Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: 6gfaw31XxwaQV1Byq5pxg2E+78stLxClO12vGNLIV94=
Subject key identifier: 7B:99:F7:F3:91:DD:F5:8A:9B:53:C0:32:6B:EA:81:DB:97:93:BC:3B
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 019E1CB4B9C8DFF6AEAF889CBBDB8AF86004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0CC8
Signing time: Tue 12 May 2026 15:01:06 +0000
Manifest this update: Tue 12 May 2026 15:01:06 +0000
Manifest next update: Wed 13 May 2026 15:01:06 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: YGcGEDHfmpRDaWJpfjvf5Dyz0DdYEAb0U6teooPTycQ=)
2: Zfv_5cAa3ri0Ax5p2vNE36rHpnE.roa (hash: Id3c2s4Nmji3usQrf3+l5D4JNCrYHAfvKHW7XcPkXa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:b9:c8:df:f6:ae:af:88:9c:bb:db:8a:f8:60:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: May 12 15:01:06 2026 GMT
Not After : May 13 15:01:06 2026 GMT
Subject: CN=7b99f7f391ddf58a9b53c0326bea81db9793bc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:36:d1:26:d0:dc:c2:88:ad:de:66:23:45:70:
2e:67:cd:c1:8e:f8:0b:49:bb:23:2b:1d:c4:21:af:
7f:36:66:e5:f5:12:69:df:1a:11:16:46:b4:87:cc:
1c:32:f6:db:d6:b4:db:06:b2:28:1e:d7:59:79:84:
4c:8e:27:48:15:22:70:94:10:81:45:1a:36:e3:1e:
68:25:d5:32:da:a8:bb:84:59:c4:99:da:45:6c:75:
dc:af:77:5b:96:bc:b9:dc:c3:bc:03:70:7f:08:d9:
29:75:42:3d:a7:90:a7:2e:28:e3:bb:c6:19:7c:4f:
e5:7b:ac:49:d8:29:55:6b:dd:94:c6:46:46:9d:ba:
66:f2:67:b9:a6:d1:c9:61:83:a0:95:fa:c5:10:f3:
ff:10:ce:5b:31:9a:ce:1d:22:d6:2f:6c:02:3b:ad:
cb:e2:7b:12:25:f3:b4:86:d8:2f:56:fb:b4:de:52:
17:95:eb:b2:66:88:fe:e6:b1:f5:16:a5:2a:fe:33:
77:f1:ae:ab:df:5f:ce:a9:17:1a:a2:fb:6a:1e:09:
3f:2b:e2:b1:9c:f5:1b:3e:15:5d:42:62:0b:5f:7c:
3f:0e:9d:91:86:c4:43:7d:6b:90:da:a6:66:bb:92:
c5:fb:11:b6:21:a6:32:67:d8:8e:30:8d:cd:6d:52:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:99:F7:F3:91:DD:F5:8A:9B:53:C0:32:6B:EA:81:DB:97:93:BC:3B
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:30:09:2b:1b:c5:81:f7:e1:a0:e6:f3:84:8f:9b:ba:99:72:
1e:e2:21:dd:d1:fb:7f:aa:56:f7:5b:a0:1d:8f:50:27:74:41:
8d:8a:c2:98:16:40:b5:5f:73:6a:92:14:77:e0:4d:fe:1b:6d:
0c:99:94:a5:9d:f9:29:dc:43:94:15:c2:10:ba:e5:35:b4:c7:
04:ac:90:7b:fb:43:31:66:84:44:50:1d:24:9b:5a:c4:a7:f6:
91:38:ee:98:86:1c:e2:e7:c8:92:38:0e:3e:7e:3a:50:df:b5:
32:84:e9:3f:f2:48:2b:47:96:25:4d:90:74:ba:1b:46:cb:56:
7c:c7:31:a3:1d:13:a5:63:cd:f5:95:d9:87:84:4b:74:f9:d7:
05:e3:d8:85:28:76:d6:31:05:01:95:aa:86:b1:6a:99:ec:f0:
9f:71:96:f4:b9:97:81:16:d9:02:97:cd:65:a0:51:a0:88:89:
55:1b:6a:94:08:c6:3d:13:39:21:3e:db:be:33:ce:d5:ad:59:
c7:8b:de:d7:60:4e:8e:94:6c:9f:95:26:68:61:10:99:6b:38:
e1:3c:fc:83:f1:d4:99:85:d7:27:ab:f7:86:92:ae:9a:e2:98:
96:9e:ca:95:6f:73:06:3a:cc:fa:12:71:7f:c3:2b:a5:45:a6:
c8:77:28:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:59 2026 by rpki-client