Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
File: 4Pi55HhWy7oIK3r0KXobcj2vxAI.mft (raw, json)
Hash identifier: q3PhvmaobaUKsQHSavfxKTxU6RPuo3cGTe0u88ZLZWE=
Subject key identifier: 16:FB:C5:BA:84:01:96:14:BE:99:AB:61:36:87:FA:3F:E3:C5:3A:44
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Certificate issuer: /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial: 019E2FCDEDEFD396F96AB7CAA6BABCB15CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
Manifest number: 11C3
Signing time: Sat 16 May 2026 08:01:25 +0000
Manifest this update: Sat 16 May 2026 08:01:25 +0000
Manifest next update: Sun 17 May 2026 08:01:25 +0000
Files and hashes: 1: 4Pi55HhWy7oIK3r0KXobcj2vxAI.crl (hash: Ql4wq8GaPO8YakAh7VlyhKNUqy6FL4NCuRESLHFtAmQ=)
2: kVdVmGrwD_1QhMpmPtm5S0rHuLM.roa (hash: 5VG/dK7kZFbtMzo8Upi7dKEOdYrNjvX54ok+rFIDbeU=)
3: wfPK-VcMi8MYRaYAwMg4vaWygwo.asa (hash: 6yNA3pVOdLj0ExvOjreMr4cUDtTKaNe3nwjPRKJN048=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:ed:ef:d3:96:f9:6a:b7:ca:a6:ba:bc:b1:5c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Validity
Not Before: May 16 08:01:25 2026 GMT
Not After : May 17 08:01:25 2026 GMT
Subject: CN=16fbc5ba84019614be99ab613687fa3fe3c53a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d0:76:89:89:35:33:a3:17:3b:22:e9:4a:e7:
5e:f9:8d:d4:f0:3d:c3:35:85:79:96:af:e1:40:94:
57:d4:26:f1:37:5a:5a:8e:a7:d3:7b:10:b6:79:57:
6c:c1:1f:c0:42:38:e0:5f:56:15:46:28:ce:40:06:
7c:cd:bd:20:70:9e:8c:e3:9a:8a:17:9f:b6:ca:29:
72:a2:d9:66:87:1c:c2:73:2d:f7:75:90:8d:fb:52:
92:e3:5f:fe:4e:47:13:e5:34:1f:d3:48:00:d8:4d:
f7:55:ed:f1:ff:9d:20:96:9a:97:d9:9e:2a:25:a2:
e1:1a:ba:6e:7b:c1:4b:ca:ba:be:aa:fa:84:22:55:
49:2c:3d:98:fa:04:11:4b:f4:6d:f6:e6:b0:ee:56:
b8:b0:95:ac:6f:6a:d3:56:02:79:26:49:98:27:13:
96:98:c6:a5:ed:4d:11:5b:53:24:a1:76:ee:94:a1:
3a:cf:f3:0e:c9:6c:64:52:96:84:12:62:6c:d0:13:
ef:9c:d8:3d:1e:d3:ed:1e:e7:c7:dc:60:c1:dd:d5:
97:36:ae:5f:10:27:01:d7:fd:fe:e1:85:58:1d:91:
89:ac:76:1b:20:d8:7d:15:1b:af:b6:f9:fb:87:e0:
8e:cf:d6:16:6c:8a:d0:40:35:7d:51:f7:06:ae:2a:
a5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FB:C5:BA:84:01:96:14:BE:99:AB:61:36:87:FA:3F:E3:C5:3A:44
X509v3 Authority Key Identifier:
keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ad:23:da:50:27:8e:49:6b:b3:d2:3a:26:88:22:07:06:c4:
5e:77:e6:82:77:3b:a2:37:2d:66:27:ed:c0:af:cc:8a:f4:d3:
26:87:70:c1:3a:d1:b5:59:f6:8e:01:08:35:bd:51:bf:24:91:
12:16:29:6d:3e:53:6b:dd:96:91:c5:ff:a2:bc:c2:e1:d5:57:
e4:44:74:46:2d:b8:31:fd:f2:75:97:41:f9:2d:d3:69:0c:68:
21:21:12:3e:9c:44:ab:9f:0a:9f:e5:16:df:e7:55:85:c8:61:
37:93:2b:ea:83:66:98:0a:a9:38:60:3f:58:a8:47:65:f5:cc:
95:c3:28:34:21:7f:83:7e:37:c4:2e:ac:37:b8:cc:66:69:fc:
ee:b7:08:fa:41:e2:a7:37:af:c3:3c:74:53:3a:33:ad:f1:33:
4c:27:29:bc:65:d9:28:23:bd:b6:9a:ee:a7:14:aa:4c:8d:b4:
55:e0:8e:76:63:84:0e:94:42:37:4a:98:39:f9:84:3e:d1:66:
2e:54:f7:35:84:dd:a8:d1:2d:2a:65:30:00:fe:c9:27:88:a0:
84:2d:d4:8f:c9:57:77:6b:84:11:f5:d4:84:08:c7:5e:ef:49:
e1:48:0d:d6:b8:f3:e2:87:47:14:0d:93:7b:c3:bc:f7:6a:aa:
87:ca:05:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:54:40 2026 by rpki-client