Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
File: 4ygMY1Kgv7t50knIh17RhuzOioY.mft (raw, json)
Hash identifier: nwG27nIr22U6sd50Gkk0NcFhxTLEEJXah4FhHW2/HCg=
Subject key identifier: 8B:F9:DD:D2:F5:4D:30:13:2C:75:51:93:F3:41:16:D3:6D:78:70:51
Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
Certificate issuer: /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Certificate serial: 019E1CEB6A9C13A00BC783510005F92CB941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
Manifest number: 190C
Signing time: Tue 12 May 2026 16:00:50 +0000
Manifest this update: Tue 12 May 2026 16:00:50 +0000
Manifest next update: Wed 13 May 2026 16:00:50 +0000
Files and hashes: 1: 4ygMY1Kgv7t50knIh17RhuzOioY.crl (hash: zctfFggVB7jKkcL78nLTdK4BP1ynihG+tFjQgCfR5Tg=)
2: D3RzDDZgPLG3UCsxVx6Q8ZzLm1I.roa (hash: kVx9KqwTwAznM+coaQfniQbA9ErAhmA+cdao1OKFFKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:6a:9c:13:a0:0b:c7:83:51:00:05:f9:2c:b9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Validity
Not Before: May 12 16:00:50 2026 GMT
Not After : May 13 16:00:50 2026 GMT
Subject: CN=8bf9ddd2f54d30132c755193f34116d36d787051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:57:8a:93:9c:3b:e1:b0:f0:46:9a:50:e4:
e1:ca:56:4f:5b:17:0c:1f:b8:a6:68:4a:7f:bc:a0:
16:7f:61:7b:af:b0:fb:73:ea:43:87:14:43:48:45:
76:e0:c4:bc:16:27:24:d7:26:ed:46:14:37:99:53:
85:ab:65:11:09:93:d7:a8:a3:83:72:51:2b:85:58:
d8:cf:03:45:45:9c:a7:f5:28:41:ad:4d:9d:d1:43:
72:fc:8b:5b:94:71:a6:b5:f5:bf:0e:28:c2:5f:63:
8a:b9:eb:6a:a7:8c:15:a0:cb:33:ee:21:71:69:6c:
09:04:e8:43:14:92:c7:be:76:73:84:d1:67:b4:55:
b9:ae:c9:5a:49:b1:a8:92:0f:bc:d7:88:33:2d:d7:
86:31:23:10:03:aa:a3:c9:9e:ea:a8:fe:35:fe:98:
fd:14:cd:82:c5:e4:5d:ec:b6:67:05:23:76:6b:64:
e2:1e:ab:4b:18:46:60:6c:b4:73:e3:d9:d5:66:50:
c2:77:6f:71:2c:0a:b3:7e:ac:da:24:ac:af:a7:13:
b8:1b:05:d3:da:4a:e4:c5:cc:98:b8:15:ae:a3:53:
1c:b6:46:94:20:d1:76:b6:db:f0:a5:b4:81:fb:e9:
0c:77:46:cf:5f:ec:6d:d7:8f:1e:7c:1e:d7:e3:48:
44:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F9:DD:D2:F5:4D:30:13:2C:75:51:93:F3:41:16:D3:6D:78:70:51
X509v3 Authority Key Identifier:
keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d6:15:86:4e:95:5b:38:da:42:94:a0:24:0e:a1:52:66:82:
1e:b6:a7:33:68:38:14:90:ad:98:1a:bf:e7:51:f3:2d:ab:47:
e2:92:91:c3:c1:25:74:c3:ed:e1:2a:4c:41:91:3d:4e:77:f4:
75:c0:20:67:b7:e6:47:6e:2c:57:a3:95:28:86:37:91:66:e7:
44:e5:e8:1b:d2:74:88:9f:ec:8d:ac:9e:ac:50:89:54:f4:f8:
64:cb:66:9a:3f:b8:56:1c:b9:a8:d6:70:c8:e9:d5:9f:a9:a8:
a4:6c:de:11:b5:db:85:1d:56:b7:79:30:fd:64:b9:2d:91:04:
8a:03:91:6b:12:33:99:85:50:64:82:5f:a7:40:61:11:ea:9a:
a1:72:ee:75:a8:ba:85:90:da:6c:83:fe:ee:01:8e:64:cf:4d:
a7:1f:0d:4a:c1:c4:27:68:af:15:a8:4e:b1:1a:cb:c7:8c:3b:
46:b9:02:75:07:bb:4f:b6:1e:28:19:3a:46:41:b0:fe:d9:bc:
a1:2d:80:e5:1e:3f:30:ab:2c:56:f5:ad:54:4f:77:bd:f9:7f:
e5:bd:6c:07:e8:fb:21:ac:35:84:68:d5:63:e3:ab:7b:ca:34:
01:d1:b1:57:f3:22:1a:76:5d:c4:dc:77:43:da:0d:6b:10:dd:
8c:8d:cc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:53 2026 by rpki-client