Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
File: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft (raw, json)
Hash identifier: wRSxzRylcZrgvFzAYGrDxhbE+LOITbVMp9XSoYVdoX4=
Subject key identifier: 7D:69:E4:E0:13:73:F9:49:EC:93:C1:59:33:E3:1C:02:C2:E7:8E:4D
Authority key identifier: D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
Certificate issuer: /CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Certificate serial: 019E299488C5F40D4F7B1DA53FBB431D41E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
Manifest number: 8A
Signing time: Fri 15 May 2026 03:01:00 +0000
Manifest this update: Fri 15 May 2026 03:01:00 +0000
Manifest next update: Sat 16 May 2026 03:01:00 +0000
Files and hashes: 1: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl (hash: PsjKXBoDWNbgDyb7pmGmfSmY/6EVYvPYbRGDulvGzr8=)
2: z5djvf3-CKw5x5kwKKqaRZmCe2I.asa (hash: ZvW8uuufeamy31o99OQxuIpFF7lTKfAP5mzTU9+Pnks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:88:c5:f4:0d:4f:7b:1d:a5:3f:bb:43:1d:41:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Validity
Not Before: May 15 03:01:00 2026 GMT
Not After : May 16 03:01:00 2026 GMT
Subject: CN=7d69e4e01373f949ec93c15933e31c02c2e78e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:2f:c1:ee:a2:87:7e:4f:cf:e2:2c:12:90:
0c:5a:8d:0d:a5:80:ca:7f:0a:97:0b:b5:e2:a0:1b:
29:f1:50:fb:87:74:f7:bd:ea:db:1f:b6:04:43:6e:
61:f4:77:43:f6:ff:ff:71:d5:36:67:f4:62:ca:14:
dc:ae:7c:59:60:e6:1d:e3:2e:b3:2b:fe:7a:c1:d4:
24:0e:e1:48:9f:89:1a:19:38:41:98:5d:46:6a:a7:
ec:6b:35:ce:ec:87:e5:b7:a8:b4:35:83:55:dd:d3:
b4:55:66:bd:a0:fa:f3:b2:a4:64:b5:93:db:d3:2d:
5b:33:d8:1d:7d:79:20:c3:6d:e3:81:d0:01:84:7f:
73:51:58:d8:c1:14:ab:40:91:e6:8a:2d:d2:60:82:
82:49:d9:9e:45:00:dd:b7:df:36:ab:bc:92:9b:7d:
6a:61:34:ad:5d:18:d7:20:96:43:89:9d:d2:47:c6:
28:92:07:6d:b2:e1:ee:68:f6:8e:d3:0c:02:f4:55:
ec:85:34:20:4f:7e:12:62:b5:43:28:48:63:56:e7:
f1:96:be:95:97:91:e6:3b:36:35:bd:e5:00:60:3b:
55:7f:d6:1c:4f:07:ef:47:b6:7b:a5:de:50:02:ec:
58:4c:1e:34:46:de:e9:a1:49:63:4f:2f:aa:f9:69:
43:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:69:E4:E0:13:73:F9:49:EC:93:C1:59:33:E3:1C:02:C2:E7:8E:4D
X509v3 Authority Key Identifier:
keyid:D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6d:c6:b6:17:01:f1:44:9f:e0:24:d6:bb:12:d2:0b:6e:32:
c6:df:ec:b6:8a:bb:dc:14:02:3e:b2:84:3f:88:e4:4d:31:f7:
83:b0:cb:aa:eb:a1:e6:c0:61:af:9e:da:59:23:78:ca:f2:27:
13:cc:64:76:04:e2:ff:8d:df:79:e3:72:28:13:7e:ae:67:9e:
e9:35:02:19:f2:87:86:14:e5:9a:fd:0d:e2:a6:61:01:15:20:
76:d5:b2:b6:52:a2:ba:da:d9:f0:61:f9:14:43:7b:56:32:50:
a7:a4:00:99:48:76:f0:52:0b:bd:2a:06:26:db:f2:2b:b1:45:
53:cf:cc:bd:65:00:1d:c3:f9:75:2c:65:f1:04:bf:73:06:db:
b3:88:9e:77:33:34:11:67:56:14:d8:98:4e:1e:96:8d:08:d3:
15:b4:82:f5:83:d4:7f:27:f6:eb:e1:86:cb:c7:c6:33:1f:5f:
b1:29:94:8a:c0:f7:90:37:e7:d4:2a:0f:80:bb:e8:21:57:68:
fc:f6:07:50:e0:54:8f:0a:71:fd:81:41:8b:de:60:a1:7c:3c:
c2:8a:f6:89:0c:46:7a:53:cf:79:39:b9:26:0a:9f:9f:cf:74:
ed:19:06:8d:41:c3:82:ed:79:8c:ad:56:44:7e:9f:c9:89:ed:
e3:9c:35:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:44 2026 by rpki-client