Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
File: 4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json)
Hash identifier: bBAtGRhVtM6JtICGrZvSRnWq7aJQCfkRg8kxg9IUCkQ=
Subject key identifier: AA:04:E2:58:3F:AD:7D:33:CC:02:CD:9E:1B:82:71:4F:9C:93:DD:DF
Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
Certificate issuer: /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Certificate serial: 019E1C7D624AA5F6E2209599B6E0A1CDF926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 14:00:39 +0000
Manifest this update: Tue 12 May 2026 14:00:39 +0000
Manifest next update: Wed 13 May 2026 14:00:39 +0000
Files and hashes: 1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: 6JZ7pjyXrtZ66lFQmXwJQ7n+vMUOgpCGWRfEUFU1ues=)
2: 8WgF1FeeAMIWLEqNHsEmrCFfWUU.roa (hash: l9CCrON/4HDYrH0Vj7tQlkfUKI21p0hKJL3nNR+WrZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:62:4a:a5:f6:e2:20:95:99:b6:e0:a1:cd:f9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Validity
Not Before: May 12 14:00:39 2026 GMT
Not After : May 13 14:00:39 2026 GMT
Subject: CN=aa04e2583fad7d33cc02cd9e1b82714f9c93dddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:54:76:62:66:7c:ed:78:66:1d:0e:e6:be:
43:de:9d:0d:bb:67:aa:2c:89:fe:66:a7:f6:62:15:
52:35:23:ec:95:44:e9:43:0d:6d:fa:b7:af:e5:64:
e4:6b:ce:20:c2:c1:99:6f:86:9f:fc:3d:1e:7a:d2:
d4:b6:8c:3f:90:57:2f:fe:52:0c:98:45:29:68:54:
df:3e:8b:df:0f:9c:84:51:6a:c1:93:48:85:d6:c4:
31:63:f9:63:2d:a6:ea:ea:07:2c:77:e0:40:bc:09:
96:36:51:4b:02:93:a8:de:58:ed:35:4d:f0:ca:4d:
c7:5a:7b:cb:ea:49:ba:c6:29:0f:77:85:83:fd:80:
af:91:5e:5e:1f:62:d6:3e:c0:78:91:ab:6b:15:7a:
63:e2:96:93:84:32:cf:5f:1f:af:fc:0f:26:96:60:
30:f7:f1:87:ec:9a:ad:79:0d:cd:50:1f:ba:77:1b:
59:0a:c7:bb:37:fb:34:6e:cb:ca:15:8b:31:bd:55:
87:a9:44:8b:67:19:95:ed:5f:ba:2a:96:1e:c2:ef:
91:28:d5:67:31:a3:49:5b:86:29:26:ae:e3:70:6d:
24:8e:ee:87:79:4b:97:63:42:75:48:b6:b5:12:3e:
83:e1:84:3a:6c:ee:19:fd:6f:54:e3:aa:0e:b9:ce:
0b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:04:E2:58:3F:AD:7D:33:CC:02:CD:9E:1B:82:71:4F:9C:93:DD:DF
X509v3 Authority Key Identifier:
keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:10:10:d9:32:3f:e6:89:eb:e9:ec:55:6e:37:5f:01:89:c1:
89:1e:8c:dc:ff:ea:30:6d:e4:4c:62:d3:0f:4b:d5:a9:96:b3:
81:54:bb:98:a0:98:a6:69:32:d3:7f:b1:a3:dc:46:e1:fb:5f:
c9:89:f9:2d:64:08:e2:f5:11:bd:89:ec:4a:cb:26:d1:7c:5f:
2e:9b:8e:cf:a0:be:38:b0:54:d4:a5:75:e6:94:1e:3a:17:8d:
fb:60:c0:f2:24:69:10:d1:78:4f:7e:4e:18:1e:4c:86:2e:5c:
a1:07:cb:54:27:7b:cf:62:ec:2d:d0:30:68:0c:0f:a7:dc:3d:
73:65:49:41:5c:fa:12:35:4a:20:ce:b2:26:b9:fa:06:3b:8e:
bd:d0:18:ba:2b:36:90:ab:f5:53:49:e6:e8:84:09:87:39:4a:
28:20:49:93:ff:62:b1:89:a7:d6:10:15:10:38:6c:b7:95:f6:
2e:92:4f:1f:49:22:a6:41:dd:ce:86:2c:a9:4a:14:da:d8:79:
d4:f2:96:05:14:e0:b4:62:0c:9f:bf:02:13:82:4a:18:db:8a:
90:82:11:bb:38:de:b9:96:19:48:a6:41:f1:ff:a0:bc:34:4c:
d2:fc:9e:e3:b6:6b:29:d0:76:2f:64:b2:8f:b9:06:fd:4a:ff:
d5:38:45:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:16 2026 by rpki-client