Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier: tzUURc4u2MjJ8j+8bMYQRui7NSWUH/D9B60X7VsChzI=
Subject key identifier: 44:6D:49:F7:EE:AF:54:72:B6:8F:D7:A3:C0:A5:19:53:93:55:34:3F
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 019E2F965F5C471AC44940046CE432BEC8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number: 0E67
Signing time: Sat 16 May 2026 07:00:44 +0000
Manifest this update: Sat 16 May 2026 07:00:44 +0000
Manifest next update: Sun 17 May 2026 07:00:44 +0000
Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: 9eaLzItKG3bk4/ZDJNilcsfXucrFUETT0iu8JB03fcc=)
2: QtPhnyLsRRN8U6hpcPXp4Z0oWqY.roa (hash: i0nu2P6NxLQ5ERHa8d6GR72neeBYjpf7KkNPNvBe0Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:5f:5c:47:1a:c4:49:40:04:6c:e4:32:be:c8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: May 16 07:00:44 2026 GMT
Not After : May 17 07:00:44 2026 GMT
Subject: CN=446d49f7eeaf5472b68fd7a3c0a519539355343f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:4a:c0:e6:21:47:29:cc:ff:18:69:6e:bb:
c4:12:8d:8d:bd:5d:a0:39:d5:84:88:44:df:11:2a:
d6:a0:ce:08:4a:cd:83:2a:75:8c:8d:9f:c9:5f:59:
49:34:45:12:9e:8e:ff:79:8a:89:ee:a6:7f:b3:16:
a4:e9:82:d4:fe:e5:3b:40:f3:a7:41:23:6c:9f:34:
4f:f2:3a:05:5c:ec:b4:2c:bd:10:a7:f1:b9:4f:14:
78:d7:f1:28:cf:5b:ac:69:55:b3:5e:bd:2f:c0:08:
54:6d:f6:bf:f9:e0:41:85:bc:4f:91:84:2d:a7:85:
1c:c7:ef:c8:00:22:a4:38:ae:ea:4a:a5:bc:e6:92:
ac:57:2b:1d:62:9a:9c:65:10:95:ef:34:df:13:71:
bc:e5:97:70:c2:b6:64:52:0d:3f:70:52:d1:9f:59:
87:e1:dc:cc:e5:a1:cf:0e:8c:44:85:f6:4e:29:99:
d3:ab:d8:1f:b6:d9:b4:70:09:53:aa:c7:41:2c:ab:
51:af:1c:72:17:93:0d:7a:f7:8f:c4:c2:d0:b3:fe:
47:16:aa:86:90:5d:9b:60:b7:4a:64:30:d9:ab:1f:
aa:c8:8a:5e:7a:2c:5e:e4:ee:5b:eb:2d:5b:0c:32:
e8:a8:e1:e5:3a:81:78:21:44:d7:db:33:35:9e:f9:
d8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6D:49:F7:EE:AF:54:72:B6:8F:D7:A3:C0:A5:19:53:93:55:34:3F
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:45:bf:9b:d3:e2:08:fb:c7:00:86:0f:48:34:3b:78:fb:f9:
af:b2:31:5d:fd:e0:0c:3e:39:43:cd:64:42:3c:5c:02:14:f0:
41:ab:4a:8b:15:51:bb:5b:f1:ad:c2:2c:39:d8:9a:c0:1f:e8:
ab:ae:c1:da:88:c3:b9:37:5c:a6:d1:1a:3c:c1:16:d6:90:4f:
6c:b6:f5:94:3e:b6:ad:f0:89:ca:d8:9d:64:ef:fb:ae:77:b4:
d8:14:b2:c1:0e:75:85:00:8a:e1:77:7d:09:23:67:48:80:5a:
9f:67:81:c4:df:9c:83:77:81:ca:19:1b:1d:1d:03:b7:39:64:
71:7b:4d:99:f0:1c:5f:1c:02:d7:2f:8d:56:e1:c2:20:fe:01:
0f:cb:91:78:05:b8:db:2e:6d:a3:f1:9d:d4:8d:f6:f2:c4:32:
05:3e:60:33:e3:e3:b3:3f:f1:0d:b1:dc:24:f2:16:c1:61:d7:
78:0b:77:6b:fe:b9:18:a4:a6:07:b1:58:74:c0:8b:8f:a0:5e:
ac:19:28:7e:b3:b3:cb:38:39:01:9f:53:60:42:cb:73:d8:73:
b9:69:f4:8b:97:7f:72:7f:9d:6d:1c:c0:58:92:ab:ce:3c:94:
fa:1c:e8:9b:c6:5a:eb:82:64:b6:29:f1:4e:14:ac:90:64:7e:
f9:0b:3b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:47 2026 by rpki-client