Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
File: 4MZJtmoZ2i_sI2sEndEioO82iw8.mft (raw, json)
Hash identifier: uXKQ3ajxpFiQnInfuG40FMjjenvdzR+u0wtloKN6upw=
Subject key identifier: 8B:89:29:30:A7:B4:95:76:8A:77:87:88:07:2B:53:33:AE:5D:D6:42
Authority key identifier: E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
Certificate issuer: /CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Certificate serial: 019E28EF9FDE1372DF88A5C31C910EF8C1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
Manifest number: 01FC
Signing time: Fri 15 May 2026 00:00:53 +0000
Manifest this update: Fri 15 May 2026 00:00:53 +0000
Manifest next update: Sat 16 May 2026 00:00:53 +0000
Files and hashes: 1: 4MZJtmoZ2i_sI2sEndEioO82iw8.crl (hash: c5fpchORCRHPJj0BaZTFJyBAj8BmQ6IW7eht2AhiSf0=)
2: INwAC_jNS7HwUjq0ta-X62KVJno.asa (hash: 0iRDupFn1+ZlmDKitgIiV/zTNurv4zOW9wtdEQ3dQhc=)
3: iQFBjQMYNTTJ2jk6e5feOS_a39s.roa (hash: GqVM6J5PfB8C9Ws9x090WHFvEBb+mt5HYBg+7QoW2vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:9f:de:13:72:df:88:a5:c3:1c:91:0e:f8:c1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Validity
Not Before: May 15 00:00:53 2026 GMT
Not After : May 16 00:00:53 2026 GMT
Subject: CN=8b892930a7b495768a778788072b5333ae5dd642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:74:7e:16:cc:3b:0f:03:0c:9a:93:bf:56:
bb:45:91:6d:d2:78:55:48:2b:fb:74:2c:9a:4d:ee:
24:81:15:8a:93:b1:27:a1:76:db:90:a5:8c:2b:70:
79:84:58:b3:3d:28:e5:3b:1e:b2:0a:b8:fb:9d:fe:
f7:2a:c9:75:22:e5:6f:c2:22:ad:f5:95:14:30:6f:
9b:22:14:22:55:28:b4:3d:30:ff:57:a9:a6:28:ad:
15:c0:f4:ec:15:ba:14:8c:fe:88:a2:02:7a:fd:47:
f7:0e:ed:7b:79:15:01:cf:9a:d7:c6:9b:89:e7:d1:
58:5f:84:c5:38:0f:73:d1:56:8b:a0:2d:35:15:de:
53:be:85:96:6d:e8:fe:8c:f9:cd:9e:d1:4c:8a:62:
a9:fd:2a:3e:d9:6d:fa:64:df:e8:1c:64:77:cb:8a:
31:4c:ba:80:81:6b:55:90:d6:74:85:be:ad:c1:cc:
5e:ce:e6:f2:47:38:02:87:51:fa:22:3d:37:b3:c6:
ab:68:f3:8b:5d:0d:d2:b1:08:5b:b8:04:71:eb:83:
b4:f0:e9:d0:ef:a3:11:ca:f4:31:d8:ca:3b:85:df:
db:db:6f:db:64:d2:4b:c3:68:5f:31:f3:35:40:d9:
ce:9b:ae:97:dc:92:3c:f1:87:cd:d7:43:76:f3:09:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:89:29:30:A7:B4:95:76:8A:77:87:88:07:2B:53:33:AE:5D:D6:42
X509v3 Authority Key Identifier:
keyid:E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:77:4f:cd:61:7a:46:88:73:94:55:e8:57:12:f0:2e:ec:ad:
0b:90:2d:36:92:6c:99:7c:9e:31:c0:0e:3b:b7:5e:1f:07:79:
7b:4a:ad:e6:32:42:68:53:71:96:da:4e:16:b6:ed:72:4b:4e:
f1:51:1b:21:88:3f:4c:e6:e8:cf:83:c1:06:d8:85:82:95:7f:
83:dd:85:d8:d9:14:26:86:6c:0c:d6:f2:bb:8b:53:fc:60:68:
22:b3:8b:f1:1a:d5:c8:14:9b:92:db:60:66:fa:df:b2:3b:55:
34:06:20:c4:9c:16:70:cf:25:24:2f:39:e9:0d:58:03:81:f9:
1f:b3:86:07:70:af:3e:6a:fe:b2:1c:74:43:09:65:90:3a:be:
8a:c4:aa:6c:a4:ce:d3:ec:c7:a4:a6:c5:f5:f7:db:20:8b:32:
ba:c1:8f:5b:a9:d0:71:69:35:77:01:d4:87:52:bd:9f:45:15:
98:71:c8:3d:b6:db:08:93:9e:42:f9:18:6a:30:fb:b7:1d:e1:
f0:a1:be:14:eb:d6:56:ea:79:d4:6c:3a:ea:c6:c5:a6:10:30:
47:4f:a2:c4:23:51:28:96:1b:56:a1:99:79:f6:41:8c:bc:9a:
09:70:3e:3b:0c:78:d3:63:dd:0f:58:6c:e6:72:19:6a:31:c8:
74:28:3c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:10 2026 by rpki-client