Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
File: 4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json)
Hash identifier: 6FxFnliou3C8nrQhmyNzEsFnAU/uEdlS7GJKxYKEyEM=
Subject key identifier: 71:3A:52:E4:A1:8E:91:98:BC:25:A7:DC:0B:8F:66:F6:14:A4:9F:3E
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial: 019E1D235D89FDC238A70753BC945A6072B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 17:01:57 +0000
Manifest this update: Tue 12 May 2026 17:01:57 +0000
Manifest next update: Wed 13 May 2026 17:01:57 +0000
Files and hashes: 1: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: bHkEOEhsOxyzKBzVTLXr98ufiP8MVZw607kEfKZeuFU=)
2: TglFPGNOO08n6CcIWPtZA1IiMQ4.roa (hash: /q1UZrCdKL66jU2/r5RlUBwTKqwDKZiHeHHzwJ0UJjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:5d:89:fd:c2:38:a7:07:53:bc:94:5a:60:72:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Validity
Not Before: May 12 17:01:57 2026 GMT
Not After : May 13 17:01:57 2026 GMT
Subject: CN=713a52e4a18e9198bc25a7dc0b8f66f614a49f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:1e:70:e0:57:48:44:17:50:e0:e8:9e:63:
12:ef:f8:b5:a8:e5:fc:20:07:8a:0c:5f:23:d1:c9:
e1:9e:e0:fb:8e:10:63:c5:13:71:bf:03:2a:a3:40:
b8:23:ab:76:52:65:2e:e9:b1:df:95:0a:f5:5e:6b:
ef:ca:45:e3:e8:0e:ae:d8:1e:d8:71:e4:06:db:5f:
8f:8a:20:76:ac:65:8d:5b:40:8e:66:f2:cc:29:82:
83:f6:6a:da:78:fd:72:50:a2:ee:6f:a1:0f:c3:25:
34:d0:c1:b1:57:ee:45:91:4e:7f:2a:5d:1f:2c:3c:
11:0f:0f:0d:7f:ff:8f:b5:5c:5b:f3:4b:ff:e3:85:
66:97:b2:fb:92:37:a8:2f:c9:05:1c:21:dd:b5:27:
88:ff:6a:b2:22:ed:e8:b5:5e:6d:27:43:a5:3b:72:
e8:76:01:b5:e9:2b:39:16:1d:77:31:c2:c1:93:f1:
ef:f3:cb:66:72:ec:fe:2f:5e:00:db:cf:a5:d2:5c:
a0:30:00:33:68:3c:cf:47:b3:dd:49:b5:e1:b0:2b:
13:e1:a9:00:0b:27:21:4b:85:fd:56:63:20:0c:b8:
c7:00:51:fe:92:6e:74:bf:b6:26:f7:ce:40:cf:0a:
c9:5a:44:24:0c:7e:db:4e:89:15:65:29:3c:13:8a:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3A:52:E4:A1:8E:91:98:BC:25:A7:DC:0B:8F:66:F6:14:A4:9F:3E
X509v3 Authority Key Identifier:
keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bd:b5:95:31:da:84:2c:6c:0b:51:4b:4b:c8:6e:f7:00:b4:
0c:48:f3:3e:00:40:f6:a8:e1:2a:a8:71:22:5e:b5:18:01:55:
c5:d4:fd:0b:31:e9:25:66:15:31:46:5c:57:9c:67:29:ab:7b:
98:db:a8:61:04:db:c0:62:d5:f4:62:f9:a7:b2:49:07:72:8a:
ca:8d:21:5b:fb:32:63:96:b4:83:d4:51:74:2a:15:f6:21:c0:
d7:bc:26:49:6b:2f:3e:31:70:8b:b0:2b:49:4b:91:f9:5c:b5:
c0:61:71:de:f5:32:2a:8d:67:5d:a3:a2:3a:e9:ca:19:35:aa:
48:0d:f8:89:53:a5:40:bb:35:6f:0a:c9:4e:8b:c1:fb:da:3b:
6a:16:1a:d6:23:9d:ff:e4:4f:c7:90:b7:e4:c4:95:a9:15:ba:
ec:88:05:b1:96:b2:fc:89:9b:0b:8b:35:5c:a6:0c:33:61:0f:
d1:2b:67:b1:b7:4d:9c:77:85:23:8b:51:3a:b3:b8:dc:eb:ce:
0d:95:f0:eb:ab:e7:bb:e5:bd:dc:30:06:6a:31:8e:aa:3d:b7:
d4:0d:c5:e0:c4:59:a6:4e:a2:47:db:34:ae:75:df:bf:b3:1d:
d0:4b:0b:3f:a0:c2:b0:8b:d6:40:08:b9:a2:84:12:d1:a3:b0:
8c:09:77:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:59:26 2026 by rpki-client