Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier: q2oKYwlTW2tAGk+uMj+PlvzJBMQnZnOzUiclA6R1V9Q=
Subject key identifier: 7A:A3:38:7E:31:6D:D3:D1:E9:EE:DE:E7:8F:E1:1E:55:CA:0B:5C:28
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial: 019E1CB508C56AAD9ECF1B7C53A3BE2115A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number: 1786
Signing time: Tue 12 May 2026 15:01:26 +0000
Manifest this update: Tue 12 May 2026 15:01:26 +0000
Manifest next update: Wed 13 May 2026 15:01:26 +0000
Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: svfNA3DK2QWYSB/OpxT9kTVklHWqMNa2zYECcb1rxoo=)
2: wxMlSMWtQ0ndBMMV3tfXfzI4pMo.roa (hash: Cum4Di2WX2Vf5OYvq7GxldvC9jsMY0qM5fo7QBzndMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:08:c5:6a:ad:9e:cf:1b:7c:53:a3:be:21:15:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Validity
Not Before: May 12 15:01:26 2026 GMT
Not After : May 13 15:01:26 2026 GMT
Subject: CN=7aa3387e316dd3d1e9eedee78fe11e55ca0b5c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:46:4d:89:a3:dc:27:fa:de:f5:78:8a:71:
ae:8d:23:65:89:28:36:9e:1c:5a:f5:45:16:14:36:
b4:42:16:80:c1:cc:6a:94:fe:f0:81:20:cf:00:b3:
f1:28:47:52:44:47:5b:c1:90:16:29:23:df:2e:6f:
91:29:5c:fc:56:85:c5:fe:0f:88:e1:ef:4b:72:30:
82:1b:7f:86:e1:9e:ed:fc:f1:f1:64:41:69:86:73:
9f:60:e5:9a:16:cd:8d:37:ca:d2:e6:53:06:98:a1:
ee:02:1b:08:a0:f3:89:00:b4:ab:3d:f9:de:70:fb:
54:a5:d6:15:df:f9:de:52:16:bb:df:3d:c5:49:ec:
ce:42:0d:2e:f7:57:d4:2f:0d:46:8c:76:fa:27:2e:
90:8a:3c:8b:b7:dd:b0:fc:10:a5:e0:fc:4a:5d:8c:
25:77:4f:0d:c8:23:d5:3f:92:ea:f6:32:68:47:e0:
53:bf:56:8a:0e:40:da:c0:a2:b1:49:a8:20:37:6b:
8d:a0:c3:4a:e9:10:2d:f8:28:2c:42:91:2d:3c:3d:
73:97:2e:ca:be:fc:77:0e:c9:ae:66:eb:ae:0a:70:
2d:48:ae:84:1f:1d:7b:d9:a2:3f:40:db:46:30:44:
62:60:93:a3:f1:7d:00:6d:cc:2e:3f:71:59:24:78:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A3:38:7E:31:6D:D3:D1:E9:EE:DE:E7:8F:E1:1E:55:CA:0B:5C:28
X509v3 Authority Key Identifier:
keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:78:74:25:39:5b:07:68:2b:f0:73:34:54:53:a8:ca:71:72:
1c:2d:6e:3e:42:b0:69:98:19:02:dd:cf:24:77:9f:e0:a6:69:
f8:5d:3e:d6:a1:70:ac:c8:81:f4:b5:67:b3:33:59:65:5b:32:
5b:fa:5d:1f:4c:de:33:60:01:99:18:94:ae:0a:5e:7a:24:34:
25:3e:59:83:fc:28:5c:93:26:39:33:b9:e7:77:3d:62:ac:b5:
3f:c5:01:c1:4b:f0:e8:c7:38:95:ea:0d:f8:cd:53:93:d8:43:
a7:3a:28:79:da:50:ad:b8:bd:f8:75:f3:7e:db:00:6a:09:6d:
c0:31:fa:28:00:1a:b7:cb:ac:a5:64:5d:66:a6:4b:97:70:85:
c2:01:17:8f:b1:03:b4:1d:ee:19:6a:14:eb:b2:95:ee:e6:e1:
91:8b:78:7c:18:60:34:13:dc:8d:87:27:8e:ac:b4:23:59:4a:
bf:6e:64:2c:ed:b3:23:96:a2:b2:75:bb:15:7c:b2:5a:26:19:
0c:76:e3:78:30:63:f2:2b:63:02:97:d6:f9:2d:16:a9:ed:13:
bd:d4:44:77:e4:a6:be:88:b2:81:d4:7b:9b:7f:9b:a3:60:95:
bb:a2:ea:c1:06:5a:6e:51:87:92:73:08:6b:38:af:59:75:db:
9d:c3:f1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:25 2026 by rpki-client