Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: GEGVyfq34OfQ8XipSBDyE99fiIg7xRpnMdiOInY00Es=
Subject key identifier: 4A:E0:40:AF:36:37:A8:3F:2E:39:AA:85:61:24:74:37:F8:C5:C7:85
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 019E300573C727BC361C131474DA34B7EAB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 12CE
Signing time: Sat 16 May 2026 09:02:04 +0000
Manifest this update: Sat 16 May 2026 09:02:04 +0000
Manifest next update: Sun 17 May 2026 09:02:04 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: OrEPXgPpSO7P/1v2i44Lc9RViNK3ythTWzzYP39ReYU=)
2: nqVRQY9OL-QYsG10ABRxkJgdhMg.roa (hash: wMAwtClt2rNSLlbeGnfkTll5PRaR6LFumc9JToEyja8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:73:c7:27:bc:36:1c:13:14:74:da:34:b7:ea:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: May 16 09:02:04 2026 GMT
Not After : May 17 09:02:04 2026 GMT
Subject: CN=4ae040af3637a83f2e39aa8561247437f8c5c785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:08:cc:1f:7b:5d:48:8a:76:70:91:37:fb:
b8:83:b5:72:a5:ad:12:42:be:4b:29:88:5a:d0:4f:
d2:59:d6:6f:34:a8:e7:0e:17:68:e1:43:4f:62:eb:
73:16:a5:ed:35:17:4a:a8:c8:d4:0c:fc:84:99:07:
76:8c:ca:71:4c:72:0c:a2:71:9e:a9:01:98:66:fc:
12:ca:e7:77:fe:25:1c:57:f7:cc:6b:b7:41:42:29:
40:2f:c9:01:5d:9c:29:61:20:ec:49:c9:90:ac:02:
44:d8:eb:7d:19:dc:8d:f5:cb:6d:8d:6d:31:df:94:
b1:2a:21:31:c0:e3:7d:30:c8:27:9d:20:fe:67:3e:
4a:1c:30:1e:ed:30:a2:78:e3:7f:e0:83:b7:92:d4:
6d:00:33:33:40:0a:96:17:61:a3:fb:ac:84:48:b8:
dd:8e:49:c8:16:85:24:5a:81:7e:cb:4e:85:ad:67:
7c:95:f1:3e:99:d7:3f:0c:7a:b1:dd:32:95:9e:8f:
79:3c:13:10:7c:4e:7a:1a:f1:f7:ac:86:c2:e9:4f:
9e:c5:40:c7:02:aa:a3:0c:fc:6f:2a:ec:b7:90:7d:
58:93:0b:dc:fe:85:9f:49:cc:69:93:52:8f:60:b8:
0d:66:15:7c:ce:6b:88:86:46:d0:60:9d:48:f0:3c:
1e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E0:40:AF:36:37:A8:3F:2E:39:AA:85:61:24:74:37:F8:C5:C7:85
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9f:40:42:17:38:7e:29:e2:10:e5:09:33:38:0b:69:c5:b0:
48:35:83:9b:61:c2:33:e5:f9:87:14:50:91:f5:e1:8d:e2:27:
5c:66:de:ad:56:84:b0:3f:03:01:f8:1a:89:a1:ea:a5:e5:f9:
fc:fc:cd:2f:57:3a:5e:9d:70:05:30:07:cf:56:0b:d6:6b:13:
82:c2:36:71:d0:a9:b5:96:7b:7c:95:c6:d0:23:ba:3c:1a:07:
77:93:31:80:66:86:2f:42:e8:dc:ed:01:7b:87:55:ee:3c:13:
42:1b:5c:bc:41:d4:7c:76:24:a7:ee:f4:cb:45:c4:90:37:33:
e4:7c:ef:8c:ad:24:d7:d1:82:c0:41:ab:a5:5b:6f:27:a9:d5:
b2:88:81:1c:0e:c4:12:86:e6:19:d2:fe:59:79:2b:11:b4:fb:
53:87:60:22:1c:d7:9a:0c:db:fc:a2:c3:f3:4a:f5:38:9e:1e:
a8:88:a9:99:94:1d:95:3a:36:7f:5c:8e:12:2a:24:78:26:4c:
3f:d1:3b:08:9a:7f:34:32:39:77:d2:2a:0c:5a:50:9a:23:39:
66:59:36:dc:71:53:0b:92:e0:9c:91:b6:da:80:fb:1f:bc:21:
ac:86:16:6b:87:f3:ba:07:a1:76:81:39:6f:f9:10:e1:24:bb:
0d:dc:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:19 2026 by rpki-client