Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
File: 4ucXSfgCklOQH3HUZBA56Q8al_o.mft (raw, json)
Hash identifier: 0a0zGjcrgvH7KaH/Ji1QcVLtDlI5KELy531ImTFHkIE=
Subject key identifier: 16:8C:36:3A:51:63:53:B1:27:15:46:98:BF:3D:C9:0C:4D:F9:DB:4E
Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
Certificate issuer: /CN=e2e71749f8029253901f71d4641039e90f1a97fa
Certificate serial: 019E1CB44DA0FE7DF70BEE8AA7A2142FE98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
Manifest number: 0129
Signing time: Tue 12 May 2026 15:00:38 +0000
Manifest this update: Tue 12 May 2026 15:00:38 +0000
Manifest next update: Wed 13 May 2026 15:00:38 +0000
Files and hashes: 1: 4ucXSfgCklOQH3HUZBA56Q8al_o.crl (hash: XYiE+zUgHW+lrNvOWM8Ihc7s5G/xa+vURC6PjUUhBpg=)
2: JcRsIAV11TxO42T56xBXGNtE8kc.roa (hash: 3pabyOSkwOQBV5aehMnDFgC88a6tehv2gFnKarnZZow=)
3: XbFlHyCBOID9fwZAWWJUvKR3I1U.roa (hash: d1XG1P6bU90g/zeLcvn00HiiT+uT6qBEWhZA1fPBjyc=)
4: ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa (hash: Ilz4iptmtb2hDf1QiYufOvE04YvbCXcLVA+AVaG4uKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:4d:a0:fe:7d:f7:0b:ee:8a:a7:a2:14:2f:e9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa
Validity
Not Before: May 12 15:00:38 2026 GMT
Not After : May 13 15:00:38 2026 GMT
Subject: CN=168c363a516353b127154698bf3dc90c4df9db4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:ca:20:25:46:02:52:2e:cd:70:09:45:5e:
ec:f3:f5:bc:6d:31:51:82:5c:90:4f:41:f5:a5:9f:
d5:9d:8f:4b:ce:d0:e3:95:29:de:cc:02:da:3f:18:
36:c8:b8:ee:ca:6c:0e:93:87:2e:2f:7c:3c:58:12:
1f:89:0a:1b:1c:ec:2d:79:30:61:78:49:24:b9:94:
81:e9:c7:b2:e3:bd:23:67:40:c6:42:a3:6f:6d:b0:
f7:d1:7e:f9:a0:d2:fb:4c:1e:96:6d:68:b3:6b:80:
95:83:95:94:58:ec:ed:76:e9:b3:68:76:74:25:0a:
01:44:85:5a:d4:f4:cd:e5:6c:c2:a3:39:04:32:2e:
2d:a2:9f:54:dd:fe:11:d1:32:5d:bf:e5:bf:ce:02:
5f:d8:f9:6b:81:14:f2:5b:75:fb:cf:5e:72:0c:cc:
95:72:3e:0d:25:7b:80:ac:00:27:20:aa:e2:9d:5c:
a1:bb:43:24:0e:50:7e:ba:52:13:cc:41:e5:e2:7e:
a4:1c:d5:8e:6b:7a:0d:25:ec:fa:ad:f1:4c:61:a2:
a0:af:5e:2a:28:26:e8:d3:19:a6:37:cd:b9:fe:bd:
49:12:7d:7b:eb:d3:51:f8:5a:4f:bf:23:b7:2a:35:
46:e5:d3:29:b3:9d:e7:90:ab:d2:94:18:27:1a:a5:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8C:36:3A:51:63:53:B1:27:15:46:98:BF:3D:C9:0C:4D:F9:DB:4E
X509v3 Authority Key Identifier:
keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:14:e0:e8:a4:14:30:db:97:f0:91:e0:f3:42:b1:c7:05:23:
8d:26:31:e0:62:48:f9:c6:98:61:62:94:c1:5e:7d:ce:da:65:
75:29:50:af:0c:b4:06:3b:ad:20:ad:bc:3b:3f:8f:23:b7:80:
4d:d1:04:40:c4:35:a0:12:4a:6a:d2:d4:65:1e:3f:7c:11:9e:
64:4a:e1:4f:0c:16:74:b4:31:61:fc:f1:ce:1b:54:51:4d:51:
62:7f:d8:22:f3:3c:14:3d:65:ae:2b:4a:db:d8:96:1a:01:1c:
a8:2d:b0:15:77:a3:90:20:2d:79:bc:90:91:c2:f5:8b:38:b2:
c9:66:63:32:35:79:5c:5f:86:ee:16:18:1a:df:cb:da:74:14:
7a:73:f1:e8:70:47:19:4a:fa:bf:9c:31:e1:17:68:5a:73:3f:
9d:01:3c:f0:cd:03:c7:7f:9c:25:82:b3:ce:76:e6:dd:fb:df:
fb:8c:bf:0b:0b:99:27:84:32:81:90:34:da:aa:0d:f8:db:71:
8b:c3:97:bc:74:49:37:bd:50:40:ac:1b:02:cf:f0:c0:8e:34:
03:29:56:4d:af:6c:01:1e:0f:59:61:7f:ff:0e:d5:fc:34:9d:
c0:8e:f4:6c:1f:cc:0b:0f:de:2e:3d:76:bd:88:3a:f7:e3:5f:
92:e0:42:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:46 2026 by rpki-client