Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File: 4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier: 6I8us0a1bzQdGaIzZ7fgqyNf1lNkzS5uNzJXEwsPgEA=
Subject key identifier: 76:3B:A7:C5:29:29:FC:9F:E3:3A:BD:46:FA:7F:BD:2A:43:2C:EF:96
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 019E30058E859C7888D736371771225682B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number: 1863
Signing time: Sat 16 May 2026 09:02:10 +0000
Manifest this update: Sat 16 May 2026 09:02:10 +0000
Manifest next update: Sun 17 May 2026 09:02:10 +0000
Files and hashes: 1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: 99hPz3QhJF1E0ZnOGO9wOss7DFj+hdOKvfB+rKt/6xs=)
2: APkEJsxH2t-1o8uReEsySa-BG0k.roa (hash: QGebNblh9sIV47+DzT8QKo/lQO0JIeSNiq/YB/thR5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:8e:85:9c:78:88:d7:36:37:17:71:22:56:82:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: May 16 09:02:10 2026 GMT
Not After : May 17 09:02:10 2026 GMT
Subject: CN=763ba7c52929fc9fe33abd46fa7fbd2a432cef96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:40:c2:e7:9b:3d:fc:01:63:2f:95:73:95:
32:c8:46:57:07:52:de:8c:40:34:39:08:25:d8:ae:
88:91:84:d9:e3:2b:15:ad:6e:1d:fc:70:d2:10:fb:
67:a4:4c:70:2e:3f:92:f4:93:7e:d7:b6:c0:05:07:
02:e8:0a:c4:56:e6:00:ff:d5:c0:f7:8b:df:5b:c1:
13:20:04:4d:d1:5b:8c:e0:ec:b9:5d:be:74:bd:2b:
ee:13:2f:13:1b:8d:3c:6d:45:52:87:a0:a3:6b:48:
27:31:a6:7a:06:04:06:65:08:42:59:bb:b7:4d:1d:
87:d0:4e:b5:8e:97:d0:0f:e9:9d:f3:5a:b8:19:fc:
a3:55:36:a5:4d:f7:0f:06:ea:b5:1d:04:a1:49:5c:
3b:05:b9:60:bc:e2:d3:af:03:26:9a:84:b7:f5:eb:
be:0b:40:e4:55:db:d9:f9:d5:d9:d5:27:5c:fc:29:
8d:d9:05:83:5b:4e:dc:07:63:c6:f3:3e:62:8a:14:
f0:92:03:5c:a2:8d:da:ec:ba:09:5a:93:77:cc:9b:
57:2f:33:08:65:01:29:9b:93:e5:92:f8:46:09:c9:
0e:bd:e8:fd:70:27:1a:eb:97:07:b9:e5:de:c2:a9:
88:2a:cd:28:89:e7:c3:2b:f4:2c:d8:45:9a:5a:32:
65:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3B:A7:C5:29:29:FC:9F:E3:3A:BD:46:FA:7F:BD:2A:43:2C:EF:96
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:15:0a:32:e9:87:0b:a3:f7:f0:1b:ff:09:f8:a5:8b:fb:31:
85:4f:8d:d0:b6:fe:62:12:10:81:30:58:5d:67:2b:b3:3b:59:
59:cb:55:17:34:25:fb:21:b6:cb:06:8d:17:b1:13:78:42:89:
01:be:37:4b:0a:87:c9:cd:8a:02:f8:4b:17:dd:36:e4:01:7c:
fc:71:a7:2d:6f:b7:2c:f9:25:7f:3d:68:0a:5d:38:ba:4f:a8:
39:f3:36:8d:1f:42:e2:14:38:32:0c:55:1c:c0:d7:cf:65:37:
9b:b7:fe:5c:d5:51:a7:6b:b3:46:dd:21:d5:0d:6e:1d:d4:ec:
90:d1:32:8a:be:90:06:9d:1a:57:f9:ed:c6:78:51:19:b6:7e:
e9:49:17:96:a2:cc:0c:24:2f:a7:06:c4:76:68:fa:e0:65:df:
27:34:88:b7:ca:24:a5:53:29:19:2c:96:ce:90:ea:eb:2a:00:
6f:46:11:6e:be:af:4e:d3:18:f3:2f:4f:a9:9f:a6:5a:d0:1f:
b0:e7:ca:2a:b8:b3:d8:35:15:b6:80:b8:77:dc:6d:68:0f:d3:
fe:6f:68:a0:88:5c:2f:32:ad:02:a4:41:99:ab:70:23:43:78:
30:e0:a5:79:a5:64:fe:93:a9:17:ad:bd:9d:4c:5b:e0:86:fd:
9f:69:c7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:45 2026 by rpki-client