Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
File: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft (raw, json)
Hash identifier: dj8ni9iWRhG+u+uTmy1FotL2knwyklq5Obpx1KcvUvA=
Subject key identifier: 47:8F:FB:DC:B7:BC:2D:A3:12:59:0A:76:31:3D:63:B3:1B:29:2F:53
Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Certificate serial: 019E1D59D6F041EEB0517B1914F3460A6CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
Manifest number: 0E19
Signing time: Tue 12 May 2026 18:01:27 +0000
Manifest this update: Tue 12 May 2026 18:01:27 +0000
Manifest next update: Wed 13 May 2026 18:01:27 +0000
Files and hashes: 1: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl (hash: kKgylKVBm39h0dhxTtiaplM2ubs0kcZXMv1irSDivK4=)
2: PrQ9lga9Ki2nMKZgqqoUsecApCI.roa (hash: wgW6ob7p1bWzADPUesI+OZalVcxaNSlVibSRrGZpWnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:d6:f0:41:ee:b0:51:7b:19:14:f3:46:0a:6c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Validity
Not Before: May 12 18:01:27 2026 GMT
Not After : May 13 18:01:27 2026 GMT
Subject: CN=478ffbdcb7bc2da312590a76313d63b31b292f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:eb:37:ed:f8:f6:fc:79:c0:42:b8:20:aa:
f6:44:dd:d1:d6:88:4e:dc:8e:0a:87:c9:db:c3:ae:
04:ac:6e:31:e4:1c:26:f4:5c:39:3d:29:e5:69:67:
ef:70:b1:12:ce:b9:a3:5d:a2:4d:a8:24:ea:71:a6:
94:6b:7b:b0:eb:c3:e0:5a:1a:78:ae:4c:56:8d:67:
73:f5:b1:5d:70:36:3c:f6:c3:1a:28:a3:27:e6:dc:
96:db:ac:f5:22:1d:5a:c9:f0:c8:fa:4e:e2:2d:c1:
2b:ef:67:1f:8e:4a:dc:10:84:62:7f:c4:4b:e5:31:
9e:c1:4f:53:8b:cb:8e:bb:2a:8e:a3:79:05:fa:be:
42:32:68:b2:0c:99:df:8b:4d:79:c6:1c:88:be:c4:
af:25:4e:77:f0:44:72:35:01:d4:dc:84:f6:fe:9f:
80:18:62:ea:54:b3:49:fe:83:8f:a3:3d:0d:de:0b:
17:1a:09:3b:6e:04:84:74:71:ce:c9:55:72:ea:96:
2a:bf:6f:f0:f1:47:cc:d6:ec:5b:a6:c4:cf:b3:80:
be:33:98:21:9c:e0:6f:1b:45:ad:ca:65:e5:68:1c:
7e:0a:39:71:fe:27:b1:18:a8:bd:fb:ad:a9:08:9f:
dd:c9:76:b6:d3:0f:57:69:a9:2f:aa:ab:e5:e8:7a:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8F:FB:DC:B7:BC:2D:A3:12:59:0A:76:31:3D:63:B3:1B:29:2F:53
X509v3 Authority Key Identifier:
keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:51:c2:b8:3b:8d:05:27:40:10:fd:9e:2b:fe:ff:a5:00:22:
14:53:a7:2c:cb:a9:e3:85:a2:53:c7:82:e6:4b:cb:89:5f:08:
f7:76:9d:da:b8:f5:cc:ca:1a:0a:da:75:42:01:fa:92:88:45:
92:b6:29:ca:91:d7:f4:1b:a3:79:e2:15:25:10:4f:05:d1:fa:
03:31:57:9e:45:fd:3d:05:40:18:51:ec:6e:38:98:e7:fd:10:
5e:71:f2:88:28:49:c1:ba:56:15:72:33:e9:3b:a9:e2:8f:18:
dc:15:17:9e:a3:97:1b:f0:d6:99:8b:b0:2f:af:ef:08:57:6a:
09:70:3f:33:2b:0e:f7:41:87:73:47:cf:a0:08:e7:d7:69:9d:
c4:0c:e9:3c:f4:61:5a:a9:d5:ea:e7:e8:60:0c:9b:11:42:93:
41:0c:56:6c:6a:ec:50:ae:cf:44:77:83:a1:b1:ff:1f:c1:1b:
c8:48:c5:b4:69:d0:46:98:c2:93:ed:15:bb:0a:81:aa:77:cc:
e7:71:a8:54:e6:80:85:2b:50:a6:c1:6d:45:0d:a9:19:0f:ad:
a3:fc:8b:3a:47:95:f0:8f:73:75:f8:30:47:d2:05:fd:a7:84:
b9:34:b4:2f:5b:31:57:b9:a6:7d:63:d0:a0:5a:59:41:14:bf:
74:08:73:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:28 2026 by rpki-client