Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier: 4MpDPeZpeSkaTGFlbkWcEDHgxmwDdhUm+WivsiFzL9A=
Subject key identifier: 94:A8:80:6D:CF:3D:8A:E4:BF:0D:C2:27:44:95:3F:97:89:0B:FF:44
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 019E2814078EFE6E1EA96EB9310E6E401614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number: 190E
Signing time: Thu 14 May 2026 20:01:01 +0000
Manifest this update: Thu 14 May 2026 20:01:01 +0000
Manifest next update: Fri 15 May 2026 20:01:01 +0000
Files and hashes: 1: D6JN_SUanY3VCPcy8MM0wRyWpFg.asa (hash: GO31s3wbPJQu1T3Grsa85oI8sAVmrZULl2h6J3A4Dcw=)
2: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: uRY2WBZTWD6B2KtSH7Fbn7QQbZpJC/VxqFQxWgPZdto=)
3: iVwLg--4UDbLvJn4dxkRR2fxInw.roa (hash: wrzc6nRtbm4MeWrVh43cUfhaLyz6R8Fbv5xm23WJS0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:14:07:8e:fe:6e:1e:a9:6e:b9:31:0e:6e:40:16:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: May 14 20:01:01 2026 GMT
Not After : May 15 20:01:01 2026 GMT
Subject: CN=94a8806dcf3d8ae4bf0dc22744953f97890bff44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:54:57:b4:62:9d:9b:eb:b7:9b:82:42:01:
d3:04:f6:bb:43:cb:ba:bd:3f:2e:72:7d:02:b0:ce:
ac:29:b4:c1:f0:6b:35:01:b5:09:73:26:70:22:d0:
86:c9:50:2e:78:2b:bd:69:cc:35:10:b8:be:e8:04:
3e:f8:3e:76:29:73:37:1c:bd:fe:5d:3e:2a:18:9a:
69:a0:cd:57:5b:fe:09:aa:63:e9:da:18:9b:1a:d7:
8d:83:70:90:8f:ba:90:88:70:98:22:0e:5e:08:97:
b6:a4:ac:f9:4d:f9:3f:60:b6:c4:19:d3:08:fe:da:
12:37:83:3d:30:2c:60:44:91:81:35:61:0d:47:ac:
a3:14:c6:49:2f:04:a1:e4:07:93:12:76:87:37:f6:
0a:fb:94:1e:3b:7d:ad:b2:63:31:25:5f:ae:0f:10:
c7:e7:91:e7:53:23:43:75:77:04:53:0c:8b:17:d1:
08:a6:7d:df:f4:b4:07:d0:08:8f:42:b5:6a:c8:52:
99:f6:f2:46:b1:cc:ee:75:85:41:79:86:b3:3e:0f:
b1:b8:df:90:59:a7:bd:14:77:50:7e:8b:25:10:4b:
8c:f2:07:2f:1e:b2:4e:61:dd:3b:ef:dd:6a:3f:ae:
7b:03:89:3a:07:cb:4a:67:4d:d9:89:fa:1f:c7:d0:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A8:80:6D:CF:3D:8A:E4:BF:0D:C2:27:44:95:3F:97:89:0B:FF:44
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f9:43:6b:95:c5:33:84:e0:b6:60:0c:62:13:14:7b:79:ad:
2d:ae:17:90:1f:20:d1:17:41:fe:38:6d:2e:53:c7:d9:15:0a:
51:a0:8d:2b:3d:be:12:6d:de:e9:20:6f:f1:c7:45:e7:4d:35:
93:bb:11:be:2d:d7:a9:a6:3a:10:2c:30:10:01:75:96:73:b9:
bd:d4:27:f5:9e:e4:79:05:78:c4:32:ac:5f:8b:80:a2:20:3e:
cd:23:d5:92:ef:0d:23:98:43:af:bf:d1:f0:2a:a8:65:57:e5:
6b:dc:51:b8:0b:f9:9e:34:a8:b3:ff:91:1f:79:c2:f9:9d:c2:
f3:4c:f2:0d:be:e4:75:45:4b:69:b2:7a:28:4f:1b:63:22:ef:
18:76:d8:49:3f:cd:79:a2:48:43:09:28:a1:f4:44:23:2e:94:
c7:02:32:4c:a4:aa:61:c7:f7:e3:1e:85:a9:c4:16:5e:0f:db:
57:74:2c:79:69:61:5b:6b:77:ab:b2:1f:5c:72:22:0a:27:58:
2c:f4:8d:ab:20:76:c7:d3:03:d6:6b:6c:99:78:4d:bc:0b:64:
bb:b0:a5:ed:1d:2f:d8:da:62:f5:a3:ff:dd:91:27:d7:de:76:
1a:69:d0:e4:c5:46:2d:f7:8d:07:8f:c4:55:03:c2:e2:db:1c:
e0:63:a1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:56 2026 by rpki-client