Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: hIuxMA11TvTYHQTfyItX4gl85ItExODTWLcICBt3+Ao=
Subject key identifier: B0:75:89:A8:F3:B1:BD:07:70:E4:D3:A1:BA:B4:B4:E3:32:78:A6:C3
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 019E1DFE97E496343A5656823A3B90344B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 21:01:24 +0000
Manifest this update: Tue 12 May 2026 21:01:24 +0000
Manifest next update: Wed 13 May 2026 21:01:24 +0000
Files and hashes: 1: 33GSrldWWk3Y0zJgykFgXMqOFKQ.roa (hash: Vx7Lsmyrdo4DClh/Ecx+QsM7m1e5mNGcZKBAQoQZRYU=)
2: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: lIF9BQXyS03qQBVfDP3SBzIotpEzXobd9jhoW9jhScY=)
3: drikzNt5D9jwedYli_IhOY-bx94.roa (hash: yqU3IH8u+p0CuFDMh436wHQcQ7bwqSkz3SbUHUvU7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:97:e4:96:34:3a:56:56:82:3a:3b:90:34:4b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: May 12 21:01:24 2026 GMT
Not After : May 13 21:01:24 2026 GMT
Subject: CN=b07589a8f3b1bd0770e4d3a1bab4b4e33278a6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:7f:86:a3:92:fc:20:b8:95:22:f5:50:0f:
56:12:83:03:86:2b:42:56:a2:dc:5c:cd:21:e8:16:
72:ec:f6:e1:48:73:a5:8d:b3:f8:67:75:11:4b:46:
04:bd:76:d0:10:7f:58:4c:a1:4b:89:b1:0e:9b:82:
0b:e1:5d:ac:ac:e6:92:4a:08:c6:54:02:bf:f6:10:
71:01:75:4f:2a:7b:d7:7a:14:78:68:e0:cd:7d:21:
e7:fa:48:b4:8c:1b:c3:06:ca:e5:8a:8b:3b:97:c1:
1f:83:e9:75:f2:f9:e4:d8:f7:77:59:a7:b2:fc:17:
b4:f3:23:c1:62:33:7b:69:94:e7:2c:ff:6c:41:f8:
99:3a:5d:e0:fa:c4:35:27:7c:c0:c8:ab:b1:18:33:
80:9a:f0:2a:69:43:e6:c1:1f:97:01:30:4f:71:2d:
d3:30:7d:a3:6f:2e:34:41:10:50:51:da:64:ea:f0:
6f:49:d9:b0:f3:26:43:b1:96:d7:40:c5:a3:32:2a:
80:91:29:54:55:59:bc:b3:50:15:c6:48:eb:e4:c5:
ae:f7:da:0d:71:f3:02:f9:ec:84:69:7f:14:0b:79:
96:ed:a4:2c:34:a0:e4:8d:89:5f:59:60:50:c3:41:
bd:7b:80:a9:25:41:78:f8:9b:29:9d:f7:6a:3b:b0:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:75:89:A8:F3:B1:BD:07:70:E4:D3:A1:BA:B4:B4:E3:32:78:A6:C3
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:f3:9e:ff:42:d1:33:24:70:34:4e:cc:38:09:6e:2e:78:51:
74:98:08:ad:a7:8c:31:ef:d5:4d:57:ec:c1:78:38:15:f4:b3:
f6:2f:21:ca:c5:8a:64:ca:44:25:e0:ec:2e:c9:6f:59:f5:c5:
5c:5b:de:36:5e:0b:39:2b:0d:f8:40:7e:f3:3e:c9:7d:22:77:
87:6b:79:bf:94:2c:1a:23:1a:a1:8d:e7:1b:30:51:31:f5:f8:
91:48:54:20:e0:14:da:bb:55:55:93:a3:e2:1b:67:5a:2b:e3:
a9:9f:b7:4a:92:ce:b8:33:13:44:e9:07:13:f9:0c:81:7d:90:
57:f5:b9:52:c3:98:cc:ff:3c:52:0e:03:f4:8f:79:db:cb:c8:
24:fb:91:84:57:57:d3:f2:f2:e3:0d:c9:49:da:cc:c4:64:00:
e2:40:36:5a:79:a2:9b:c1:a8:a7:d7:dc:dc:8c:bb:5d:8d:46:
20:f9:a4:8d:d9:fd:5d:a4:56:fa:c6:f5:b1:78:c0:2f:34:06:
1b:f6:1f:a5:44:57:36:c7:71:7c:4c:38:2d:e5:84:44:5e:c0:
2b:29:ef:9c:91:f9:74:3d:41:df:13:94:04:0d:28:70:3a:22:
cd:8c:9e:95:7d:80:0a:c3:2a:10:25:cb:8f:d3:6f:d7:17:56:
31:c5:bf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:01:01 2026 by rpki-client