Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
File: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json)
Hash identifier: woUXOIzFW6n/kS5hGjpU+Ofdq6YrETJvgET4O2TjOvo=
Subject key identifier: 74:74:77:AB:F0:9E:2E:EE:BE:E0:BF:99:FC:45:1C:5D:2B:26:16:A5
Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Certificate serial: 019E30E075E20ACFD2D7665F5043D1B681E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
Manifest number: 0FDF
Signing time: Sat 16 May 2026 13:01:16 +0000
Manifest this update: Sat 16 May 2026 13:01:16 +0000
Manifest next update: Sun 17 May 2026 13:01:16 +0000
Files and hashes: 1: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: GUChmqhDAysTJBsAwcnUA/6NjlW1La3C8jAg3QlFaEU=)
2: JrMdq8W_Js69e7PdI-Ct-5yCpDo.roa (hash: g0z8GxHhTedzHVjLXB39V9yW7Ab4PjyuLrPENMUU7AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:75:e2:0a:cf:d2:d7:66:5f:50:43:d1:b6:81:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Validity
Not Before: May 16 13:01:16 2026 GMT
Not After : May 17 13:01:16 2026 GMT
Subject: CN=747477abf09e2eeebee0bf99fc451c5d2b2616a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:bc:58:05:4d:c8:87:65:12:80:32:7a:0d:
71:d6:9f:24:26:0c:dd:cc:40:2f:22:3c:7a:f4:14:
2f:63:4f:62:c8:69:f0:29:e6:f5:b5:69:6d:3e:aa:
26:36:e4:21:6c:f3:b3:b2:44:dd:4f:b4:34:51:77:
68:7a:6c:c5:a4:b4:97:46:ef:af:5b:5b:e2:79:61:
1e:0e:8f:d5:d9:4e:59:aa:50:f4:16:c2:f6:ae:04:
9f:d7:56:83:cb:ff:c2:56:44:19:a8:2d:6c:dc:1a:
32:33:70:fc:dc:df:03:8a:53:35:35:5a:86:70:79:
34:3d:cf:9d:eb:5f:2c:7a:6f:f3:9c:b7:7f:3f:57:
58:e5:45:46:ab:82:a8:74:0d:58:be:97:06:08:41:
b7:ac:cc:3d:25:21:56:36:1e:62:82:a9:5b:ca:06:
66:6d:e8:f4:ac:f8:c9:31:e4:a5:c3:45:93:1d:c4:
50:df:8e:c5:19:8f:c9:67:17:68:54:39:f2:a2:c1:
8a:85:d9:51:b9:bc:b7:02:c8:b6:6a:77:ce:fa:49:
92:b5:e0:15:e6:d3:af:6d:83:47:e3:09:41:f8:d9:
a8:69:5c:26:0e:a3:c1:c4:fc:37:45:ca:04:7b:b2:
07:2a:65:52:1a:5a:3f:fa:52:fd:09:29:bc:02:29:
c1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:74:77:AB:F0:9E:2E:EE:BE:E0:BF:99:FC:45:1C:5D:2B:26:16:A5
X509v3 Authority Key Identifier:
keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7d:e1:4b:59:88:b5:f2:5f:97:8d:c5:39:4d:9c:b5:d5:fd:
11:3d:63:9b:1d:9c:ba:53:03:c5:dd:be:68:2d:51:a7:ec:b1:
d0:ad:66:24:12:1d:37:8d:6e:dc:09:7c:66:cc:13:58:cd:0a:
eb:fe:00:17:67:f7:25:d7:fa:79:1b:c5:1f:48:eb:9a:f5:f3:
1c:b5:a9:94:32:4d:f1:79:6d:f4:11:fe:ed:c0:3e:0e:d4:1e:
86:f4:3a:e5:99:3d:26:ff:5d:ac:5c:f0:87:2c:10:cd:dc:c6:
65:e4:5c:37:7a:c5:90:f4:3b:38:2f:28:01:42:dc:6d:c3:b8:
38:7f:82:69:b4:4b:f2:4b:31:e2:78:13:66:df:4a:bb:e3:1f:
b7:39:98:cc:25:1e:55:0c:0d:15:f7:40:5f:cc:0e:ab:0a:22:
73:c0:7d:54:ed:a8:d9:57:91:45:9d:64:9b:b0:5a:cd:7b:b4:
ef:89:3a:73:08:db:06:99:cb:44:37:b9:3d:5f:a6:e8:17:d5:
9c:24:3b:5a:91:40:2e:1f:89:79:fd:32:36:21:82:da:5a:ba:
d0:32:85:a9:bc:35:3c:79:6d:6c:06:0b:ad:5b:1c:90:c6:a7:
24:1f:bf:62:27:c0:38:f9:a3:a3:5a:9a:81:35:ba:cd:9d:1d:
a5:44:b8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:27:15 2026 by rpki-client