Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: EKoxTWQWvMNMQbTsahFdONm4uRV63PnsyWEoQOEOXxA=
Subject key identifier: 67:24:D5:C5:1E:88:C9:4C:0C:56:21:2F:E7:54:38:3D:06:7B:89:85
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 019E1DC7586D122CD85898F352FAF1613802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 20:01:03 +0000
Manifest this update: Tue 12 May 2026 20:01:03 +0000
Manifest next update: Wed 13 May 2026 20:01:03 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: Se+MNa3POFjQzcr2afhdSsexQhdZ/g2a1/DotxSM1Mk=)
2: ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa (hash: k43BMZFCEHCe5ac3+lgii08XLhekVbwoHtiG/FwXDec=)
3: cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa (hash: rYHJYIx7h+jpfMPSSONXY/ad+DKlzYjKVh77kFCnfVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:58:6d:12:2c:d8:58:98:f3:52:fa:f1:61:38:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: May 12 20:01:03 2026 GMT
Not After : May 13 20:01:03 2026 GMT
Subject: CN=6724d5c51e88c94c0c56212fe754383d067b8985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:15:cd:b5:60:1c:fc:bb:e9:1e:f9:54:8f:1f:
0c:44:5b:5d:59:62:60:c8:50:f9:0a:dc:65:82:31:
e2:73:c7:b3:59:19:96:c2:06:df:b5:de:07:7e:eb:
ba:2f:98:0e:e9:12:13:82:47:d7:8c:e4:62:d2:46:
fd:bb:4e:8a:c3:d5:44:3a:9b:0f:9c:c5:a4:e7:f3:
41:f6:87:55:fd:c2:de:e0:c0:41:9f:94:c9:41:72:
6a:c5:fc:30:c1:9a:6a:96:b8:67:cd:66:b6:4e:52:
c6:5a:b9:c2:a4:fd:dc:96:ac:25:27:f8:40:89:97:
a4:ff:7c:32:0f:84:f6:6a:3d:de:87:45:39:f6:e6:
35:2b:e1:6c:de:37:96:a1:fc:61:75:42:73:0d:f1:
05:65:ad:d1:96:4b:2a:33:90:8a:90:1e:9a:ea:57:
6b:3c:f8:e4:fb:71:8f:b2:66:60:be:c8:51:a6:b8:
87:f5:55:7c:a4:6b:db:cf:69:73:13:21:d8:e3:6f:
0c:26:85:43:25:dc:a4:25:96:d1:07:e0:7b:cb:19:
99:13:f6:73:cb:2e:0d:16:d9:37:24:6d:ba:ad:43:
cf:cc:4a:17:6d:9e:00:bb:a3:6a:25:22:2d:90:cd:
67:b1:cd:66:ab:f9:df:b8:9f:8a:d9:52:c9:b0:b4:
93:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:24:D5:C5:1E:88:C9:4C:0C:56:21:2F:E7:54:38:3D:06:7B:89:85
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cd:cb:f4:b3:63:2e:6b:f3:b5:e0:c4:17:b5:37:83:b6:61:
18:c7:97:38:ed:6d:fc:33:29:c5:e1:8e:f7:a4:2b:b7:b3:66:
89:9e:e2:07:fb:66:75:8e:d9:c7:91:c9:f4:57:93:82:95:01:
d1:31:19:76:df:9e:cc:68:16:06:50:5c:74:4f:83:64:ee:47:
0d:61:a0:47:75:2f:65:27:b1:d4:a7:29:f0:08:fe:ed:fe:d9:
3e:f1:b3:ec:c4:b4:7b:34:37:31:5f:8b:46:ac:90:5f:a0:e8:
0f:01:89:70:6c:b4:d6:ea:6e:00:be:af:f7:10:c6:b0:5b:73:
83:6b:a5:4c:fd:b5:9f:c3:d9:ab:25:c3:61:d1:54:2c:08:bd:
ca:0d:fe:5b:32:2e:16:c4:3a:f4:7e:0f:e6:c7:8f:5a:d9:64:
e2:ce:72:b7:67:eb:33:e0:09:56:cd:6e:07:94:80:a1:49:47:
39:d6:56:1f:38:46:06:21:ad:9b:9c:29:bc:0b:64:33:eb:93:
ba:7c:ed:51:7c:41:3b:37:ab:48:20:33:c4:4c:01:18:6e:a6:
13:4e:56:06:37:24:f6:a2:bb:d5:0d:e1:08:35:c2:40:4d:50:
e0:17:1c:e0:43:68:00:38:4e:5b:57:d6:43:af:af:0c:97:07:
27:b6:ce:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:38 2026 by rpki-client