Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json)
Hash identifier: OP9H9n3lQ0FTf4JJySjjzynt21ab6cjehHwqkVPX3PA=
Subject key identifier: 82:24:BA:A0:4A:8C:70:BF:3D:4E:11:F7:28:71:0E:3E:20:68:00:97
Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Certificate serial: 019E1CB4C0B8E69C85FAE6FFDE6E6F8A1ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
Manifest number: 0451
Signing time: Tue 12 May 2026 15:01:08 +0000
Manifest this update: Tue 12 May 2026 15:01:08 +0000
Manifest next update: Wed 13 May 2026 15:01:08 +0000
Files and hashes: 1: 69-gm5sAHUb2zlkusSsJwnhPOtw.asa (hash: w8dP42z3PzlgsL7213s07oZP842qzAir4wVoWzTTHUs=)
2: 9CS7xyErSCJY_wQFDW0wV1rIDq0.roa (hash: e2yWbh2yduLvhGO9ZZhdKHXEB8OOHqP7OQbj14TpHIU=)
3: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: PoAdfmyUhCKw1poIQutL1igKp7tatr073p7IYb+KzpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:c0:b8:e6:9c:85:fa:e6:ff:de:6e:6f:8a:1a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Validity
Not Before: May 12 15:01:08 2026 GMT
Not After : May 13 15:01:08 2026 GMT
Subject: CN=8224baa04a8c70bf3d4e11f728710e3e20680097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:90:54:f9:b0:8b:a9:c2:57:7f:89:83:8c:
d0:0d:9c:8a:ec:a5:07:36:87:d6:80:7b:c3:0d:e1:
a0:12:3a:56:c2:6f:b8:4e:b3:bd:86:c5:4f:e3:8a:
5c:e3:b2:cd:52:d7:5a:64:38:b8:58:dd:28:58:49:
cc:d2:ed:2a:58:1b:68:ae:49:dd:3e:48:3e:ae:71:
ac:ab:95:d6:fc:95:28:ae:64:5c:ac:23:6d:75:25:
5a:8a:c3:71:42:2d:8f:da:e5:f8:5b:8a:8e:0c:3c:
9b:d6:f6:54:d7:17:d5:c7:6f:65:59:d1:67:b4:d9:
0c:69:ef:68:e1:03:56:5e:f1:38:40:88:6d:bf:04:
c7:2b:76:24:bb:32:d7:0b:90:7c:fd:37:20:09:de:
d4:3d:d4:16:fd:dd:be:c1:77:92:e0:52:b7:da:01:
a2:37:4a:d0:56:0d:18:cf:74:1d:83:47:fb:09:38:
34:1b:6b:59:f8:b6:b5:33:90:4c:6a:74:c2:6b:8a:
e4:fe:56:50:53:ea:71:50:56:06:bd:db:47:61:a5:
0c:ed:d8:6e:46:ee:97:0c:3d:74:f5:46:5a:88:f6:
45:f4:ae:b9:96:d1:5b:13:bd:bd:6e:6c:aa:d1:4a:
fb:72:f2:f4:06:ce:88:3b:14:48:0b:46:fd:1d:57:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:24:BA:A0:4A:8C:70:BF:3D:4E:11:F7:28:71:0E:3E:20:68:00:97
X509v3 Authority Key Identifier:
keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b1:8b:9e:8d:92:fc:a9:45:5d:3d:24:e8:40:29:c2:17:83:
0e:26:91:45:49:41:d3:1f:f9:39:19:07:10:7c:e8:34:4b:17:
0d:74:7e:68:e6:1a:4c:b0:d4:e6:a6:8a:2e:0d:84:d7:53:7f:
cd:51:6e:e3:58:75:69:f8:2c:70:3f:cc:b0:bc:f5:eb:3d:68:
a7:dd:50:37:f0:f2:9d:2e:ec:5d:79:ee:78:94:c6:1c:22:f3:
f6:ab:3c:4f:c1:04:3c:67:5a:55:cc:7a:82:5e:2d:84:00:c5:
8f:2d:0a:56:f6:e3:cf:05:1d:86:91:b7:42:23:1e:cd:77:3e:
3e:3f:cd:3b:6d:71:6c:15:17:4c:dd:2a:2b:d7:2d:8d:37:7c:
b3:18:da:71:47:24:ce:b7:92:c5:ba:b6:34:ab:50:ec:71:fe:
7e:92:b1:4c:a9:11:9d:9a:cb:56:df:f6:af:8a:34:a1:1d:40:
0c:8a:9e:8c:57:27:71:6a:af:6c:92:4d:5e:2b:42:99:b7:76:
a7:1e:f3:5b:51:37:52:22:59:46:36:e2:1e:ee:6f:84:a5:cd:
01:d7:77:37:9d:83:94:a5:14:0f:2c:fc:e0:c0:47:68:17:49:
d8:30:1e:41:28:fb:e6:94:3f:35:28:fd:7e:51:da:0b:17:70:
77:f4:19:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:07 2026 by rpki-client