Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
File: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft (raw, json)
Hash identifier: i+SlFXy9AKKmyas306uittgXHiN8WlZuqjr8WvaxA6Y=
Subject key identifier: 3F:0F:06:98:1F:76:3D:0E:1A:CF:70:D6:85:16:42:0A:52:BB:5A:D9
Authority key identifier: E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
Certificate issuer: /CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Certificate serial: 019E2F5F83611F758D2B78AD8FCAC28507ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
Manifest number: 07CA
Signing time: Sat 16 May 2026 06:00:49 +0000
Manifest this update: Sat 16 May 2026 06:00:49 +0000
Manifest next update: Sun 17 May 2026 06:00:49 +0000
Files and hashes: 1: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl (hash: L8CwrjjZkcgou4XXj+RWILAd0Rd4lp1RQF3y9O3kEt8=)
2: 6-2FD8HR51guZuZo3woN4IVR9zc.roa (hash: PJc3A8dXSGr4yP32dRfCtlI52+k/p1Mtsy/ZQcI6iOs=)
3: X7BmyTsEbGnFLW3J_leT1himypU.roa (hash: YLQzVzV/7MjHj/da8FwrBCVQuruzlxfvIrqTRIBeu1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:83:61:1f:75:8d:2b:78:ad:8f:ca:c2:85:07:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Validity
Not Before: May 16 06:00:49 2026 GMT
Not After : May 17 06:00:49 2026 GMT
Subject: CN=3f0f06981f763d0e1acf70d68516420a52bb5ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:80:cf:ed:1e:95:7e:44:97:d5:ba:04:34:
f3:a8:df:0b:b6:90:e5:d0:b5:05:5c:dd:cb:3a:25:
ef:ed:58:7d:d9:f4:65:0d:b3:c1:d8:b1:01:ee:3a:
b0:9c:6f:67:98:bb:ad:00:78:0e:39:bf:f5:68:9c:
cc:f7:81:33:a8:8c:3d:8e:b9:e0:1f:9c:c6:30:4e:
fd:ee:4e:c8:36:81:18:7b:e7:fc:79:aa:09:98:37:
90:fc:a8:ad:16:f4:71:a4:79:a6:a3:41:a5:12:f2:
ab:27:46:70:3c:df:ff:46:10:70:4e:27:85:c0:30:
78:13:6f:f8:6b:37:67:58:c2:a4:0b:ac:45:8e:a0:
65:4a:db:02:a9:ab:5c:ad:8f:0d:4d:19:57:d6:7e:
d5:a7:b2:b9:a1:b2:57:23:0f:a1:1d:19:cd:a0:48:
87:3c:94:d2:c5:2c:be:7d:7e:1d:fe:45:9e:c9:d8:
59:b0:b5:27:da:51:69:0c:ab:cb:84:ff:08:17:0d:
dc:c3:d7:c5:2b:7a:03:b1:22:e4:50:56:5f:77:55:
a9:a1:49:e7:c8:d0:c7:ca:ab:9a:9b:e3:9b:46:a7:
54:11:34:61:72:66:9a:1f:42:a0:11:57:5c:21:91:
7e:59:20:b1:07:a7:05:5f:30:f0:e8:e9:6f:78:c7:
cf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0F:06:98:1F:76:3D:0E:1A:CF:70:D6:85:16:42:0A:52:BB:5A:D9
X509v3 Authority Key Identifier:
keyid:E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d9:2a:9e:07:76:34:55:69:cc:c5:29:7c:a6:b9:4f:f9:44:
f2:25:79:87:b7:65:8a:5d:37:8e:42:ff:56:d0:6e:0d:27:d2:
ce:92:95:8c:ab:5f:3d:86:c2:bc:c9:59:ec:78:60:22:b9:c1:
b1:87:0f:d5:7b:17:a5:18:12:36:87:86:bd:d0:af:f3:9d:da:
13:33:01:42:65:56:cc:1f:34:e3:eb:4d:2b:fe:d3:c2:08:53:
a0:c6:42:ec:f5:84:33:54:ce:4f:ca:77:e6:f3:f4:b5:15:74:
b4:88:01:6f:46:a9:c1:34:84:a2:e7:e8:bb:d3:f4:8b:b6:a7:
02:73:bb:ba:2f:7d:97:71:f4:f7:dd:35:f9:b1:db:22:29:fa:
0d:51:c2:60:1e:76:a6:b6:80:6b:55:61:18:dd:22:f1:0d:a9:
7f:be:9b:a8:b7:38:d9:83:67:30:3a:08:0b:80:b3:31:16:f0:
a5:d8:c6:24:6a:8f:83:95:a1:86:82:60:e2:6b:cd:6e:b3:e3:
cc:50:33:73:61:2c:a9:8f:ca:75:8e:ea:35:7a:19:72:c5:85:
75:45:54:14:79:c8:22:25:06:dc:41:dc:13:6c:10:bb:38:d4:
88:fe:cd:f5:ce:06:ec:7e:e7:e6:6e:b4:7d:ad:7d:ed:b4:fa:
aa:70:34:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:43 2026 by rpki-client