Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json)
Hash identifier: 2I8/4SDQQqdsgxJY1RYJ4l3we1RL0cN6tRgrXUVi1JY=
Subject key identifier: 9A:D6:D4:8D:DA:2F:9B:D5:A1:63:86:FC:65:F7:C1:BB:CA:92:67:04
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial: 019E1DFE31BFB9D48680AA95948D51030BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 21:00:58 +0000
Manifest this update: Tue 12 May 2026 21:00:58 +0000
Manifest next update: Wed 13 May 2026 21:00:58 +0000
Files and hashes: 1: 3VLJL7-f2gIaDHt9s5O08zvl02o.roa (hash: nvn//iDJID27yb0p4DmlRMNLDXzJBDmTCGYaGUQJ1lA=)
2: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: mrQwH+waaAUHmuSX2PMATfGGaNBQBd4gp6EQZPrBFns=)
3: AK-YlCPEVbLAZegzYkNrI96Oefg.roa (hash: TQp9SWZ90VsXFNcjm672V8NJs6N2oP9XQNZuCEin7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:31:bf:b9:d4:86:80:aa:95:94:8d:51:03:0b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Validity
Not Before: May 12 21:00:58 2026 GMT
Not After : May 13 21:00:58 2026 GMT
Subject: CN=9ad6d48dda2f9bd5a16386fc65f7c1bbca926704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:f1:94:4d:01:16:1e:16:ff:09:5d:66:5b:
a4:00:25:17:05:65:fc:c3:04:75:a2:44:c1:6f:a6:
93:47:c7:07:f1:d8:9f:3f:77:6e:6d:08:d9:0e:d6:
88:4e:a3:04:9f:3c:42:3f:d4:9f:59:5a:49:8f:5e:
f9:36:34:67:de:9f:e4:33:4b:a8:82:9b:3a:94:75:
f0:93:be:7f:3b:8c:b8:f8:8a:c2:30:7d:fc:78:51:
7a:47:a4:83:a3:e6:b4:92:9e:ef:f3:a0:8d:07:d4:
21:4a:ce:9b:7c:91:1e:44:6d:a6:34:99:f9:0f:b8:
6c:22:26:74:cb:3b:d4:38:eb:5f:02:88:4a:8a:88:
7a:a9:0c:d7:ef:40:d4:f4:31:1b:16:94:ff:a1:ad:
d8:2b:45:0c:dd:37:53:ce:03:82:b2:01:2a:d2:92:
f0:c4:dc:92:7d:61:29:85:c5:cb:cd:67:70:6a:f6:
88:fe:d9:cf:7b:1d:51:ed:90:76:19:b3:65:87:d9:
2c:40:3b:5c:12:f4:e2:1a:88:5f:3e:42:1c:86:08:
45:8e:87:12:ef:a4:f7:19:97:16:09:49:a8:71:78:
83:c3:ec:29:b4:74:84:b8:b0:24:2e:30:ad:0e:a9:
86:47:7a:a4:78:f0:71:a0:7f:d2:ec:5a:06:32:16:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D6:D4:8D:DA:2F:9B:D5:A1:63:86:FC:65:F7:C1:BB:CA:92:67:04
X509v3 Authority Key Identifier:
keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fe:d1:b8:eb:cb:64:00:a4:e8:21:87:fa:dd:46:54:12:68:
89:d9:98:d6:08:94:55:c0:a2:c0:86:65:bd:05:cf:93:c9:fb:
f4:dc:2c:cb:d0:fb:57:7f:85:16:00:45:67:a0:37:8e:90:8b:
6f:dd:a8:7c:97:5f:63:fc:97:c8:94:b2:43:9a:22:82:f6:66:
61:5c:76:7a:63:e3:67:38:48:d3:dc:53:03:18:ae:60:83:f3:
20:71:75:10:3a:85:7d:b0:d1:f8:59:3b:6c:4d:aa:5f:2f:5c:
08:84:b0:42:ae:ac:91:20:58:97:2a:30:9b:c7:3f:dd:fe:1f:
75:8e:d9:2c:e9:b5:67:49:ff:9d:e1:92:ac:76:61:d2:f6:7b:
5a:e3:f0:4d:fb:38:3e:0f:44:10:9a:05:f9:2b:3b:e2:c4:90:
0d:1d:c2:dd:70:ad:eb:6a:1f:a3:3c:0b:e8:8c:b0:37:39:ba:
f8:95:9e:bd:95:fa:69:51:8f:63:a7:64:5a:47:24:5b:50:4a:
c8:12:48:c8:c2:bf:16:83:db:a4:23:56:fd:a4:24:5f:f5:a4:
f3:1a:43:94:e2:6f:f8:d7:c7:66:45:f7:51:ce:6f:ce:3b:91:
56:7b:75:69:37:70:50:99:2c:65:e8:83:6b:62:83:3e:77:9a:
86:8c:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:36:52 2026 by rpki-client