Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json)
Hash identifier: CEmnCMdlJi7VCnnFEamhRXs49GuKrRARWsSy/tywt9E=
Subject key identifier: 48:66:19:3A:21:85:19:DF:23:31:6D:52:B4:72:32:D5:7F:1F:8F:81
Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f
Certificate serial: 019E1DC70E992B583BD976433CE3CE416BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
Manifest number: 04F7
Signing time: Tue 12 May 2026 20:00:45 +0000
Manifest this update: Tue 12 May 2026 20:00:45 +0000
Manifest next update: Wed 13 May 2026 20:00:45 +0000
Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: ZwspyDMyvT+bDU8gGD+nCD+Rl5YT4rnUfKHRYZJrop4=)
2: 8J8jqfIBZIcDi5qcEjDOA-SS3uk.roa (hash: P2MosB3uZAItjOGMQglzm3PWOTUEZCA6IE9hN8uIIUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:0e:99:2b:58:3b:d9:76:43:3c:e3:ce:41:6b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f
Validity
Not Before: May 12 20:00:45 2026 GMT
Not After : May 13 20:00:45 2026 GMT
Subject: CN=4866193a218519df23316d52b47232d57f1f8f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:29:06:73:53:3d:e1:3e:e8:bf:be:96:fc:
2a:14:2e:48:22:8b:a6:bc:9a:f5:c0:ee:e3:9a:52:
59:65:79:20:03:f7:94:f8:f0:56:25:30:58:0c:09:
8a:73:d4:8f:ce:0c:1f:2a:5d:d7:1b:19:6f:38:00:
3a:7b:6b:72:00:3e:29:1d:34:aa:c4:4f:c6:84:00:
c9:59:ec:4d:7c:5b:4e:1a:87:a8:af:f5:3f:09:3d:
9c:8c:a6:7f:7e:06:ce:71:23:7b:5a:d4:8b:12:d5:
4f:0e:07:81:85:fb:ea:9f:95:a6:87:cb:02:42:6b:
54:f3:00:32:a9:28:7c:d2:6f:3d:a2:a2:f5:1d:b8:
6b:93:86:6c:d2:8e:b9:00:44:79:21:74:81:8a:42:
2a:d9:86:00:26:39:e4:57:fa:4c:06:fa:48:5f:8b:
9d:e8:c4:41:b7:ba:b0:f8:d9:f7:fe:7d:6c:6c:bc:
f9:91:6b:bf:eb:d6:20:21:18:c6:1a:da:c5:3f:96:
60:c2:48:e5:a5:82:a5:be:ef:10:09:e2:e3:ea:aa:
31:c8:38:02:3e:da:2f:4f:f9:a5:04:95:ae:e3:6e:
68:bb:57:b0:f3:51:4d:04:ce:e8:33:bf:3b:22:23:
49:85:39:da:a8:61:8b:13:3c:5f:fe:f2:f3:66:3d:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:66:19:3A:21:85:19:DF:23:31:6D:52:B4:72:32:D5:7F:1F:8F:81
X509v3 Authority Key Identifier:
keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f0:02:16:25:1f:73:5e:f6:94:36:12:ed:94:68:f3:47:56:
0d:5f:b2:64:7c:21:92:a5:46:b4:b1:db:7a:8d:ca:0b:29:e8:
72:1d:cb:30:a0:eb:5b:d0:e8:7e:7f:6e:4a:0c:4d:31:6d:33:
06:3e:dc:14:4f:4b:10:cd:90:ac:c7:8e:38:4a:c0:c2:75:e7:
56:f1:8b:d6:ae:1c:b2:4d:57:65:b7:42:6c:05:63:ee:5f:2d:
2d:e6:6d:73:0a:d8:da:b4:ec:3d:1a:8b:ed:bc:c8:d4:f2:87:
e9:69:ef:50:b8:67:03:08:73:de:c7:f4:7f:f7:c9:2f:ca:d8:
20:f0:b2:c8:53:93:f0:c6:81:6f:51:f4:3b:95:04:45:bb:0f:
bc:66:c7:56:c1:e0:7d:53:be:d3:66:33:51:05:55:0f:45:15:
f6:9f:f5:1d:75:bf:46:44:13:2e:87:16:12:50:ba:de:08:7f:
4d:7f:17:12:79:e3:ea:fb:60:84:eb:41:e8:49:98:18:a8:01:
1b:82:7b:25:79:c4:f9:97:f7:6d:c3:1e:84:fd:d4:e4:c0:ca:
fe:db:54:2c:c4:c3:2e:8d:c1:96:8a:be:a3:2f:ae:c5:d6:c6:
fb:36:a4:4c:5f:35:b9:bd:f8:34:13:b9:5d:51:3c:c8:38:ac:
8d:c0:b6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:35:56 2026 by rpki-client