Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File: 4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier: GBbov46ex5qtzpvx2VqHJVvcCL5IedWeCDa5h0MjZ4I=
Subject key identifier: 23:C1:E4:76:70:23:54:2C:34:3A:56:0B:FC:A1:4B:87:79:6C:3E:8D
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 019E314DBAA81E8B22D580C8D057F987E24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 15:00:37 +0000
Manifest this update: Sat 16 May 2026 15:00:37 +0000
Manifest next update: Sun 17 May 2026 15:00:37 +0000
Files and hashes: 1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: NT/BxlxJzE1i/Z3AYFVQcW4tLcN6tdezcnfdb3TavU8=)
2: Dv6DzYWC8QD9B_MZto_ESNK4j6k.roa (hash: punip1kHRpKApQYHrsUHwLPlb8qszTQ5w8o2U1ESN+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4d:ba:a8:1e:8b:22:d5:80:c8:d0:57:f9:87:e2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: May 16 15:00:37 2026 GMT
Not After : May 17 15:00:37 2026 GMT
Subject: CN=23c1e4767023542c343a560bfca14b87796c3e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:50:79:26:81:43:b2:aa:09:76:dc:2f:91:
f7:65:27:df:b1:22:24:49:ba:51:f9:85:2b:56:9c:
6b:46:f5:04:92:d8:f9:71:4c:d7:81:c4:7b:30:b2:
d7:04:64:62:9a:f1:1b:8f:b7:6b:c8:50:90:da:5f:
5e:8e:23:d1:e6:ac:04:63:a3:35:8f:3a:ba:be:cd:
a2:f9:94:2f:63:f3:ae:44:21:37:29:a3:13:ba:08:
8a:15:83:0a:57:7e:18:3d:12:3c:3d:64:fa:c6:e2:
c8:37:0e:43:62:c4:bd:30:b0:63:4d:fe:f1:c3:d8:
44:a8:84:91:43:74:ac:4a:8f:34:7b:77:98:dd:50:
6d:c4:9c:3b:40:e0:66:86:a4:e2:d4:a5:26:2a:19:
9a:f7:1a:f8:ec:c7:15:a3:79:29:72:54:a8:3d:a2:
df:c6:f4:8e:96:a5:85:62:01:22:57:8e:f3:0e:9a:
88:50:f3:1e:b1:ba:c9:58:b3:ad:63:86:c3:f3:a7:
2c:66:da:ce:61:39:a0:51:c8:dc:f3:7e:05:83:3a:
de:61:19:48:a9:54:90:9a:cb:22:d3:b4:ad:8a:98:
f5:e6:3f:62:41:47:6b:7c:ac:c5:2d:e1:f5:7c:28:
0a:7c:e8:7b:f9:d6:2f:2a:af:2b:dd:41:e8:aa:51:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C1:E4:76:70:23:54:2C:34:3A:56:0B:FC:A1:4B:87:79:6C:3E:8D
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:05:37:47:15:0e:d9:3c:0a:77:6c:67:aa:a9:aa:a1:00:36:
4b:7a:a6:aa:30:eb:61:7f:58:97:0c:78:e8:0a:dd:74:5b:b3:
c6:42:b2:a2:2a:00:eb:e8:da:91:3f:9e:d8:be:22:5a:ae:14:
68:c9:45:a3:61:59:ac:a2:ca:ee:d3:22:70:6a:11:ab:18:5c:
23:2b:3c:35:41:aa:79:ad:6b:55:fc:6f:34:1b:79:fc:df:24:
31:94:76:36:c2:84:28:a5:73:c1:a8:90:05:4d:90:72:58:e6:
11:f9:2e:cc:3e:51:55:ad:ac:f1:f4:c2:b6:05:9a:d2:69:6a:
41:db:cf:b4:50:e5:88:7d:31:66:dd:75:00:53:8a:26:da:f7:
20:6d:3a:25:c1:5a:f4:64:67:16:9f:21:73:35:4a:97:be:fb:
8c:37:1d:23:cb:e8:30:e4:6d:d8:8b:37:87:8c:31:d6:8e:d6:
e2:35:38:13:ce:e1:cb:25:2b:0c:1e:98:71:09:1e:e1:03:0b:
17:c8:1f:bb:ed:1b:21:0f:58:be:65:e6:18:11:64:6f:a6:0e:
38:c5:91:40:59:69:a3:57:ea:ed:be:c4:48:86:8e:c7:3b:dd:
d1:b8:c5:31:a7:17:75:70:5b:cf:db:87:ec:c4:39:08:46:44:
19:6e:6f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:07 2026 by rpki-client