Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
File: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft (raw, json)
Hash identifier: K7EAf4tbWs+VhVwV1JDwfF3ZatyFwT8meIpUxF0dC5g=
Subject key identifier: EA:7C:8F:24:2F:4A:B2:56:81:D1:81:FC:98:6C:69:13:AB:2C:E5:AC
Authority key identifier: E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
Certificate issuer: /CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Certificate serial: 019E1C7DA4CB9381C123B9ACAEBFCBAFF34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
Manifest number: AA
Signing time: Tue 12 May 2026 14:00:56 +0000
Manifest this update: Tue 12 May 2026 14:00:56 +0000
Manifest next update: Wed 13 May 2026 14:00:56 +0000
Files and hashes: 1: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl (hash: YyxRUut5aWgl04H7p7RMOyUmbEKbsxIBpMUlYPCDuqQ=)
2: x9acHITrBbqOx2e9ypYS952QsxQ.roa (hash: b6zhtsIkjF/mT1JMxCSolgKQVZ0ngXMbV1MvghbUubE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:a4:cb:93:81:c1:23:b9:ac:ae:bf:cb:af:f3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Validity
Not Before: May 12 14:00:56 2026 GMT
Not After : May 13 14:00:56 2026 GMT
Subject: CN=ea7c8f242f4ab25681d181fc986c6913ab2ce5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:ab:ee:57:d0:14:d2:5d:1b:14:cf:f0:19:
d7:fd:4c:ae:e1:cb:e8:c1:80:18:6e:ba:43:97:ab:
38:d9:cb:2f:27:26:c2:30:e8:be:bf:97:38:80:70:
13:46:94:ba:bb:4c:e9:ae:d4:9b:7c:d8:a5:bf:a9:
09:16:5e:ba:c1:9f:76:ed:1d:a4:25:f2:2b:ed:75:
9b:1d:60:da:19:2a:ec:9f:3b:14:38:f5:b1:5f:d0:
4d:81:0a:7f:de:5d:2a:4f:e6:d2:39:8e:ba:b6:02:
18:29:94:77:1c:e7:5d:bf:b3:f0:e5:3a:a4:aa:2a:
10:2b:ac:1c:9e:16:92:92:71:4d:3c:39:11:fa:b3:
34:c8:98:55:7a:62:cf:12:95:42:60:dd:8c:63:40:
93:d5:ff:3d:78:68:12:2b:79:de:a3:ad:f9:c2:f4:
45:6c:d8:ad:89:24:a5:24:72:ff:04:09:e7:23:df:
24:2d:a9:fc:92:d0:da:11:89:42:ce:8e:2b:62:01:
ae:46:15:38:92:76:52:ed:a5:94:00:6e:f2:88:15:
33:e8:55:df:25:de:8d:8d:ba:e1:76:fd:51:98:77:
52:8f:0a:a1:d8:80:5c:a3:22:10:5c:55:2a:78:09:
9d:7f:5c:95:55:46:a8:34:58:64:80:09:14:f6:3a:
0e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7C:8F:24:2F:4A:B2:56:81:D1:81:FC:98:6C:69:13:AB:2C:E5:AC
X509v3 Authority Key Identifier:
keyid:E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:47:43:16:1b:58:51:96:8e:c7:ae:fa:ca:58:74:57:06:b2:
70:0b:cf:0b:46:9d:4c:0f:44:9c:7b:1a:79:aa:e2:e1:c5:86:
2b:43:17:1b:b1:f7:d1:81:09:2a:99:00:6f:7f:13:46:70:6d:
c6:96:08:5b:13:38:8c:4c:0b:e1:d9:f0:8c:44:9e:cf:a4:7f:
2e:a1:53:d0:bc:91:19:d3:06:70:9d:d0:18:28:43:7c:f3:66:
88:83:f5:96:de:fa:fe:ac:36:0e:28:93:79:06:74:01:03:36:
b7:97:66:8a:d3:91:69:d3:e0:f1:1a:7c:18:10:9a:99:dc:6f:
43:51:34:cb:62:1c:25:51:18:5c:16:78:f9:c7:ea:87:12:17:
02:65:2c:2f:75:1d:57:a4:30:30:f2:d6:75:2b:06:6d:8a:db:
3c:4c:f5:08:9d:33:3c:30:40:89:fd:3e:73:a8:fa:87:e7:2f:
ed:60:0c:c4:91:78:38:2a:1d:69:9c:46:f7:11:63:b9:16:98:
f9:90:ed:bb:99:7d:93:73:61:5b:05:7f:83:45:c3:70:0d:20:
79:61:00:25:35:8a:d2:d3:b8:de:59:6a:ec:2c:d8:3f:5c:9e:
87:00:95:fe:de:c7:f7:04:8f:33:82:2c:0b:34:3b:a4:7e:ee:
e2:ab:37:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:00 2026 by rpki-client