68:db:27:d6:0f:da:a9:00:f1:b1:94:
26:05:f2:c5:8a:c4:72:28:d5:1a:d7:ba:50:38:2c:8a:46:4e:
89:dc:62:9c:98:25:e7:41:9a:52:d1:0c:37:b4:88:87:96:fa:
53:f5:bb:10:26:52:aa:20:48:16:3a:5e:8e:c3:9f:73:19:4c:
1d:26:65:0b:67:b3:e9:e7:af:7e:6f:9b:c7:7e:3b:4f:8e:90:
76:31:29:82:38:ce:d7:a1:57:9f:b6:0f:ae:ba:a6:4c:67:e2:
af:87:cc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:54 2026 by rpki-client