Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: P32GbJ9u0ejFwWSTzflFtHhe3NcnOQI8jJsXX2gek5A=
Subject key identifier: A5:10:67:F4:DF:FA:C3:7A:F0:1C:13:F1:9C:55:F6:65:AD:D5:1D:BE
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 019E1EA36D900A4ED4120BC09C02B382FAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 0CC1
Signing time: Wed 13 May 2026 00:01:27 +0000
Manifest this update: Wed 13 May 2026 00:01:27 +0000
Manifest next update: Thu 14 May 2026 00:01:27 +0000
Files and hashes: 1: CWBx_YaW55wp0Q8nHPmUDJfmm9g.asa (hash: sICMwCqCa7TLjDMZRJ5VqSQf7cfIQN96H4gFU0ZqRjs=)
2: a3t44Injkb3R_GXSuc0dS5CiLrY.roa (hash: zbUvHz7MU2Z+aJkIb7Yi+6/dp3AtOWPuD0S1MFlgedM=)
3: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: NKMoT6KtpcfDp6tg4QvKfxj3duXUM6DZIsubPoxPwdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:6d:90:0a:4e:d4:12:0b:c0:9c:02:b3:82:fa:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: May 13 00:01:27 2026 GMT
Not After : May 14 00:01:27 2026 GMT
Subject: CN=a51067f4dffac37af01c13f19c55f665add51dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:06:76:c0:18:02:50:cf:e4:50:23:89:bf:3c:
b9:57:b7:10:28:d3:c2:bf:13:ad:ba:4a:09:ca:1b:
35:00:4d:6d:5a:ff:f8:9c:7f:c0:10:4b:65:eb:b9:
1d:3f:25:10:03:8a:5a:dd:d5:a5:86:ca:29:94:bb:
17:a2:5f:c5:c1:64:0c:09:e5:db:85:3a:4e:38:58:
b2:40:1c:d2:ba:a0:13:bb:b8:4e:4a:03:ad:1b:a2:
9c:e0:70:38:8f:82:9e:b5:ef:90:6b:b9:e0:78:de:
98:d6:47:c9:68:92:a5:f5:9b:59:2e:7d:9f:18:88:
05:41:ed:ea:0b:66:2a:f6:a6:3e:5b:5e:d1:6c:5b:
ff:1a:56:18:47:a0:ce:80:b7:fd:ae:bd:d3:6e:60:
86:68:91:0b:b7:94:95:c7:df:80:91:d6:f1:1c:30:
0d:e5:11:09:a4:68:30:ad:76:ad:76:8e:db:b3:3a:
4b:3a:66:e1:35:c1:c1:5f:c9:99:26:e3:a8:14:48:
ae:ce:62:02:e2:1b:c3:ea:5a:12:db:cc:4e:f7:cf:
f9:7d:a4:57:45:d3:08:7c:15:61:bb:75:0f:46:ad:
b4:3d:61:d6:2b:10:e1:d4:f6:3f:4f:3a:be:66:b1:
cf:99:55:64:fb:7b:cc:0c:46:3a:57:93:a1:ec:ec:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:10:67:F4:DF:FA:C3:7A:F0:1C:13:F1:9C:55:F6:65:AD:D5:1D:BE
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e3:25:d8:2b:f5:90:fb:3d:2a:f5:19:0a:43:2f:5e:56:88:
f1:45:ea:50:c7:e9:cb:47:6c:ff:3e:8f:79:a3:e8:63:2e:c1:
37:a4:60:5b:0e:68:ec:a5:5d:50:6e:ee:ee:65:71:fb:e3:68:
46:0b:8e:62:46:72:1d:4f:ae:5f:9c:ea:66:eb:53:2e:d1:f0:
32:55:3b:6f:5e:10:9e:2c:4e:1d:7f:df:c7:8f:d9:88:28:de:
ae:4c:9f:e4:54:c4:46:77:2c:56:08:4c:5a:37:98:e3:be:47:
ee:2d:5b:2f:37:ba:74:9b:7b:1a:20:23:16:21:b5:16:d1:df:
46:ed:d5:2c:a8:7e:b0:12:b0:c4:7b:53:b5:99:ba:04:57:db:
e7:e2:51:fb:36:1f:2d:35:68:91:38:f7:c0:88:d0:80:64:f9:
ab:cd:df:0c:ff:a8:da:da:4e:5f:b8:0e:a7:1c:2b:84:65:f0:
ae:70:90:61:26:f3:8a:b7:3a:44:d3:dc:0c:d4:73:b6:c7:9f:
bc:f3:3a:b5:fa:dc:e0:b5:d9:f6:4d:66:7d:10:43:c5:86:6d:
7f:1a:92:6e:66:13:86:de:3b:d1:29:09:02:3d:e3:79:67:fe:
88:a8:62:c0:32:d1:49:6c:90:af:84:35:81:c1:dd:ee:a2:64:
e2:fc:2e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:46:50 2026 by rpki-client