Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: N/8U0RIOJzaX9VyWKNHaRoSuPu3ZmyXsjk6THD7xL5s=
Subject key identifier: 25:5E:D6:AE:F8:EB:66:82:34:04:34:31:0B:84:38:AE:84:9F:97:10
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 019E1DFDDD651EBF75177822F1184C90222C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 21:00:37 +0000
Manifest this update: Tue 12 May 2026 21:00:37 +0000
Manifest next update: Wed 13 May 2026 21:00:37 +0000
Files and hashes: 1: E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa (hash: iGIvi874jRBhxZZbEUcwG0C99qEqnZSND8WgM3AT+F4=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: 3zQN0Cn9oFe4uoBjl5z+AuXKGyzlU2WZubYJpvlVVnw=)
3: yUKdjmZYtQWjFFXFgM-27cUdhs0.roa (hash: ob1AlTKcmBmfwJd93MbWCK4KiRPHg8c27xb+FIsvFL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:dd:65:1e:bf:75:17:78:22:f1:18:4c:90:22:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: May 12 21:00:37 2026 GMT
Not After : May 13 21:00:37 2026 GMT
Subject: CN=255ed6aef8eb6682340434310b8438ae849f9710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:62:40:f8:55:f8:ce:dc:e9:e8:a8:2f:46:
0f:fa:eb:d3:76:a3:42:46:5f:86:d3:99:1e:20:36:
cb:eb:e8:ff:3c:b2:d1:cd:eb:08:f4:3d:7b:6b:2b:
93:9a:76:a7:ee:5e:02:a6:d1:f1:26:66:a2:ff:64:
3a:5a:1f:78:2c:3c:d1:0b:41:f0:d3:8f:df:5c:cb:
ab:e3:c8:60:0f:04:cf:27:4f:43:23:58:b4:d4:9a:
34:74:0d:ac:ab:33:65:86:84:10:28:b7:d9:8c:e0:
e5:d5:38:40:7e:b8:8f:d0:e2:81:52:2c:e0:7e:c1:
44:aa:35:b1:29:9f:99:e3:3c:e6:8a:fb:72:e4:3c:
bc:20:4d:3c:cb:ab:45:d1:37:2b:1a:da:3a:36:6c:
d8:e7:73:bd:53:f7:69:c9:d7:7c:c5:4d:35:75:80:
e8:d0:8d:fe:45:8e:de:be:22:8a:08:45:89:4a:6d:
ca:4d:c2:93:55:b2:58:69:c3:e1:3d:04:85:2a:69:
d4:2c:53:6b:19:cf:66:f1:99:a9:ac:0b:78:65:1a:
d9:0b:f1:f6:5c:c7:94:37:c3:f1:6d:f7:93:ac:a6:
48:33:85:3b:8e:6b:f0:c7:46:33:14:f6:15:37:71:
60:e4:c1:36:ab:84:69:88:db:01:4e:7a:66:87:13:
3b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5E:D6:AE:F8:EB:66:82:34:04:34:31:0B:84:38:AE:84:9F:97:10
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:03:42:94:41:1d:4c:e9:cf:50:13:14:1a:78:d6:ac:90:4b:
22:6c:91:d0:10:76:9c:c8:b7:7f:5e:9e:93:15:b9:df:cf:33:
a6:0a:35:08:eb:0b:8f:57:58:8c:9c:b4:99:c4:60:c9:6e:44:
99:fc:f8:84:1a:b5:6f:d3:9d:9d:2f:49:ca:d4:04:80:51:e5:
a7:76:9b:00:4f:6f:14:b2:39:80:14:d6:4a:80:6a:69:ef:11:
e4:9d:a2:c8:f2:ff:56:e0:e0:80:4c:42:13:d0:97:4a:41:17:
88:fa:bd:fd:10:09:36:dd:7c:b8:48:c7:96:13:36:38:07:dc:
ba:27:18:8f:36:53:a4:1c:c1:85:d1:2a:3f:a7:22:97:c9:2b:
25:ec:fa:15:2d:f0:df:fb:7b:97:00:80:c2:2e:44:68:92:ad:
2f:4a:cb:c3:f4:2c:5d:13:70:3a:1b:b5:fa:b0:5d:50:f5:35:
ba:32:bc:b6:a2:92:30:c8:46:60:49:aa:92:a4:76:0c:66:8f:
24:a1:c0:ec:e5:a9:16:c1:9d:f3:c4:0a:6d:96:d1:88:e9:64:
5e:81:a7:1d:f2:2e:75:71:a8:16:10:62:9a:09:69:dd:13:70:
27:8a:af:16:71:c2:b0:07:67:a4:7a:fa:77:64:fc:f0:e7:a3:
53:3b:25:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:39 2026 by rpki-client