Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File: 4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier: Jm5FnG1NQF6DEf0ofHacjolxVbaHQxzhHAP1I/A+Isg=
Subject key identifier: EE:5F:CC:C2:05:D3:50:BD:5E:4A:B0:84:DB:E0:5E:02:F1:3D:C1:17
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial: 019E3005937BCAA2077CE760D0E9FF8E52A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number: 0A18
Signing time: Sat 16 May 2026 09:02:12 +0000
Manifest this update: Sat 16 May 2026 09:02:12 +0000
Manifest next update: Sun 17 May 2026 09:02:12 +0000
Files and hashes: 1: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: JY1vhmvXG75FtYgefHgBXAG1OaThTKtnk9AWwRnDpSs=)
2: u7z3f5MyS6Pn44Y8ceWPcFJRqYE.roa (hash: wWTcWByT+kygfV9+kd/6R30QexArvjCPKfIUysPXkgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:93:7b:ca:a2:07:7c:e7:60:d0:e9:ff:8e:52:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
Validity
Not Before: May 16 09:02:12 2026 GMT
Not After : May 17 09:02:12 2026 GMT
Subject: CN=ee5fccc205d350bd5e4ab084dbe05e02f13dc117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:e6:96:36:d9:ce:43:65:07:5a:a9:d8:fc:
5a:b8:c8:38:50:90:c1:89:51:12:27:7e:60:70:b9:
5a:f1:06:d2:7f:cf:24:3a:af:32:44:78:19:8c:b2:
22:96:fd:00:1e:9d:5f:d7:95:84:e1:a5:dc:7f:3c:
91:70:e5:1f:78:e9:ea:d4:b8:29:d5:05:ee:5d:3f:
d1:34:5e:ad:d5:b1:8c:5b:b8:ce:2c:cf:53:82:2f:
5a:c7:5e:40:11:b3:60:2d:8a:7d:3e:40:4a:e0:15:
ac:1d:11:4c:19:a6:e3:60:64:ff:e7:c0:35:1d:56:
a6:fa:cf:97:64:f5:3c:e6:ae:67:6e:0f:dd:e6:83:
c3:77:80:7a:7a:7f:ef:0e:d0:00:10:3e:1a:b2:b3:
c3:47:7d:76:70:55:a8:65:a1:29:7e:ad:52:7f:7d:
e2:16:f3:e5:4c:e6:9c:cb:68:4f:35:ce:a6:19:06:
89:4c:b8:83:95:0e:80:ca:f8:09:66:ee:af:3f:53:
70:50:ca:f9:fa:3f:77:7b:9e:ab:df:00:37:79:d7:
71:fd:9f:72:9a:f4:89:ca:16:2e:0c:c5:1e:76:58:
97:8a:be:00:44:b2:39:9b:2c:84:e1:25:84:15:c5:
ed:70:89:f0:38:1e:da:c7:3e:e7:7e:b9:c6:e1:8b:
4a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5F:CC:C2:05:D3:50:BD:5E:4A:B0:84:DB:E0:5E:02:F1:3D:C1:17
X509v3 Authority Key Identifier:
keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2b:ab:19:4f:d2:61:d4:a4:ed:69:ea:0e:f9:c7:86:b6:4c:
58:f5:a5:1d:71:97:4d:fe:2c:51:c1:7c:a7:ce:85:8c:1b:29:
ea:1a:b6:79:6b:07:d3:64:aa:2b:7d:ef:2c:a9:d3:d6:49:7b:
c2:94:86:72:96:97:e5:59:53:37:ed:40:fa:85:eb:7a:3f:1a:
7d:30:7b:37:7a:86:40:37:80:3f:c1:f4:b1:24:3f:08:e1:0b:
44:b6:01:ce:2a:6a:78:73:2e:85:14:0e:fe:ba:57:2c:a4:1a:
64:6a:03:63:c8:f0:9e:44:ad:7f:b0:e0:76:f3:5f:5f:d2:ba:
91:f8:37:b3:5a:13:f3:2b:f6:63:6b:cc:e4:5a:82:9a:cf:98:
08:83:2b:1b:99:f5:3d:ba:df:79:fd:e0:17:be:6e:f4:c6:e9:
91:31:93:2b:1c:11:6e:43:e0:35:aa:5f:e0:60:91:51:c3:02:
2d:68:d4:f5:a8:57:40:74:ca:05:4a:f8:53:e1:3c:bb:1e:3c:
99:2e:91:f5:3a:f4:d5:6a:28:fd:ad:1e:45:9e:1a:18:de:66:
f2:1a:1f:8c:2f:cb:07:75:e2:b1:e9:98:81:18:03:36:23:01:
2e:07:1d:9a:68:53:3a:1d:2e:80:9e:92:c3:9b:48:b7:3f:d9:
8e:c0:61:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:31 2026 by rpki-client