Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: w6Y0EnDP6ns46JagTu5gti3shHMBhy76PP70vV/MuTQ=
Subject key identifier: E6:2D:DF:65:0D:96:90:A4:E3:EE:DF:23:09:06:CE:4D:8E:02:70:04
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 019E2FCD8EF0E55D130670358F28AE162DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 1621
Signing time: Sat 16 May 2026 08:01:00 +0000
Manifest this update: Sat 16 May 2026 08:01:00 +0000
Manifest next update: Sun 17 May 2026 08:01:00 +0000
Files and hashes: 1: 1eykC-2BnVsWo7Ye-BCUzkQkUoQ.roa (hash: XORzzia+v0TQle6S3eSeTmbfXijHFXJwl9VwUUmAcRw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: vsC1BnmbrlYlnuPM5ZbHQm15HyZUZHkXb//BT/fChxI=)
3: NJ7RBZaPFrtdiuUdVgaQ-xGvohc.roa (hash: 3elpIcyAaRbsEU++I8EIRcmrePMiDX7Ycf8Xs+7sNy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:8e:f0:e5:5d:13:06:70:35:8f:28:ae:16:2d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: May 16 08:01:00 2026 GMT
Not After : May 17 08:01:00 2026 GMT
Subject: CN=e62ddf650d9690a4e3eedf230906ce4d8e027004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cb:30:9a:ac:4b:47:4a:8f:f9:28:3e:01:cc:
c8:85:02:a0:03:c9:37:6f:4d:58:04:6a:9e:64:d3:
5d:d3:9b:98:5e:5d:5d:78:51:b6:98:d7:9d:f9:93:
f6:e1:38:7a:17:7f:53:00:26:db:70:d9:c5:66:bf:
f8:99:92:36:94:26:97:fe:72:e2:a9:ea:c7:79:34:
4f:b3:0e:87:20:5b:e6:f4:e0:e7:ec:91:84:4e:c1:
19:c8:e3:2a:bb:4a:d2:b8:0d:16:c6:33:39:41:b3:
b4:53:88:3e:33:e7:9a:5c:02:a7:80:b7:c7:d3:04:
85:fc:fe:1a:7e:1f:9b:0d:2d:7f:e5:e6:f1:b0:97:
ba:29:5d:7a:50:90:0d:6f:37:45:3f:90:7c:c7:18:
fa:de:cc:3a:26:e5:f9:92:5e:a2:d6:4b:61:ae:00:
2e:b6:85:cf:e4:03:04:cc:13:68:99:38:ef:55:94:
9f:27:8f:2c:80:a6:7d:50:c5:99:eb:5c:f9:db:7a:
57:d5:75:1f:bf:be:a2:27:8b:e2:50:28:e8:7a:95:
72:33:d7:35:2d:5a:1c:37:c0:a6:d6:0e:e3:93:4b:
6c:75:f1:87:cd:b2:a8:cc:f8:db:74:13:dc:5b:0e:
e4:0f:5f:07:89:31:ec:8b:91:95:01:a9:0a:16:a8:
df:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2D:DF:65:0D:96:90:A4:E3:EE:DF:23:09:06:CE:4D:8E:02:70:04
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e9:3b:98:06:9f:98:4b:e5:eb:2e:8a:83:7c:58:c6:40:fb:
79:93:c0:0d:ef:c5:82:36:0e:a9:27:58:f4:92:2d:cc:9e:39:
f0:38:46:22:e6:d3:97:d4:c9:6e:8b:4d:d0:1a:fa:f3:c6:06:
7e:42:49:46:c5:60:b9:e2:9c:44:01:c9:7d:44:15:79:81:a2:
ee:0b:e9:cd:67:cd:d1:e5:43:4a:ba:36:17:7e:15:f3:91:18:
6f:1b:90:f0:aa:1d:6a:59:5a:0e:3f:97:67:5b:75:65:ad:d6:
c2:1b:a6:9a:23:49:a1:49:42:ff:17:2a:96:04:fc:ce:07:16:
48:ee:89:3b:17:4a:9d:bf:97:ff:1f:76:1d:87:3d:e9:40:68:
d8:62:c5:59:0e:b2:70:6e:1a:a2:fb:bf:25:16:c9:b7:dc:c1:
fa:ed:60:58:c7:6d:83:77:7a:59:2b:cf:a5:cc:98:30:99:87:
3b:43:2d:06:be:f1:99:98:d8:0d:4b:c2:6c:6f:06:ef:12:70:
91:17:35:82:21:fe:f4:59:d1:ab:c6:f1:66:17:77:dd:39:a9:
7f:60:24:84:4e:e2:25:b1:2f:3a:55:50:71:de:fb:75:56:74:
8a:ab:78:f3:ee:b7:0a:1d:bf:56:63:73:24:fa:d4:67:cb:d1:
6c:fb:d1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:26 2026 by rpki-client