Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: bWsKuahue/xXW1TmpXvZP7MZJy7n0wZO7kDooSmW00Y=
Subject key identifier: BD:33:4A:36:13:FC:15:22:AA:6E:9C:67:A6:4C:75:D8:C2:34:E3:5E
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 019E1DC74BF952EB72C65AB2319C1D1D0D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 20:01:00 +0000
Manifest this update: Tue 12 May 2026 20:01:00 +0000
Manifest next update: Wed 13 May 2026 20:01:00 +0000
Files and hashes: 1: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: Ndqn+iqrPO03i3gfGSofnekYU4c2Ke+9K2XzBLYqwhs=)
2: jbafLlCB65wc3lu8qCmYl11AIFk.roa (hash: K+M36ULpoKKc2R4rksKlSojLYrf7EhhEe4ldkXRNVqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:4b:f9:52:eb:72:c6:5a:b2:31:9c:1d:1d:0d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: May 12 20:01:00 2026 GMT
Not After : May 13 20:01:00 2026 GMT
Subject: CN=bd334a3613fc1522aa6e9c67a64c75d8c234e35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:26:d9:be:ed:c5:8d:9b:4e:0f:54:13:04:
ed:05:41:8f:ad:6b:32:b9:ba:b7:12:f8:6e:1d:15:
ce:80:67:38:bf:53:da:7a:80:3b:ea:b0:89:0f:5d:
1b:37:a8:95:99:a4:69:57:9d:36:83:f3:49:ba:95:
4a:19:2b:7c:d2:62:c5:99:17:60:ed:b5:e0:b1:f2:
1f:dc:14:f2:90:a4:4c:b1:09:a3:28:34:71:7c:62:
80:31:19:07:e8:fd:46:1c:39:f9:0d:6b:f9:d2:fe:
ec:ba:9a:d5:fc:c9:fa:89:ef:0b:f6:8f:68:3b:74:
b6:91:ff:16:11:c0:a9:f2:21:f1:d7:a4:9b:d0:7a:
cc:84:b5:51:1d:43:fc:e6:62:19:2d:e4:62:89:d7:
37:39:2d:e4:bd:c3:4b:2e:ee:25:a2:62:70:35:56:
c4:83:d3:1e:56:b4:96:53:c1:12:c7:12:f5:56:ff:
09:07:69:cf:83:20:02:5d:20:9b:52:98:1f:d7:00:
53:0b:0f:c8:2e:63:92:0e:71:9c:ca:12:2e:a2:5f:
ad:60:34:5e:49:46:a3:c7:6b:61:23:fd:85:e6:30:
7d:81:fa:41:46:ee:61:4b:82:8b:19:6c:24:19:55:
b9:6c:d4:f4:99:52:b1:e8:6b:12:af:17:b3:41:76:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:33:4A:36:13:FC:15:22:AA:6E:9C:67:A6:4C:75:D8:C2:34:E3:5E
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:02:1b:0c:72:8f:be:56:e0:98:6c:b4:3c:2b:26:aa:a3:84:
7f:6b:e7:84:62:9f:38:69:38:45:8e:b2:3e:ef:fe:48:ab:6e:
5b:d9:73:db:0e:a9:50:60:6c:61:f7:51:33:30:7e:04:d8:1f:
d2:c5:2c:2e:44:3c:d3:b8:9e:30:31:21:95:ab:f9:5a:1b:96:
fb:3e:b8:70:77:97:d2:b9:43:63:61:8e:cd:ec:c6:fa:dd:72:
5f:ea:25:3b:68:7f:a8:6d:b4:7a:9b:31:68:ce:c4:ba:b1:95:
5d:32:21:52:2f:20:50:b7:72:ee:a8:ed:71:d3:82:55:ad:6a:
b3:15:04:1a:df:8b:41:f5:02:46:d8:bc:9b:1e:02:31:0f:18:
d1:a2:c9:04:4e:09:9c:2f:c0:97:4a:62:33:98:5f:b4:b1:05:
7e:db:fc:7e:98:02:80:6f:ae:c5:0e:8c:5e:ae:65:7f:1a:ab:
39:2b:aa:7d:97:02:dd:4e:03:30:26:7e:1a:5d:dc:b8:22:e8:
46:6f:16:b3:b0:e3:b0:95:16:b4:b4:c3:a8:2d:c3:08:fa:c4:
db:1f:f6:c5:cf:ed:dd:41:f6:3e:80:9b:90:86:1a:f9:83:ab:
dd:4a:38:dc:4d:8e:b2:e1:27:96:92:3d:32:5a:83:ad:9f:ee:
99:38:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:10 2026 by rpki-client