Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: 78s1KVkRswW7cmOG542Xkg6tZxU1lQ4p9qYR+wIpNX0=
Subject key identifier: E1:A3:F0:41:86:78:1D:D4:A1:F7:25:98:D7:1C:B4:66:81:26:FD:A8
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 019E1D22FCA89C34A097BB9BF2C199914512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 17:01:32 +0000
Manifest this update: Tue 12 May 2026 17:01:32 +0000
Manifest next update: Wed 13 May 2026 17:01:32 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: R+1LvjMYtzb44i+ta9j5aWYlbGH0g/aGMPTnxCVao54=)
2: BfP2bGOW8HthUfuXXggXfcuAbvE.roa (hash: dmLHFskk9KIm4+573JvglcI2K8WR/PAM7m+/RW2L1vs=)
3: Gqd_X9Cp3EkyhF_XljM8cJVBjSo.asa (hash: J5j3yc/QFcGihvZazzwI8F9VHttAgOTYUiy+DL6NbuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:fc:a8:9c:34:a0:97:bb:9b:f2:c1:99:91:45:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: May 12 17:01:32 2026 GMT
Not After : May 13 17:01:32 2026 GMT
Subject: CN=e1a3f04186781dd4a1f72598d71cb4668126fda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ae:49:e0:f9:8c:93:78:b0:bc:18:63:36:fc:
65:99:ce:43:61:1a:50:e0:f4:f6:df:12:33:23:c2:
df:88:11:d9:6d:44:85:c9:e5:bd:d7:07:ce:91:8d:
39:55:78:aa:66:6a:de:bd:d1:e2:8d:ed:a0:ee:12:
fb:4d:3a:f5:15:4d:4e:5e:e9:14:c2:a1:d3:fd:22:
7a:7d:59:da:73:c7:44:70:9f:3d:31:84:6b:1f:e8:
6d:7e:b9:e6:ee:8a:95:4c:a8:98:3e:78:a1:5e:bf:
e7:c3:5b:60:07:c1:56:10:34:26:d4:e1:dc:94:ac:
90:4e:0f:5c:98:02:f7:b3:1a:7f:12:0c:10:10:56:
67:8c:17:cc:bc:b2:92:55:db:39:d0:82:68:68:e5:
c4:19:dd:60:97:b4:ed:ff:e3:9e:f5:35:a4:21:be:
f0:85:26:b4:3e:d0:38:2a:87:0e:94:37:a4:4f:92:
30:c4:cd:f0:39:dd:b8:46:4a:59:d0:30:7d:c6:52:
c4:0a:f3:64:e9:73:4f:89:df:e2:35:4c:02:f5:8e:
95:48:b7:46:ea:6e:e0:bd:6e:2c:b2:5f:bb:66:95:
85:98:b0:3a:44:b1:e5:6b:82:18:1d:1e:fa:68:6e:
0b:d4:4e:29:f8:5e:1f:82:01:94:03:04:27:e8:5f:
b7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A3:F0:41:86:78:1D:D4:A1:F7:25:98:D7:1C:B4:66:81:26:FD:A8
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8c:4a:8b:5b:8e:bb:ef:3d:c0:5e:d5:7e:23:a1:47:ac:34:
10:f8:fd:4d:db:2d:59:05:d2:21:de:70:f0:93:95:74:ee:1b:
69:ba:d1:66:80:76:6b:a4:b4:f9:a6:5d:7e:50:71:bf:b3:11:
f0:6e:c0:c7:6a:ea:08:22:d4:c2:8a:5f:1d:06:19:eb:88:51:
a9:2a:e4:ec:3d:49:60:43:80:4d:f5:83:11:db:7c:ea:08:85:
9b:8d:b8:15:72:4d:61:c7:65:2f:ba:ba:e9:1c:c4:90:ad:6a:
a1:87:29:eb:b3:72:b9:3d:11:f6:97:4e:d2:40:79:e6:94:41:
c0:bf:d3:7a:cc:81:51:e8:ff:09:1d:9e:7a:14:91:83:43:23:
07:95:ba:67:6e:02:ef:89:47:6b:63:c7:d1:d9:40:2c:46:f8:
7c:1f:7b:3a:49:26:61:f9:47:91:79:e5:aa:0e:6e:07:26:c3:
8e:fb:5e:05:76:db:8f:8f:d8:92:42:04:33:11:56:cd:29:49:
92:75:61:d8:5b:cc:35:93:3e:db:bf:93:fa:c8:6a:e4:1c:85:
00:10:2c:88:f3:55:b7:8f:af:38:18:c4:a4:bb:93:50:91:e8:
48:b2:d7:1a:57:9f:49:5f:19:ae:e6:b6:2f:69:b8:0c:26:24:
f8:9d:63:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:34 2026 by rpki-client