Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: ltvkG9fW6mSzgxMstt4/dMlW1bwvgP+Dpslh/rMF7jE=
Subject key identifier: CA:D7:75:83:A6:FB:38:DA:39:5A:DE:52:7D:55:A4:74:A4:9A:75:60
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 019E1C0FD1BDC4F9230C9D16159ACC6D3443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 0543
Signing time: Tue 12 May 2026 12:00:59 +0000
Manifest this update: Tue 12 May 2026 12:00:59 +0000
Manifest next update: Wed 13 May 2026 12:00:59 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: a52TFlym/UaSUfCtM/5wlae11FJim9i3He6aP8tfKn4=)
2: nm8pFEpWXGPLmBGfEmff0mnlzsw.roa (hash: +n+qMQpld1QaCfNSSKf78RqXBTGK3eec/GzY9ilFD5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:d1:bd:c4:f9:23:0c:9d:16:15:9a:cc:6d:34:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: May 12 12:00:59 2026 GMT
Not After : May 13 12:00:59 2026 GMT
Subject: CN=cad77583a6fb38da395ade527d55a474a49a7560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d6:1f:ba:35:a5:93:a8:e1:61:1f:f7:e9:36:
8c:94:07:b3:b4:a0:3d:3e:c0:5b:76:68:da:3e:1d:
16:8a:39:cd:2d:e4:db:27:53:ef:94:f1:26:94:bc:
da:ca:ca:fe:6a:4d:18:e0:43:ab:7c:fd:c3:bb:26:
90:74:bb:b9:d2:b7:78:b7:34:f8:52:17:d8:35:c8:
f8:b1:55:1d:49:f1:d3:1b:05:33:7d:c0:cb:a7:d2:
44:91:d9:0e:05:5f:03:4a:51:64:db:53:88:8a:be:
59:c1:cc:b1:db:82:ef:a5:6e:48:1b:2b:63:b8:ee:
84:a5:1d:2a:1f:ff:5f:9b:b5:81:d7:96:f3:2f:22:
73:65:5f:89:74:33:55:a8:29:8a:b7:48:0c:6e:2d:
d5:9b:22:8c:4e:7b:70:be:f0:ae:a0:e8:2c:71:37:
82:58:83:d0:4d:92:32:f8:b3:46:bf:6e:e0:17:b7:
48:f8:9b:57:74:c2:47:81:25:11:e2:ad:68:aa:16:
ec:28:d4:a4:fa:34:9b:03:3d:76:9f:87:d3:85:c4:
0c:54:70:66:3e:ea:98:7a:df:bf:34:f3:46:f5:5a:
bf:4c:34:42:ef:df:38:65:cc:eb:b3:21:a6:44:f2:
32:a3:86:57:8f:6b:f9:14:80:cd:d5:e1:d6:e6:e1:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D7:75:83:A6:FB:38:DA:39:5A:DE:52:7D:55:A4:74:A4:9A:75:60
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a5:8d:60:4f:a0:14:62:01:4e:ab:0a:7c:47:e6:5b:2e:d4:
fb:f3:1e:5e:8a:1c:70:b6:3b:10:be:4a:f5:ea:0d:bc:9a:6c:
a7:59:5c:26:11:9c:cb:74:14:c2:47:57:6b:42:ed:53:b4:8e:
04:c6:cf:59:77:5c:1e:55:85:e0:21:9d:15:47:8e:39:02:1f:
13:bd:eb:c6:c9:33:ac:75:e9:cf:cb:d0:ad:6c:ef:25:69:a2:
54:83:db:4c:97:36:fa:d8:06:55:3e:1b:21:45:47:3d:18:aa:
e9:53:c7:e0:a0:45:3c:45:42:b4:f5:64:17:05:98:5a:20:be:
9f:bf:f6:6e:ac:9b:9c:34:b4:46:17:bd:4d:fa:14:6c:dd:68:
54:7f:57:b5:02:5b:66:62:43:ce:2b:36:52:ea:eb:2c:b4:94:
c1:30:f0:08:b8:79:39:37:c4:f6:b0:2d:74:40:5b:93:00:82:
15:38:da:5d:6e:4d:43:3c:1a:05:1f:ab:59:2d:d9:82:68:89:
4b:65:fd:ed:1b:7e:46:87:70:8d:18:d0:e7:a6:35:84:8d:64:
8e:8d:85:f1:53:7b:2e:a6:f8:cd:63:0e:6a:73:cc:60:50:df:
c6:d7:b5:97:c9:64:f2:db:b3:fa:48:6f:c2:b7:c9:68:64:61:
b6:2f:0e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:55 2026 by rpki-client