Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: SgEYDh4pdYKPKmuphX+goeFlBnbaRrfZ4S+BYrwPUP0=
Subject key identifier: 55:1A:6B:DC:4B:54:57:34:70:F5:0B:F1:83:B6:CF:D5:FF:9A:C2:71
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 019E1D9052D1FB25311F06472CF41E3552DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 0C3E
Signing time: Tue 12 May 2026 19:00:57 +0000
Manifest this update: Tue 12 May 2026 19:00:57 +0000
Manifest next update: Wed 13 May 2026 19:00:57 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: n5bzN/nIXUP1GV5DzZ2PPN0dhhM6ZWJLYT6rtIj6OUk=)
2: ErpeCUDkmubemk25x6bhiE8fSGc.roa (hash: TTJUK42mws9XlE8j1BxdD7GShsktqMxOOwmtU5mBiJY=)
3: T0pinHQE9eLRbdmXpvSn-pLDjUA.roa (hash: fpKBkag1Eq814ryw6TGAsVdMfo9isfHsmaeJ5gB+g6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:52:d1:fb:25:31:1f:06:47:2c:f4:1e:35:52:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: May 12 19:00:57 2026 GMT
Not After : May 13 19:00:57 2026 GMT
Subject: CN=551a6bdc4b54573470f50bf183b6cfd5ff9ac271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:01:c8:83:c7:da:d5:4f:ce:d8:93:62:c9:
63:88:f0:c5:d2:ab:a7:87:29:88:da:ad:e2:64:9b:
d2:79:c1:a1:2e:b5:58:3b:64:4f:1d:e3:86:37:99:
f2:e3:47:ec:e7:81:2e:01:53:bb:81:28:5e:6a:63:
06:0e:87:5f:67:80:0e:2e:19:2a:90:41:92:58:3f:
75:ab:0e:d6:31:d9:6c:32:52:44:b7:d0:42:5c:ff:
34:d4:41:e8:ee:9c:5d:66:50:9b:3e:8a:f3:54:61:
4e:3c:c1:d3:67:bb:13:47:e9:da:62:7f:57:06:85:
9e:77:61:ab:b4:f5:63:4c:2b:a7:14:b0:8f:07:3f:
9d:c1:f1:12:ff:70:27:c0:bf:db:22:4b:03:45:e6:
df:b7:40:bc:75:d4:9d:57:30:84:88:db:6f:32:5c:
01:d5:af:ff:b9:09:27:a5:47:c5:57:86:b5:5b:00:
70:d9:ac:40:3c:5a:de:1c:6c:e3:eb:10:63:ad:d0:
6f:8a:7b:62:ac:80:14:ac:1f:3b:5f:2c:b9:c8:bd:
09:6a:b1:4e:c7:df:2e:93:4d:f2:e0:20:d7:42:d2:
0a:73:73:1b:d9:10:02:e0:f9:bb:dc:bb:4b:a9:da:
1a:15:8f:90:12:e0:5b:25:79:d9:1c:3b:5f:fc:e6:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1A:6B:DC:4B:54:57:34:70:F5:0B:F1:83:B6:CF:D5:FF:9A:C2:71
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6d:b9:bc:b0:5b:fe:5d:c2:0b:bf:44:16:b5:f8:e2:e5:b3:
a1:06:5d:8b:a2:9e:b6:4a:80:0b:ff:a8:75:82:eb:91:f6:df:
b4:df:2c:5d:f8:e0:81:be:b1:c8:bf:92:13:0c:75:54:ae:75:
fc:b8:45:9f:b5:94:e5:fc:fc:1a:e6:79:19:73:f9:d6:04:45:
1e:18:ee:7e:1f:09:d2:60:58:b6:5c:f1:61:f2:4a:b8:b7:bd:
a5:c4:be:3b:9f:c0:06:e9:de:b5:02:ca:a2:cb:a2:50:8e:fc:
b8:93:9b:0a:89:5f:48:35:32:09:ce:4f:03:2c:ec:47:a3:74:
ac:e3:42:45:c2:19:eb:8e:a3:61:c8:fe:00:b3:0e:24:65:1a:
bb:29:ec:cb:fc:88:21:cc:2e:5c:ec:c8:ac:7e:6f:09:91:19:
90:51:6a:60:ba:89:dc:28:97:3a:1b:ca:fe:e0:8c:0f:53:cb:
bc:40:d7:af:cd:3f:7b:ef:eb:b5:7c:12:25:32:b1:81:93:5d:
8c:96:1f:4b:e0:55:4e:4b:df:f5:29:06:57:48:2b:1d:5d:b4:
4e:d9:4f:2e:ed:fb:94:d7:4a:56:f2:8c:30:7b:8a:da:0d:a0:
dd:33:b0:9f:75:5b:0d:f8:ff:ac:a3:7a:b7:ac:c4:9f:c4:dd:
7b:7d:53:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:28:46 2026 by rpki-client