Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
File: 4RlTX6w_pId5V5vOj8O0At7yy0Q.mft (raw, json)
Hash identifier: Yekry7Vovft8fRXV236OFLl1G0n9gtBQeAsXdsi4yyE=
Subject key identifier: AF:E9:52:3B:41:1D:21:37:26:58:B7:84:D8:8B:7C:61:43:2A:A6:DF
Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
Certificate issuer: /CN=e119535fac3fa48779579bce8fc3b402def2cb44
Certificate serial: 019E1D2310483933B14BC6BA19188A66B9EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
Manifest number: 08DD
Signing time: Tue 12 May 2026 17:01:37 +0000
Manifest this update: Tue 12 May 2026 17:01:37 +0000
Manifest next update: Wed 13 May 2026 17:01:37 +0000
Files and hashes: 1: 4RlTX6w_pId5V5vOj8O0At7yy0Q.crl (hash: kofqg3Q517Cm6UEh5pSjVneGs5ipffdhoTkqMCmWLX0=)
2: xsczLZy6vYyowOb8czcl6wqwt9w.roa (hash: Mvlo5cxvh4qQACxtbdlZhswtrG2sScu72g8Sl/rtq7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:10:48:39:33:b1:4b:c6:ba:19:18:8a:66:b9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44
Validity
Not Before: May 12 17:01:37 2026 GMT
Not After : May 13 17:01:37 2026 GMT
Subject: CN=afe9523b411d21372658b784d88b7c61432aa6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:f1:9f:63:2b:c2:ba:c4:97:03:bd:cd:d0:
5b:8d:dd:60:ee:29:a4:8b:05:56:c9:9b:c7:b9:69:
56:c3:bb:e9:50:37:6a:09:da:bd:52:12:af:47:88:
49:e6:98:13:73:65:e7:d6:f5:01:a8:d9:36:97:0e:
22:0f:a1:c2:e5:13:88:d3:93:1f:b3:e0:be:69:a6:
18:58:0f:28:1d:fd:e2:c4:20:97:bc:4f:d5:5f:ab:
83:5a:6c:b4:5d:7b:23:69:53:78:24:66:ef:1e:d8:
b9:d5:22:8c:ac:2f:72:b5:9e:40:2e:0c:92:d9:2a:
c7:f5:14:ff:9b:d8:b1:89:01:b6:33:4c:cf:1f:ad:
f3:77:64:dc:c2:45:c1:20:59:69:f8:dc:5c:eb:6f:
e1:a4:d9:00:7e:1d:35:d7:85:6f:3b:75:49:c6:09:
5d:ec:c5:a9:8f:9d:e1:13:70:5d:6f:38:8f:f9:15:
9b:4e:5a:cf:38:dd:5e:0d:73:3f:c1:ed:c9:7d:e9:
c3:2c:b7:57:b4:c1:f5:24:e6:0f:0a:a7:d8:fa:9e:
78:e1:e9:8b:cc:61:6f:d2:ef:57:9c:ac:fc:c3:97:
02:57:11:db:64:e7:13:8a:d1:65:fe:9d:d4:22:56:
9d:21:d9:4d:98:00:e0:ee:26:8a:2e:31:57:8e:f5:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E9:52:3B:41:1D:21:37:26:58:B7:84:D8:8B:7C:61:43:2A:A6:DF
X509v3 Authority Key Identifier:
keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:23:ce:31:8c:2a:a1:99:91:d9:b6:b7:c4:72:07:24:80:af:
79:f8:ba:93:55:06:9a:d9:05:5d:5c:94:f9:91:11:b6:ed:48:
c1:12:25:08:0d:5f:20:9d:3b:ef:f2:b9:1a:9a:cd:37:cd:2f:
74:4c:55:f8:ee:a0:f6:3c:5f:cd:74:5f:fb:2d:18:99:4b:9a:
fa:f7:61:5b:b0:d2:9d:ed:38:dd:87:42:b7:05:0a:a0:31:4a:
4b:e9:0d:82:56:c4:fb:71:95:86:07:a0:e6:1a:f1:f7:90:c1:
3f:ed:e1:3d:0b:c4:55:41:a0:db:29:1f:7c:d3:6b:ef:d2:40:
00:c6:d2:c8:9c:ab:82:00:f7:b4:33:d1:44:af:72:65:37:1f:
23:4a:60:ff:e5:05:96:82:db:61:63:cf:69:57:3b:dc:fa:1e:
16:4a:a0:50:a5:3a:b6:8f:a2:44:55:9c:7f:52:6e:2a:86:8a:
e5:f0:5c:47:99:43:5e:90:7a:9c:f6:7c:2a:d6:a6:d4:dd:2b:
e1:15:25:88:df:38:db:4b:26:be:6b:5b:2a:d9:8d:77:f8:6c:
17:92:a9:94:ad:9e:38:30:2b:16:4d:02:b0:59:3a:ad:de:36:
d8:c7:f9:14:ee:71:cf:57:39:93:71:ab:57:c9:d3:21:72:63:
d3:9d:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:50 2026 by rpki-client