Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File: vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier: 4Ou8xWB0PxeAJKxICpOcKAwwOEKBXWbWOiaNZVAMKM0=
Subject key identifier: EA:1B:60:64:19:A9:D8:1E:31:1A:14:DB:FF:62:39:2F:7E:C0:7D:69
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 019E4EEAD7C6AA49C100BC116AED1EDA36F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number: 1921
Signing time: Fri 22 May 2026 09:01:13 +0000
Manifest this update: Fri 22 May 2026 09:01:13 +0000
Manifest next update: Sat 23 May 2026 09:01:13 +0000
Files and hashes: 1: Wl_TNY94WK2rcly6xRH5gNybF90.roa (hash: l+YPId6RKLguzaCBjAcOhdZYbBy4KT7l6mfJmlUnqwM=)
2: tW2R0GRUoyNtK2_YkFvWz0zKBzc.roa (hash: K1KWr86aOYdf4AA1AHrR6w9+58FTKX+8pbTwDlMtG2M=)
3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: +8iqSfs4QKsEQ9N9zUvCouGjxa8rrOvY9VtA0ni80u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:ea:d7:c6:aa:49:c1:00:bc:11:6a:ed:1e:da:36:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: May 22 09:01:13 2026 GMT
Not After : May 23 09:01:13 2026 GMT
Subject: CN=ea1b606419a9d81e311a14dbff62392f7ec07d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5e:16:fc:05:72:aa:e8:0c:c9:44:4e:57:8d:
78:b6:e3:c6:0e:67:85:e6:1d:97:e4:53:7a:9f:ba:
75:a4:8e:98:ad:18:d3:2d:d0:a9:d1:11:7e:02:a1:
61:f5:24:f5:ff:05:e5:85:32:62:69:54:ed:52:1a:
7c:67:bf:d9:a6:e1:8e:e0:62:e3:16:c1:e9:23:a4:
bb:9a:74:78:88:27:af:3a:81:1c:2a:b2:c6:83:d6:
28:5d:5a:3b:c8:c9:03:7e:7a:f4:88:e8:47:39:75:
73:c3:39:8d:bb:43:f7:1f:32:55:82:99:74:b3:81:
4f:23:53:11:06:09:b0:7a:23:c3:1a:5f:0c:c5:ad:
13:8b:0b:68:f4:4c:7e:d6:27:c2:76:e5:ae:74:82:
99:02:dc:b1:c1:52:87:db:96:92:da:67:2f:6b:b1:
1b:d6:7e:98:48:1d:fe:89:45:60:23:30:ee:36:1d:
37:39:db:4b:c3:6a:4a:39:59:d4:ab:cf:44:3c:dc:
3e:07:79:2a:59:3a:00:f6:50:9a:52:24:a2:bf:6a:
38:f6:d8:a4:ad:bb:0c:e9:68:3f:b7:f5:d3:f8:6a:
48:39:c9:8c:50:a8:23:d6:08:d2:4e:8b:a6:32:61:
c7:9d:30:d2:5c:64:5e:05:d7:6f:cd:a7:35:6d:7f:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1B:60:64:19:A9:D8:1E:31:1A:14:DB:FF:62:39:2F:7E:C0:7D:69
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:22:00:50:7e:f9:fe:97:7c:27:80:a7:5d:10:28:f3:93:57:
3a:9b:4d:34:e4:3c:88:fe:93:96:ff:f6:9d:c7:7e:5b:ab:a8:
a2:21:85:2c:c8:3d:51:b8:44:1f:70:d7:0e:08:08:43:dc:bc:
b0:c9:ab:16:64:e7:67:84:7d:e2:7e:39:af:16:e9:da:de:9b:
ed:61:c3:4a:14:95:3b:68:02:ea:41:cf:fe:4e:51:8a:c5:f6:
02:af:da:c1:fd:d3:1f:05:d9:75:09:a5:62:2e:e5:a3:bc:c4:
c7:9a:26:83:96:2e:3f:b8:11:19:e6:c5:bb:be:db:49:84:68:
43:af:77:e6:c7:8d:d6:1f:3f:26:08:3e:bc:b2:e9:c0:58:15:
c3:2a:a9:98:c8:be:40:b8:25:5c:e9:cc:21:5b:e4:03:60:c7:
08:48:b7:81:c1:b5:c5:93:2a:a3:50:2f:b5:42:cc:6b:75:27:
e2:45:0d:9e:a6:2d:88:77:98:e8:95:31:c0:ce:2e:10:8f:6b:
47:29:b1:55:d1:ff:48:b9:e5:28:d9:48:99:c3:b7:42:a2:01:
92:4f:64:d4:7c:ef:a0:da:9b:b8:f7:71:ed:f7:4c:69:40:07:
d9:15:73:bf:b1:9f:0a:64:f7:cb:35:50:13:93:f8:d6:0b:c3:
b5:ce:54:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:11:49 2026 by rpki-client