Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json)
Hash identifier: DSk4l0f/I3N4zGO8GPCIQmEby7SBLir9CLpanR0EWaA=
Subject key identifier: D7:E2:8B:B1:69:30:CB:B0:09:F7:75:8E:AD:F4:08:69:DA:F2:01:B3
Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Certificate serial: 019E1F1183F17E2CB948D95F9DA916EC56BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
Manifest number: 1369
Signing time: Wed 13 May 2026 02:01:42 +0000
Manifest this update: Wed 13 May 2026 02:01:42 +0000
Manifest next update: Thu 14 May 2026 02:01:42 +0000
Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: k5jOoHcEdljScwXmKz1e8In2a+Km+ahOGZ5eVxOiCQQ=)
2: H8G6D-Wk6u8Ak866YQFvElddI-c.roa (hash: PEnd5yN8T5n1W+yxVyKPvkVNjUPkgKs3BkeHGhdDjdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:83:f1:7e:2c:b9:48:d9:5f:9d:a9:16:ec:56:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Validity
Not Before: May 13 02:01:42 2026 GMT
Not After : May 14 02:01:42 2026 GMT
Subject: CN=d7e28bb16930cbb009f7758eadf40869daf201b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:f3:68:e3:b4:28:48:b4:eb:91:f7:ce:39:
ef:bd:5d:8e:c4:0e:a0:e3:05:eb:54:82:bd:58:b3:
16:cb:5a:d8:d9:84:41:83:5a:d9:e5:72:73:03:26:
36:ec:3b:4a:fe:d1:b1:f2:77:bb:ee:94:92:28:53:
3e:de:dc:49:d4:16:98:f2:bf:1d:92:29:2e:06:44:
7b:9c:55:dc:2b:4b:8b:dd:9a:dc:eb:29:e1:ce:f5:
04:00:1d:a2:69:8d:f4:dd:af:66:3e:44:a4:13:40:
10:a6:eb:86:da:77:1d:88:2b:77:d2:3f:6d:66:3f:
32:46:11:07:ef:de:2b:55:0f:f5:92:a2:2e:fe:de:
20:40:9a:e4:77:d1:70:4d:bb:9d:31:75:9d:08:9c:
50:46:13:6f:68:da:5e:72:75:5c:95:98:9f:b1:4d:
be:54:27:bc:0e:0a:94:fe:23:2f:04:69:f2:bd:e0:
8a:bd:08:6f:94:4d:0d:4c:37:a3:90:f9:d1:b2:e1:
ee:e5:de:17:e3:7b:c2:a5:8b:88:28:03:f8:6e:10:
36:c6:e8:5a:b5:64:72:b5:87:7a:ef:db:35:99:b0:
31:3d:38:1d:e6:d0:6a:a3:e3:f1:7c:4c:7e:77:2f:
ca:d7:be:43:7e:9e:9f:b7:b7:21:ec:e0:4b:1c:96:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E2:8B:B1:69:30:CB:B0:09:F7:75:8E:AD:F4:08:69:DA:F2:01:B3
X509v3 Authority Key Identifier:
keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:33:ce:17:87:ad:64:bc:e8:89:32:bb:76:47:81:a3:e0:fd:
57:41:1a:a9:20:2c:23:15:a3:09:c1:74:86:09:50:d3:42:51:
2e:97:e6:10:47:61:c8:5c:09:e6:9f:56:69:dd:3e:04:4e:2b:
75:96:97:9f:ef:bd:6d:97:dd:d0:ab:02:3e:8a:ea:47:c0:b9:
40:7c:f5:35:61:ca:56:81:53:9a:16:96:bb:22:0a:64:c6:2b:
f0:da:ea:eb:97:b4:3a:c3:99:0a:52:81:bb:f0:68:d4:13:2b:
53:22:ce:75:b6:b5:9b:93:5f:45:61:c1:57:2a:eb:17:49:cb:
97:49:fd:15:dc:52:10:1b:6e:d6:93:a8:e2:73:44:12:e6:41:
c3:f1:8c:af:be:6f:b4:87:40:35:64:f8:1a:eb:dc:53:02:3c:
3c:e4:15:7a:f7:5e:d7:79:b6:e7:60:45:1d:7c:4e:0a:20:5d:
18:98:d5:89:7b:cb:df:bc:31:bb:be:c3:6a:d4:37:88:8f:d3:
df:59:22:84:dc:2f:0f:bf:49:f1:17:8d:66:69:86:50:12:97:
a4:2a:e0:ad:4d:b4:d9:5b:9b:e3:76:28:bb:4d:79:3e:3a:e7:
dd:be:c4:c6:00:0f:b5:bd:3b:56:cf:d5:e9:ee:cb:37:29:41:
83:20:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:52 2026 by rpki-client