Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: YKvhWfyb1puelC0kcmlpJthkZzaCv3OllJZe535GpMo=
Subject key identifier: 50:1E:BF:32:A2:5C:03:9B:2F:26:80:F6:55:E8:D6:C2:F3:CA:72:8F
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 019E1D2310B8AC58E8E7107C14B8FA692CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 1014
Signing time: Tue 12 May 2026 17:01:37 +0000
Manifest this update: Tue 12 May 2026 17:01:37 +0000
Manifest next update: Wed 13 May 2026 17:01:37 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: HWJvyMvxeVEL8oSAcL+8+Hkh7mJlxSjPH0IqetDZjbQ=)
2: C2p4m5oAHBR4b9U98n94_vKEpDw.roa (hash: k7x5kSsiwndiFj3n5RLjj9QM21o5JvrjtmVJtRBC0sk=)
3: Rxb43DOTKVOmi4goggBKGgm61i4.asa (hash: //HomCPkgLqtqfTXCv3j8181AokJrm6q+KQdYo1h/Z8=)
4: _Swl5gHDR66TZCO_pkS1vQ9SqpA.roa (hash: 3hG7Kqg7tej55cxB4vcGvkTLY6M+LbT5b2wG9YFhS4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:10:b8:ac:58:e8:e7:10:7c:14:b8:fa:69:2c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: May 12 17:01:37 2026 GMT
Not After : May 13 17:01:37 2026 GMT
Subject: CN=501ebf32a25c039b2f2680f655e8d6c2f3ca728f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:79:dd:af:5e:61:c3:ba:64:7f:0f:78:a6:
2a:32:ca:13:52:5a:b0:47:3d:be:54:aa:42:92:08:
c2:51:4d:4e:fe:85:8a:32:5b:1e:7a:46:9f:d7:5a:
2d:df:e4:2f:31:ca:97:0a:a1:34:b2:68:01:fa:6e:
49:a7:e8:70:5c:b3:5c:df:df:c2:eb:bd:a5:11:bc:
4a:ff:d2:37:6b:ce:e6:f2:a9:f3:7d:78:15:47:50:
1c:a9:04:35:0b:0c:13:eb:6e:06:1a:7b:dc:90:de:
c2:69:22:27:9d:62:c9:c8:15:47:95:0e:10:a5:7a:
64:12:46:22:11:1e:a4:f9:ca:54:1a:87:84:38:7e:
0a:b3:29:d8:0f:a9:b5:71:08:74:36:13:bb:13:ad:
c9:7d:a4:b5:43:a2:bd:e5:fa:14:fc:ba:8e:74:87:
f3:f5:86:df:e3:17:5c:82:54:e8:2d:ae:69:0c:d8:
1a:16:2d:cd:b0:c9:10:ec:fb:3e:2c:5f:08:ba:d9:
03:82:5a:84:c5:37:cb:02:27:8e:23:7b:9c:b5:1d:
54:0e:4b:c3:39:9c:b2:4a:08:ca:13:73:22:ef:30:
47:11:b3:ef:2e:42:17:fd:62:0a:80:84:c3:35:6e:
ef:d3:c9:24:56:61:9e:46:39:37:ec:0b:1d:c1:c9:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1E:BF:32:A2:5C:03:9B:2F:26:80:F6:55:E8:D6:C2:F3:CA:72:8F
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d7:68:cf:ce:87:58:14:dc:b4:e3:2e:28:40:dc:5a:e3:53:
86:c7:2c:97:6d:ef:1e:7a:0c:d2:a6:e1:a3:9d:67:5c:92:ec:
21:22:77:9a:35:05:cd:41:e5:fc:a6:3e:8b:c6:7a:aa:79:d2:
31:53:bb:24:d6:a4:b6:03:8a:44:93:4a:81:f6:26:e9:cf:ac:
28:87:fb:03:1c:35:c6:1c:34:3e:75:63:93:14:ce:48:bb:bf:
d8:c3:77:e0:29:80:30:97:36:3a:1a:35:55:44:12:85:33:c6:
4f:c7:87:8a:f2:b1:c6:5e:8a:5f:b7:58:2b:b9:72:76:22:07:
09:58:13:26:43:36:fb:a5:fa:da:0c:67:35:7a:d1:94:5b:25:
83:8d:5a:d3:4b:90:f1:e0:18:87:bf:e3:72:ba:1e:ae:bd:ca:
1c:07:7b:01:42:29:73:8a:9d:54:80:8d:29:01:97:20:6b:7d:
e4:b8:f0:66:ce:d8:65:41:c4:84:4d:ce:2a:6b:be:f8:5b:ed:
19:7f:22:56:94:fb:74:6e:7c:e6:12:2a:17:a2:ed:36:49:ad:
b7:19:e0:d4:2c:97:35:e7:d7:61:ee:e0:cc:a4:b0:65:12:64:
2e:da:2f:c0:0f:05:ed:ec:7f:82:be:0d:2f:e3:a7:e4:bb:42:
ef:f1:e2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:24 2026 by rpki-client