Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: f0SntwmSb+mbBN4gSZWYlKWvCdkSLJfxq11m314RtnM=
Subject key identifier: 96:E2:EB:6C:A0:96:C9:E7:CF:5B:14:8A:85:6B:2D:FD:11:52:31:34
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 019E1CB48A0302C593DF45B5708C884F9CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 1910
Signing time: Tue 12 May 2026 15:00:54 +0000
Manifest this update: Tue 12 May 2026 15:00:54 +0000
Manifest next update: Wed 13 May 2026 15:00:54 +0000
Files and hashes: 1: 1-5V3M6zE3wKBEweDO-7_cCen51c.roa (hash: LwMI3fPGMvfyxbI/YBNs8zyBRZxgnVuUyiN/3FDRb40=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: RnpjGlWVcebiWQaNXq4STPiCcIOAENdO0OFNtHuoMLs=)
3: tJXMZewUy_qQorxapIfDeK0TRA4.roa (hash: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:8a:03:02:c5:93:df:45:b5:70:8c:88:4f:9c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: May 12 15:00:54 2026 GMT
Not After : May 13 15:00:54 2026 GMT
Subject: CN=96e2eb6ca096c9e7cf5b148a856b2dfd11523134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:eb:31:80:46:a1:8f:4e:b4:48:4d:a9:fc:f0:
8c:3f:a1:0c:1c:eb:aa:a5:89:b4:76:12:fe:f4:15:
d1:b2:ba:0a:e7:73:70:ea:51:e2:d6:08:87:fd:6d:
ef:32:36:e2:e7:c6:51:43:b2:9a:c6:c4:a0:69:af:
69:5c:98:03:07:98:ee:b2:51:15:6a:9c:a6:02:84:
ee:3a:fb:ec:25:09:c7:15:63:d9:06:16:0c:89:63:
c2:21:78:af:4c:55:bd:be:a6:b0:c7:f0:21:89:80:
df:d5:02:bd:58:0f:59:58:94:8a:83:74:69:8c:3f:
54:e5:97:fa:f5:aa:29:ec:f3:de:1a:d0:ec:86:81:
d9:a2:92:e4:45:bb:e6:50:ac:68:6e:09:7a:c4:ad:
b1:72:1c:b6:59:5c:38:6d:e3:b3:c9:bf:18:83:33:
ae:98:65:6e:d0:99:0d:e8:b4:94:76:cd:6b:8a:53:
9f:2c:04:b7:2b:26:ff:62:af:b0:01:61:3e:9c:54:
ff:b5:e0:89:3e:e9:e1:14:b2:53:3a:6b:76:a5:6d:
83:39:c4:00:a1:22:a3:3c:0b:dd:56:09:a0:99:e1:
0e:a1:07:8e:7d:12:1d:7a:e5:5e:15:d7:a4:9e:2f:
0a:9c:b0:8b:84:b9:82:fb:5e:48:73:3c:29:48:cf:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E2:EB:6C:A0:96:C9:E7:CF:5B:14:8A:85:6B:2D:FD:11:52:31:34
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7f:c1:95:6f:6d:1f:75:2d:48:b6:b4:f5:0c:eb:e1:b6:3e:
b1:87:26:d3:0d:6f:be:d2:80:55:a0:da:27:d3:f7:49:3b:f1:
b1:c5:15:bc:08:f3:28:15:81:f2:94:a2:e6:2b:28:1d:9b:67:
0e:5b:b9:52:74:48:ef:7a:1a:39:ad:3e:d8:97:dd:45:e4:9e:
2e:b1:84:1d:02:16:a2:9b:ba:8b:1f:d8:c9:29:b1:d7:9e:93:
ed:0d:ab:fa:4e:77:81:75:4a:31:3b:64:5d:a6:b4:44:6f:e5:
06:ab:2d:b3:25:41:af:cb:97:78:47:53:a8:f7:d4:a2:64:d4:
be:e5:30:64:34:4b:ab:36:a7:ea:c0:95:61:3c:db:9b:fe:e7:
a4:fc:a7:69:df:1e:3a:35:b2:22:4b:04:61:09:8a:df:e0:82:
ba:f8:af:22:76:fa:a4:b3:b6:49:3f:7b:97:22:73:82:a3:09:
d4:26:e1:40:e9:90:2f:bd:5f:dc:fb:81:15:a0:24:23:52:0c:
ae:7d:11:04:2f:31:39:8d:57:f1:72:f6:93:46:f3:df:21:6e:
89:7a:c3:dc:32:01:30:65:ee:34:fb:ae:60:fe:ae:1d:29:9e:
1e:4c:76:06:f0:90:d7:d7:12:bc:63:bd:9e:ab:65:bf:06:98:
46:04:fa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:16:38 2026 by rpki-client