Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json)
Hash identifier: 3IlEosaCGWYmNGZiMveBaUKgFCInmQvtT+8LLIhkd9A=
Subject key identifier: 8D:A1:A7:1D:BE:7C:A5:16:22:B4:11:F4:24:75:88:E3:96:4D:05:38
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 019E3004751B3E3B6F56523B6F6DE26EFDA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 09:00:58 +0000
Manifest this update: Sat 16 May 2026 09:00:58 +0000
Manifest next update: Sun 17 May 2026 09:00:58 +0000
Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: B+2bB90lEjwUjugwpBZj2QoEWUVhJRWGl5lcKyvbt4k=)
2: CTp1GS2fYaQIruu9tWpwYU6UL5U.roa (hash: 1woVFgn9dNEGbuwWBJn4MG4ChUl6MAOmb6s5dU16yL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:75:1b:3e:3b:6f:56:52:3b:6f:6d:e2:6e:fd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: May 16 09:00:58 2026 GMT
Not After : May 17 09:00:58 2026 GMT
Subject: CN=8da1a71dbe7ca51622b411f4247588e3964d0538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:52:29:7b:3b:d2:9a:93:4f:29:24:9a:b5:
1f:f2:89:07:3f:d1:af:1b:26:ee:c1:fd:b1:49:ed:
51:cf:7b:e8:d0:1a:ec:9d:27:c9:32:8c:32:f0:17:
58:fc:98:72:b1:2f:4e:ad:c9:44:32:8a:bd:0b:f7:
da:a4:26:c7:ed:3a:61:19:2a:99:a7:e3:f2:0c:36:
dc:c9:56:c4:a3:26:56:f5:39:a6:a0:59:ff:66:72:
3b:e2:37:de:f8:d0:22:86:a7:31:17:f8:5a:df:d1:
d9:ec:78:a5:4e:33:0d:61:8a:7f:3b:e0:6a:dc:4c:
9b:79:e5:e6:fd:92:3e:75:26:ed:3c:b6:00:29:39:
df:d6:9d:53:d2:16:28:63:37:77:d0:cc:07:7a:20:
67:b2:9d:6e:94:94:ce:d2:3c:9a:93:83:92:1c:0a:
74:eb:d8:3b:7b:a9:c0:c2:cf:da:8c:09:cb:9c:58:
1b:65:29:df:18:e4:b2:9d:a9:fa:09:80:a1:ce:1f:
44:9e:ee:33:f4:d6:9b:ce:8b:23:7b:4c:23:d3:d7:
0f:46:9c:33:84:e2:81:e5:3c:e7:ac:3b:01:86:cd:
db:de:36:2b:b5:c8:6d:0d:16:eb:c6:e2:df:9e:c4:
4e:4b:eb:d6:ce:69:d4:e7:3b:f7:93:28:2f:8d:c1:
4e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A1:A7:1D:BE:7C:A5:16:22:B4:11:F4:24:75:88:E3:96:4D:05:38
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9e:b1:65:65:84:51:bb:19:97:3d:e8:a5:5c:61:9b:3f:24:
61:79:1b:8d:a6:e4:07:ba:e4:15:7c:f5:56:84:d8:d9:86:aa:
7d:4a:70:76:03:8e:9a:ae:e9:76:75:f5:22:05:44:4b:1c:21:
65:1a:94:e3:af:25:41:3c:7b:36:76:bf:fe:2d:21:a4:72:c5:
f9:55:90:12:a2:b2:01:35:df:bd:8c:fe:6f:98:ef:b4:a3:7f:
ee:93:1d:43:1c:48:ce:cf:43:f7:a7:c6:78:dd:b9:11:3c:ca:
77:e2:b0:b3:9d:a7:57:d4:bf:c9:65:0c:13:e2:b0:27:2c:3e:
f8:8d:74:c5:31:6f:28:72:07:6d:d8:c7:a8:6c:fb:55:34:24:
f5:ea:00:40:b4:3e:aa:24:e2:16:49:dc:64:b5:76:cb:f7:ea:
09:ab:e6:a6:2a:cb:9d:18:c3:68:bc:20:1d:24:16:b8:db:7b:
8b:a8:b8:4d:07:2f:a7:11:c5:11:c5:3d:ae:18:59:d2:7d:7a:
b0:62:df:db:83:b6:c3:37:c2:97:3e:16:1e:46:31:71:13:48:
4d:16:ea:90:86:bd:b7:a9:ca:ed:73:93:00:f8:fd:bb:e0:4b:
8a:f3:c9:62:ac:c3:2c:32:02:9a:5f:d2:6f:d4:fb:e4:e0:63:
43:93:1f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:04 2026 by rpki-client