Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
File: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json)
Hash identifier: PGbCIMvRs1QGWnpZulNP12AZbaQOicObuVeF/LYGWwk=
Subject key identifier: B6:E9:06:C6:C7:D9:E7:3A:D1:20:8D:BE:F3:DC:5D:8F:76:BF:19:B3
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Certificate issuer: /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial: 019E1C475AC465462FDAE53A8A7FE3EE3E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
Manifest number: 137F
Signing time: Tue 12 May 2026 13:01:38 +0000
Manifest this update: Tue 12 May 2026 13:01:38 +0000
Manifest next update: Wed 13 May 2026 13:01:38 +0000
Files and hashes: 1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: 1BfHmtNGJ8GTNSIuxYurMQejr81rXyfg/twQevM1RzY=)
2: maEv5ArPl0MhVYV7tQz9rkyTAIo.roa (hash: dBiLGOeBpvZw0H7gef9rbExfaEt6iLiJPLCEXhR/0HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:5a:c4:65:46:2f:da:e5:3a:8a:7f:e3:ee:3e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Validity
Not Before: May 12 13:01:38 2026 GMT
Not After : May 13 13:01:38 2026 GMT
Subject: CN=b6e906c6c7d9e73ad1208dbef3dc5d8f76bf19b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:64:81:03:e2:64:0f:dd:b8:22:6b:64:d7:a0:
3a:92:bc:76:e5:78:04:ff:c0:36:c8:9a:dc:1b:f4:
4c:0b:06:bb:f2:6e:67:c1:d4:01:6a:e5:6f:4d:5b:
e9:2d:91:71:ba:f9:65:c2:13:e2:59:55:89:1e:95:
41:51:a8:06:03:95:b1:05:ba:e3:7d:d0:53:c6:d0:
13:73:58:91:65:19:6b:e2:42:58:59:c5:57:6b:25:
df:b7:87:0d:18:9b:bd:8f:11:0a:e4:a8:77:f0:64:
ed:da:eb:eb:6b:50:83:4b:d1:d0:05:97:d6:52:38:
14:4d:ba:f4:ed:ac:46:15:8e:1e:f8:20:76:6a:4c:
53:89:53:f9:6d:cf:dc:63:15:58:9b:2a:9c:9e:0d:
ab:74:3c:80:ba:6f:2e:bf:af:c7:5a:fc:34:2b:a7:
40:90:75:bf:e6:2a:af:8a:1b:b4:dd:5f:fe:70:19:
12:77:46:d5:7c:4b:ce:d0:2d:92:c0:95:77:b6:be:
1b:0e:44:d3:7a:46:8e:24:e7:fe:76:b7:b6:b0:c4:
8a:44:89:8e:f3:d5:d4:54:ca:a5:ba:61:be:c5:7b:
af:07:07:80:9c:7c:54:45:94:8c:16:86:d7:7d:b8:
07:ab:56:ff:41:7a:75:ab:b7:2a:60:2e:68:8a:a3:
b5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E9:06:C6:C7:D9:E7:3A:D1:20:8D:BE:F3:DC:5D:8F:76:BF:19:B3
X509v3 Authority Key Identifier:
keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:26:38:3a:c3:5a:3f:ca:5b:e9:d0:1b:93:71:40:72:83:b6:
b9:5e:c2:80:d3:7a:81:26:13:c9:6d:b4:29:6f:82:fc:03:b6:
32:ee:26:d1:9e:2e:0b:68:cf:c6:4c:4c:5c:c4:b3:ef:5c:b7:
c3:01:75:11:bf:8e:79:d7:ba:98:42:12:1f:b2:85:cd:ea:3f:
94:ad:f6:19:a6:ca:16:a7:8d:ef:8a:12:50:d9:2a:6b:24:11:
91:bc:40:a4:aa:09:7f:ff:a6:19:47:7d:ef:d4:2b:13:9e:e2:
f2:45:66:f4:51:02:1e:32:8c:53:50:c0:15:58:8c:ba:91:5c:
bf:84:32:29:2f:c7:63:c7:41:65:1e:8f:a8:12:f8:9f:c2:86:
7b:5b:d3:dc:54:e0:f4:ae:83:4f:2b:84:2f:3d:ca:ea:6a:94:
23:30:a9:ee:28:49:49:af:f1:29:8a:78:d8:60:36:6c:46:c3:
b0:50:35:c5:95:d9:03:84:f3:d3:cd:5e:75:8d:88:67:7b:82:
3b:17:ce:1d:87:e9:f5:03:3c:65:83:fa:25:fe:7c:8e:9c:cb:
ce:ac:09:d5:2d:36:42:bd:7d:21:a3:ef:ff:38:00:2a:25:e4:
70:08:56:d7:f2:11:96:3e:6e:e9:8b:97:21:77:b9:46:5e:bf:
e7:0d:1b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:41 2026 by rpki-client