Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
File: d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft (raw, json)
Hash identifier: 6J6+YsG+AGMqisvPcoTIQv3VBkroNLno/a317NZSKKQ=
Subject key identifier: 76:E2:A5:52:93:8C:A6:E0:D1:2F:00:E7:90:9D:33:1C:D2:03:1D:BF
Authority key identifier: 77:85:37:BD:CB:35:32:0C:78:D5:98:19:A5:0B:36:1E:B9:58:20:B7
Certificate issuer: /CN=778537bdcb35320c78d59819a50b361eb95820b7
Certificate serial: 019E1D59BE54EC542521BD9E63CC90246CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
Manifest number: 20
Signing time: Tue 12 May 2026 18:01:21 +0000
Manifest this update: Tue 12 May 2026 18:01:21 +0000
Manifest next update: Wed 13 May 2026 18:01:21 +0000
Files and hashes: 1: K2Dc5OBuZ-3GVexCh6zp51MBUis.roa (hash: c29k2Uu3E6+pH0/RU1RBK1xurercCYLwxnC+Kb8waAo=)
2: d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl (hash: vssjzeOc5oYn+jUaODvg3sQbum5LcPUnPRXabqHkEPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:be:54:ec:54:25:21:bd:9e:63:cc:90:24:6c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778537bdcb35320c78d59819a50b361eb95820b7
Validity
Not Before: May 12 18:01:21 2026 GMT
Not After : May 13 18:01:21 2026 GMT
Subject: CN=76e2a552938ca6e0d12f00e7909d331cd2031dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:32:09:86:1c:6d:5c:ad:6c:79:4d:d2:c7:26:
9d:21:f8:9f:43:32:a3:5a:00:41:8d:bd:83:6b:fe:
7b:0d:0d:f9:98:21:6a:cd:02:1d:39:17:88:27:dc:
ed:f5:9b:37:da:39:26:dc:8e:6b:1c:ce:7d:e4:b6:
ee:6f:90:4a:4d:56:e8:c3:77:2f:b9:54:ba:4f:66:
92:8d:3b:8b:19:f7:77:d2:6b:df:86:33:97:0e:1e:
8f:fd:73:97:7c:8c:be:a3:02:38:fd:4a:c1:16:ca:
9a:81:ed:b2:1f:a5:fa:ef:bd:5e:aa:04:db:52:d6:
ff:d9:b1:6f:6e:5e:d9:89:d8:d4:15:3a:66:6a:9f:
1b:f1:90:0f:30:ac:0d:f7:99:79:48:89:b6:00:c5:
d3:75:80:33:18:53:82:83:5f:aa:9d:96:f1:42:ba:
87:d5:5f:94:20:52:ef:c2:1a:0b:75:99:e7:e6:df:
de:97:36:95:60:72:95:1e:ba:f5:05:72:e9:ce:af:
6a:04:3d:8a:17:18:2e:dd:d8:db:2a:a6:8e:cb:df:
8a:ad:b6:1e:d8:33:af:3f:7a:8b:d0:23:9e:c5:f1:
61:6a:e5:e7:4b:6e:3b:4d:b3:2e:7b:ee:4f:d4:62:
72:fb:bd:ee:16:3e:6d:54:1e:a3:20:c8:b2:4d:70:
8d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E2:A5:52:93:8C:A6:E0:D1:2F:00:E7:90:9D:33:1C:D2:03:1D:BF
X509v3 Authority Key Identifier:
keyid:77:85:37:BD:CB:35:32:0C:78:D5:98:19:A5:0B:36:1E:B9:58:20:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:76:fd:dc:6b:ef:67:1d:73:20:97:a4:df:16:1f:57:42:c8:
43:ae:c8:7f:8d:05:ba:86:84:8c:f9:a3:dd:b1:9f:91:fb:78:
0b:2e:9e:b3:fe:82:c9:bc:c2:1e:64:80:5c:47:62:0c:4c:2a:
43:c2:c3:5b:40:c4:30:ab:be:53:ce:f7:d1:9b:41:d1:7e:0f:
09:8b:6d:78:6e:f8:96:a3:dd:31:78:42:de:35:ba:d5:7e:e9:
35:71:3f:b4:2e:3f:69:bb:30:d6:22:73:13:1e:94:2d:81:91:
0a:c6:a9:7c:54:c9:ff:89:6e:7a:b9:24:b6:af:87:b9:3d:b8:
c1:a8:16:1f:dd:b3:d2:6e:a8:b9:1f:aa:ed:49:bb:2c:25:07:
d1:3a:32:2c:f5:58:91:86:10:92:f8:e4:cc:bb:0f:8d:b3:d4:
85:b8:ac:93:e5:1d:5c:a0:bf:a2:e9:e8:3c:0c:29:79:44:85:
e4:e5:8b:62:44:88:12:a3:d7:2e:be:74:3a:39:8c:28:f2:34:
b5:f0:ca:0e:25:82:bc:4d:0f:23:29:f4:20:11:1e:ba:97:32:
24:e8:4a:48:cd:e0:d8:48:7d:30:0c:86:93:03:7a:f3:ee:9b:
6e:df:65:5e:43:74:bf:8c:41:61:6e:fc:98:f5:cd:fd:68:5c:
fd:60:0f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:36 2026 by rpki-client