Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
File: 4IZuWnxyXctqE4zGw0DP2tQxXT4.mft (raw, json)
Hash identifier: e6GqiQ14A+qm+OHFfwLGTec5x+EW6hu6Kt/4cJSDeU4=
Subject key identifier: 8A:1E:95:94:5C:B5:45:6A:B1:4C:D4:67:79:11:AA:26:CA:5F:83:BE
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 019E30048D22D2B4A5F0BCC567FE34B959AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
Manifest number: 1918
Signing time: Sat 16 May 2026 09:01:04 +0000
Manifest this update: Sat 16 May 2026 09:01:04 +0000
Manifest next update: Sun 17 May 2026 09:01:04 +0000
Files and hashes: 1: 2KPw1cvbm50f0LYM14wl1jqJ9og.roa (hash: A1Jjz4VQ5P7K7cWtSDzEEjwDvup5VASHzuFeW68IpQ8=)
2: 4DjthTFuBFBUicM1fyQrr1R-zpA.roa (hash: /khTTdB4MFujwhgprh1GKjQ5sevdR189YyvZSZEdlvw=)
3: 4IZuWnxyXctqE4zGw0DP2tQxXT4.crl (hash: 8OgsEeUahoJuuSlS0+E5fgN9+vovNlxr6K8E8Yu00nI=)
4: 7pxmMXSw-HkZG9cAZnnYN-vEkfQ.roa (hash: mEU3VRJ8fuQ7izupJUqVvL0qdRuIxFLkUNg5UpgN7ss=)
5: 8OlOEZgObzEvy1E8VmktgWUdQi0.roa (hash: vpY2iql20BkJOzJyUWVMsBYvSfuAgM3xo1h/baltqkw=)
6: IbI54r9UQEycQUhSG_R7IhAl23w.roa (hash: Xsth8W4XkRG829Saw23qV/fuk3mylDa5vQqSxMBq6Os=)
7: kaNSS3H8CcGwyEb9L0LHfodkCbI.asa (hash: w3bZtfnN5MHgcG0AWFUlSLsnuz4fMXs0k06prQh3OWE=)
8: mxy-X6DSpF8ZztbUQjMZo4HUfAM.roa (hash: 8VsFON9Y1Ltuj+mPJYLJdGhQhe4GbTQ4L4kgjue4VFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:8d:22:d2:b4:a5:f0:bc:c5:67:fe:34:b9:59:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: May 16 09:01:04 2026 GMT
Not After : May 17 09:01:04 2026 GMT
Subject: CN=8a1e95945cb5456ab14cd4677911aa26ca5f83be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:b5:42:e9:e9:01:3f:3f:00:39:59:d5:7d:
63:da:13:09:8c:c7:00:84:22:25:90:47:cc:14:ed:
08:2f:ec:62:78:82:22:28:6b:f9:14:c4:a4:f8:f0:
e1:f4:23:26:a4:00:90:0c:7e:36:e7:0c:8b:67:f6:
22:51:91:dd:45:f4:77:21:a6:bb:c5:b4:8f:b5:91:
a9:40:d6:87:9d:96:3b:ac:86:93:b3:54:5f:2d:a6:
25:ab:b3:80:6d:4b:4e:c3:9d:03:e4:58:3b:63:1a:
86:86:1e:41:2e:4c:e8:9f:f0:aa:a7:5e:31:96:5f:
53:2a:29:fd:4d:a7:28:f5:74:14:b4:ba:5f:e4:73:
23:81:ea:ff:92:8f:db:4d:df:87:44:9b:87:ca:c9:
6f:77:eb:c1:62:a3:c1:3d:6d:d9:14:80:78:09:50:
07:0a:26:e3:55:ff:68:82:83:1e:51:ea:e5:3e:c7:
37:db:9e:40:b2:b1:41:7d:78:70:82:08:01:a9:26:
b3:0b:cb:b7:6a:d4:ce:cb:49:cd:58:4f:a4:10:73:
81:23:33:ee:fa:85:55:cc:82:74:09:a5:1e:11:d4:
ab:61:83:64:fc:d0:d3:70:ac:70:68:f3:40:fc:a0:
5a:90:dc:0e:7c:b3:ce:44:fa:6e:a9:03:88:74:bc:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1E:95:94:5C:B5:45:6A:B1:4C:D4:67:79:11:AA:26:CA:5F:83:BE
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3a:aa:63:cb:0f:65:7c:f1:e7:47:14:58:82:cb:71:c3:cd:
7d:51:82:8e:a2:53:d3:94:2f:b4:7f:49:5a:be:84:04:ae:fa:
78:d9:30:cf:00:30:f2:3a:c5:f2:67:24:fb:f6:28:1a:ef:37:
b5:85:68:39:b1:51:84:e7:86:bc:51:7f:09:16:6f:30:4f:c5:
c9:ac:ae:ec:a2:44:48:32:40:73:8c:e1:6f:b2:6c:3d:51:bc:
a9:a3:9f:75:0b:1a:a4:ee:9d:43:82:09:2c:94:cb:7b:1f:6b:
19:d2:39:b9:85:ed:e3:ce:b1:2e:14:4a:c5:dd:d8:34:73:d0:
d2:a4:39:1f:0a:66:50:54:09:66:dd:2b:01:24:ae:a6:fe:f9:
c9:3f:af:de:76:f4:8e:9a:3f:74:08:cd:d9:d9:3e:32:34:71:
02:c9:a6:5f:9b:91:30:e8:76:c6:1e:e8:bc:24:ac:9a:77:7b:
4a:67:86:b3:8f:16:ac:c2:47:77:e0:6b:a9:0c:ec:55:40:b4:
1b:1a:6d:50:08:e9:d5:81:61:4e:53:c6:b7:79:c1:25:6d:52:
0f:d1:76:8e:50:ed:75:51:bc:b0:50:ba:f8:a7:65:68:40:54:
eb:44:e2:41:89:4e:99:f0:b4:8f:57:ad:5d:49:68:12:e2:eb:
af:0c:c4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:33 2026 by rpki-client