Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: ajjwsiOUTpgAboDwVKqQQGg1HyfR4SI8uhV1bnyjzUE=
Subject key identifier: EC:36:F5:64:C3:5B:82:1F:F7:68:08:31:DD:3A:B2:40:C6:73:5A:1E
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 019E1FEC7C51E7B1A1E0381D0F95AC95A2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 1406
Signing time: Wed 13 May 2026 06:00:52 +0000
Manifest this update: Wed 13 May 2026 06:00:52 +0000
Manifest next update: Thu 14 May 2026 06:00:52 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: iFOibuGIkvUpziERf+dL8Z8539LZDkwUiPI6CCZYpNM=)
2: 5BcZMkFK4H4HzeU32Pg9Et5_SQ8.roa (hash: yDr7OimE93R5A5WQDfIWvLQYnSnCYBj7r4S1yWKb1hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:7c:51:e7:b1:a1:e0:38:1d:0f:95:ac:95:a2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: May 13 06:00:52 2026 GMT
Not After : May 14 06:00:52 2026 GMT
Subject: CN=ec36f564c35b821ff7680831dd3ab240c6735a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:11:a8:ca:6d:4b:ab:31:1d:de:36:86:55:
85:2c:bd:ba:0b:8c:50:06:4f:c7:76:5e:c0:b7:dc:
a1:97:0e:fe:92:0a:9e:7e:f3:a3:53:93:2a:44:f8:
cc:da:28:de:df:15:40:d0:58:37:3b:f7:70:04:06:
78:ec:63:f8:f1:e9:47:41:53:ab:bf:9a:79:7d:8d:
3c:9d:03:06:9b:55:19:e7:73:5a:da:84:76:bd:a4:
be:06:6f:11:3c:5a:25:c9:db:b3:db:9e:1e:54:3d:
31:64:8a:6e:93:fc:dc:23:50:80:b8:03:76:b4:d6:
ad:27:81:26:b6:c5:66:f7:5e:79:7b:f1:b7:a3:2a:
22:69:97:d2:f9:a4:61:9d:8b:ef:72:34:4b:52:3d:
a7:44:8a:e1:a1:6a:ec:0a:b2:73:cb:ec:85:06:9e:
c7:3f:a1:e8:3e:9d:2f:7d:f5:3f:86:a8:06:2a:6a:
f0:2f:2f:34:4a:93:96:5d:13:e0:18:08:c3:f0:1c:
6c:d3:34:0e:6b:5f:b0:fe:26:22:b5:f3:b9:24:d9:
b3:5b:fc:2c:09:d8:f0:49:16:35:c7:1a:7d:55:e5:
41:9a:e5:fd:1c:5f:99:46:d1:45:82:d8:9b:93:41:
58:5a:24:10:61:5e:9f:53:36:98:c5:8f:1a:a6:de:
18:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:F5:64:C3:5B:82:1F:F7:68:08:31:DD:3A:B2:40:C6:73:5A:1E
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c4:28:16:31:09:eb:5e:81:f7:02:cd:d9:5b:82:22:03:b4:
93:cf:10:3a:35:51:07:4a:09:8e:23:e1:df:78:8c:ae:dc:09:
bd:9e:93:7a:db:38:79:c0:0c:13:ca:de:9b:f9:c2:a9:8d:c7:
70:4f:1a:82:80:17:90:59:39:b3:a1:60:6a:b5:c2:3e:29:db:
3b:84:3a:08:66:62:bc:3e:a2:49:17:0b:69:14:96:20:76:38:
6b:ea:26:41:db:53:97:91:da:2e:e3:13:85:60:c2:e2:31:7a:
d1:63:b3:17:e6:00:a1:28:8c:14:3d:5c:3f:65:2f:58:ba:5b:
ee:b6:ee:56:dc:71:26:7d:97:b1:0a:b6:73:9b:55:4e:a8:2e:
8a:60:2b:bc:22:f3:91:a7:01:3e:71:b6:53:b5:0d:b4:3c:01:
44:fb:80:fe:9a:92:1d:98:3e:af:13:fd:c2:ea:88:cb:f9:30:
f1:6c:7a:f3:17:e6:da:6a:8a:f5:ce:b4:17:0a:71:dc:3b:38:
f3:b4:bf:07:c1:9a:8f:f4:67:d0:96:12:22:a4:6c:03:d3:b3:
00:a9:af:75:de:8b:cc:62:e7:3b:fc:02:36:36:62:5d:90:6d:
54:b2:2d:10:76:39:db:55:83:aa:d0:a8:e8:1e:34:fa:15:51:
e2:fb:57:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:19:24 2026 by rpki-client