Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: NR8GmRYRL7lTurtmPdLV9v+kfcSAiD7DCa8YmjbTuFA=
Subject key identifier: DA:43:B8:74:FD:02:73:EA:26:E2:F3:5B:29:5A:05:AA:B2:59:42:F5
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 019E1EA382D0DBAA916872806694B07E6B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 00:01:32 +0000
Manifest this update: Wed 13 May 2026 00:01:32 +0000
Manifest next update: Thu 14 May 2026 00:01:32 +0000
Files and hashes: 1: BvnR5KCMhsoLCz2hSAnbNfkHGk0.roa (hash: hDwrjYY17s8gLiCt6EYouA8sleyAadnkSLPmIcLH8nw=)
2: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: QQnYa1Y6W1/bDoIZhjrW/QvmEcjhzEAY+m1GFIT3si0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:82:d0:db:aa:91:68:72:80:66:94:b0:7e:6b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: May 13 00:01:32 2026 GMT
Not After : May 14 00:01:32 2026 GMT
Subject: CN=da43b874fd0273ea26e2f35b295a05aab25942f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bc:3b:40:9a:42:4c:34:95:95:4a:fb:a5:4e:
01:5d:81:1a:01:69:81:6d:84:90:91:cd:03:05:25:
d6:4c:49:4f:80:64:22:b6:0e:d8:b1:eb:ba:3f:55:
49:22:7e:6b:56:7d:18:f0:4a:31:bc:c1:8e:b1:57:
95:2b:ac:91:6a:ff:47:50:8c:c7:3a:e3:38:be:50:
17:3a:fc:63:75:c9:9c:93:63:2f:49:7c:d4:83:e5:
63:42:48:51:58:86:6e:fb:75:3a:28:56:a2:b8:bc:
50:d4:cd:93:8e:90:03:38:b7:17:e6:22:5c:44:c8:
e9:16:a7:df:7e:71:0b:b6:38:29:3a:9b:7c:78:0f:
78:2f:6f:80:7b:83:1c:9d:20:57:19:d3:a4:c7:55:
0d:03:6a:e6:be:18:1f:a6:3e:9b:4d:55:d9:62:b8:
5a:02:c6:93:e7:e2:68:a0:47:11:88:24:c9:de:15:
d6:43:22:46:78:75:56:9a:6f:dd:4b:92:4c:09:fd:
20:dc:6b:24:22:52:16:59:f5:7d:a8:47:6e:fb:e0:
08:00:6c:62:30:e2:02:2f:c7:f0:c1:54:fb:fb:1d:
19:78:7c:f4:b1:48:ff:d9:3b:4c:72:cd:b8:83:17:
da:45:a0:d1:7b:70:b4:a2:12:fd:79:ee:8a:04:95:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:43:B8:74:FD:02:73:EA:26:E2:F3:5B:29:5A:05:AA:B2:59:42:F5
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c7:72:74:d5:26:fc:2f:53:dc:23:5a:7f:31:1a:d6:3c:b1:
6e:7f:4b:39:bf:77:9a:74:24:c4:60:4a:ba:f8:89:d3:bb:ec:
3b:71:2b:e1:14:58:18:d2:45:64:be:89:11:7f:0b:21:a5:79:
c8:15:0a:a3:0b:0c:55:6b:8c:f7:1b:ad:89:51:80:ba:52:55:
aa:e7:17:ab:1e:ee:aa:67:fd:44:bb:9c:3c:84:84:ee:f4:95:
9c:bc:35:68:4e:8d:92:96:f3:8e:b4:21:4a:8c:95:fe:34:ad:
ca:9e:c3:ba:51:ec:d3:43:0d:ca:30:45:b2:2a:50:43:0a:63:
a7:65:42:b1:4d:26:6a:67:1d:ab:ad:31:94:e6:12:da:b7:29:
a0:83:ac:d5:3e:12:d8:d4:e4:14:1a:7e:af:d7:fd:f7:9e:ee:
83:96:cb:2b:b6:77:30:d3:be:fa:e1:c9:d6:5f:53:e6:40:13:
73:cc:86:78:41:69:9c:6e:27:47:c9:1b:f6:f1:b2:fd:d4:35:
f5:73:ac:37:6d:39:61:18:f0:5a:46:63:c1:b0:dd:d6:ff:0a:
f5:12:b4:81:87:32:e6:f9:b8:77:4e:60:74:ed:20:fe:38:28:
f5:2a:5d:dd:6e:54:45:e5:e4:dd:0d:25:35:38:6e:4c:c5:81:
d6:9d:db:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:20 2026 by rpki-client