Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
File: c4DHWfVY-ca-iN0iakOdmcnqzww.mft (raw, json)
Hash identifier: juABk3jcCVQJGbCsTITKI7XWD9MiqDGupz5xmFVP6XE=
Subject key identifier: 50:28:FB:D4:DD:84:E4:C3:B6:8D:2C:DB:33:FA:07:17:10:BB:2D:41
Authority key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
Certificate issuer: /CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Certificate serial: 019E1E35F065B6B0F389D3CFC18D5BD19D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
Manifest number: 1038
Signing time: Tue 12 May 2026 22:01:51 +0000
Manifest this update: Tue 12 May 2026 22:01:51 +0000
Manifest next update: Wed 13 May 2026 22:01:51 +0000
Files and hashes: 1: SyzDr7afLaGB0eh8BGltmqw92Ho.roa (hash: 050EI4bgC2uJSD8MPwN8yNb/BaQ/4SeM3IGk1KBixYk=)
2: c4DHWfVY-ca-iN0iakOdmcnqzww.crl (hash: EhQce1DH1bciDxiqyjjJlVn1MNSDDj8qoJLlx9od/x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:f0:65:b6:b0:f3:89:d3:cf:c1:8d:5b:d1:9d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Validity
Not Before: May 12 22:01:51 2026 GMT
Not After : May 13 22:01:51 2026 GMT
Subject: CN=5028fbd4dd84e4c3b68d2cdb33fa071710bb2d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:92:b5:0b:d1:42:ac:19:1b:5a:b4:17:3a:
1c:21:c6:ac:97:48:3e:eb:64:3e:ec:2f:c7:3d:95:
62:32:19:1e:ba:3b:43:0b:eb:14:1e:d8:83:7f:ae:
8b:57:16:04:e5:db:31:a1:55:44:c7:ba:f1:ae:36:
2e:91:39:8e:16:a1:4c:13:12:a5:d8:f6:b1:63:e8:
e5:50:d2:29:c0:a7:cf:1a:84:b7:05:6e:93:87:26:
d7:98:2f:54:6a:1f:8b:bf:cc:2c:46:d3:69:9b:41:
5b:7f:54:40:37:de:77:da:4d:ae:0d:88:ac:ab:64:
23:16:d3:0e:c3:f5:39:af:89:a5:3e:34:cd:da:27:
8b:29:7d:93:38:e6:ac:fa:95:1f:1e:8c:ed:99:b2:
53:cd:27:87:49:31:e4:f3:f6:75:f9:0f:73:3a:b2:
91:8a:e3:a6:b1:1c:14:96:3d:12:cd:64:2f:56:0d:
d2:26:5e:4e:fa:25:3c:c9:8a:d8:4e:82:05:e2:76:
04:54:8d:a0:f5:2a:53:a6:4b:bf:df:c3:6f:c0:ab:
4c:9b:85:37:06:e6:d6:50:12:aa:99:bb:a0:e5:2b:
d1:d3:c6:cd:93:b7:62:dc:74:5e:c5:7b:e8:1d:ba:
81:c3:77:93:05:03:9b:12:4f:45:ff:0a:74:81:f5:
0e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:28:FB:D4:DD:84:E4:C3:B6:8D:2C:DB:33:FA:07:17:10:BB:2D:41
X509v3 Authority Key Identifier:
keyid:73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:20:0b:5f:3c:59:44:9c:9d:86:3c:b3:20:c0:74:9e:3d:87:
ca:9f:5b:fb:40:48:15:4b:69:ec:57:4c:ef:4d:c3:72:7f:36:
23:b8:8e:de:24:79:ae:bc:8f:02:86:97:5d:37:45:d2:2d:ab:
26:da:5c:6a:91:97:1b:aa:f3:a5:40:40:3b:a0:28:3d:76:87:
64:62:b6:85:59:21:27:2a:fa:31:6f:1c:e3:0e:a1:bb:aa:36:
a6:0b:3f:fc:f2:c2:ad:57:af:35:4e:be:b4:75:8e:54:34:03:
46:29:f0:61:5c:ba:72:7c:90:79:2d:68:27:59:cb:e3:87:18:
3c:d8:29:83:ff:c3:c6:f4:4a:b4:3e:13:fe:96:76:41:ee:00:
27:a5:12:cc:1c:18:9a:e8:79:f2:ac:7f:0a:1a:74:f0:c6:55:
f9:f2:b7:d4:2b:a3:e4:a8:81:70:d3:d5:9f:f9:16:4b:cf:a3:
55:d4:56:ad:29:4d:e7:66:02:b9:9a:b8:8c:dc:e7:26:4b:6a:
e2:7a:65:d7:fb:d2:3f:f3:01:78:e0:f0:5c:a1:0a:a1:a4:ff:
b7:ab:05:07:54:ac:66:f5:09:e4:7e:6d:30:d0:4a:09:30:96:
76:d5:f0:71:66:70:11:66:a9:4c:ea:9f:d0:37:8d:aa:ed:fe:
84:61:13:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:35 2026 by rpki-client