Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: PL1GlghYDLxj7PMFLa1vIMTSZsReSHaNvrnfKjT21OU=
Subject key identifier: 78:88:81:D6:9E:70:F5:37:76:DF:2B:9B:5D:4F:00:4F:0C:04:D2:8F
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 019E314E55F363D85C1B4C6F2F623DBA52B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 0D3C
Signing time: Sat 16 May 2026 15:01:17 +0000
Manifest this update: Sat 16 May 2026 15:01:17 +0000
Manifest next update: Sun 17 May 2026 15:01:17 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: BwOYfgbDZIWA2OyeQM0y5XLV29UuXZFh1EZ8bhh4UvU=)
2: 6c0GmPSIo0E5XPLL6BcvGXFoeoU.roa (hash: XKGNTxIctVAHlMjqMo1n+V2kjvQsJG2Ze8aGQf0oQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:55:f3:63:d8:5c:1b:4c:6f:2f:62:3d:ba:52:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: May 16 15:01:17 2026 GMT
Not After : May 17 15:01:17 2026 GMT
Subject: CN=788881d69e70f53776df2b9b5d4f004f0c04d28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:8a:f0:52:75:ac:b6:f0:78:fd:ac:ce:f1:
5c:aa:29:82:f7:c1:f3:68:21:40:a6:a7:7f:23:ff:
6a:79:af:64:06:ed:cc:32:8c:39:7f:a4:cf:38:6c:
45:b9:5e:84:12:d0:42:14:9e:ff:06:23:a6:66:0e:
da:15:5e:c2:0f:ab:63:72:da:c7:35:a0:fa:3c:6b:
c6:8f:2b:fe:99:a6:ef:8f:3a:0a:dd:d9:3b:8b:db:
3b:9c:08:30:38:10:ae:1d:dd:5f:41:6b:d8:4f:73:
7e:ef:0d:32:2d:34:07:5b:85:29:fe:db:39:cf:54:
06:f0:2e:91:81:c1:0f:96:d8:f5:02:9a:dc:ec:c8:
0a:b0:41:c4:97:3c:a6:d6:c0:4f:c6:64:1a:ef:bf:
75:f7:62:77:f8:36:15:9a:58:d9:38:0b:34:94:0c:
1b:3d:81:cb:78:a5:e5:f8:2f:69:51:89:de:c5:03:
e3:ac:f8:4e:87:3e:14:80:0b:5b:ce:ff:74:9f:60:
c4:cb:60:d3:1c:2e:e2:74:0a:51:03:52:1a:57:dc:
f3:8f:80:d7:ca:95:fa:df:86:f3:c2:bf:af:db:d0:
0b:ce:33:74:01:ae:a0:c1:d9:42:5b:ab:48:4f:fc:
9f:8d:f4:92:c3:d5:e9:59:57:5f:c5:59:3d:3e:ac:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:88:81:D6:9E:70:F5:37:76:DF:2B:9B:5D:4F:00:4F:0C:04:D2:8F
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f1:1a:a6:6d:6f:87:b2:51:32:5c:71:10:da:dd:a2:5c:a7:
8a:35:89:53:ce:95:b2:6b:17:21:a6:14:95:2a:64:ce:f4:43:
c7:e4:fe:f1:8b:62:c1:74:7d:3f:70:96:ce:79:56:b3:13:90:
a7:29:04:d2:bd:62:d3:ae:fe:61:67:e2:38:fe:52:51:bc:3d:
38:a0:99:07:05:64:9e:28:8d:ec:d9:87:37:55:69:db:0d:2c:
74:41:b5:01:b7:8e:ed:cc:eb:8a:ad:de:70:76:7e:b1:f9:54:
86:f6:b0:54:ea:e3:4a:22:e3:63:36:eb:fe:13:8a:1b:85:5e:
80:b4:1a:af:57:1a:ef:58:83:6f:a5:cd:c2:5c:1b:51:48:43:
44:8f:f6:90:f6:f0:bf:c2:0a:62:86:f8:63:15:7e:3f:8b:f1:
70:4c:e4:b2:aa:56:11:c8:22:7e:05:21:a8:92:2a:5b:da:bd:
9d:f0:9a:18:20:00:87:94:f0:c5:02:c0:76:11:b2:90:19:b2:
0d:aa:8e:37:40:c4:9f:52:fe:a3:a3:79:ac:27:0f:1a:00:d2:
18:cb:36:8a:de:e7:ae:73:54:dd:49:1e:5a:cb:c0:30:41:99:
d2:4d:6f:91:ec:23:00:8b:00:35:f4:6d:c5:da:ef:c0:3b:df:
4e:84:e0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:04 2026 by rpki-client