Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: A1mzWh5a03sqcgBP9sc8Ve0GqWj6f4zUzg6Ie5Q3D00=
Subject key identifier: 0D:99:4D:5F:58:8D:D6:E4:D7:6D:F8:89:97:CA:2D:04:70:48:62:58
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 019E29267BC2CF26139C9060D31D632ED8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 0C44
Signing time: Fri 15 May 2026 01:00:48 +0000
Manifest this update: Fri 15 May 2026 01:00:48 +0000
Manifest next update: Sat 16 May 2026 01:00:48 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: c5NhXobkYKQUOwrltArUe02izcU6MIdsv1ZfxIRw29g=)
2: ErpeCUDkmubemk25x6bhiE8fSGc.roa (hash: TTJUK42mws9XlE8j1BxdD7GShsktqMxOOwmtU5mBiJY=)
3: T0pinHQE9eLRbdmXpvSn-pLDjUA.roa (hash: fpKBkag1Eq814ryw6TGAsVdMfo9isfHsmaeJ5gB+g6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:7b:c2:cf:26:13:9c:90:60:d3:1d:63:2e:d8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: May 15 01:00:48 2026 GMT
Not After : May 16 01:00:48 2026 GMT
Subject: CN=0d994d5f588dd6e4d76df88997ca2d0470486258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:e9:19:e6:1e:87:38:7b:4e:ad:70:1b:7a:
07:35:76:f7:74:a7:28:45:60:c7:fc:6a:b1:9c:7e:
d4:e4:2b:b3:e0:12:d1:4d:6d:70:1d:3b:e4:3d:87:
bf:8f:2d:43:f9:e9:a7:3b:c0:d9:f6:02:73:b8:9e:
8c:3b:0c:e3:14:e6:f8:88:75:cd:f1:6b:a5:af:93:
70:20:e0:9d:dc:5b:a2:be:0c:6f:b9:86:17:e2:ed:
de:ce:27:19:08:89:3b:b9:d6:a2:30:5e:7c:d4:ae:
e2:90:b7:29:73:0e:9a:82:82:91:dc:e4:13:ef:aa:
a9:42:41:7f:72:fc:57:aa:f7:6a:e9:9d:d3:28:cd:
3f:27:fb:ed:c4:f0:e8:07:1d:be:57:88:89:21:b5:
b5:b8:d2:b8:13:c6:b9:fb:68:b1:f7:66:ab:cb:66:
47:7b:dc:7a:2b:4c:37:c4:b7:c1:c1:45:2a:7e:d1:
3f:00:65:ad:c9:89:f0:f4:bf:a7:47:0a:9f:a7:70:
6e:43:ed:d0:bb:79:94:8d:7a:07:95:bf:e8:c2:7e:
00:70:d6:65:0a:1d:08:de:d3:f5:ea:6c:f7:3b:cb:
b8:53:6d:02:4d:a4:f2:cd:fb:c5:7f:e6:8a:c4:86:
8b:93:78:61:7d:3f:00:93:47:cb:b1:35:bb:5c:22:
90:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:99:4D:5F:58:8D:D6:E4:D7:6D:F8:89:97:CA:2D:04:70:48:62:58
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4c:23:cd:17:fd:49:8e:84:ec:d6:19:47:33:54:5d:1d:6a:
d6:3c:a6:d2:b2:be:70:7b:c9:3c:46:05:2d:d1:92:1b:85:a5:
58:6a:2f:5c:c4:66:e7:86:35:84:10:40:17:96:43:4f:13:2c:
51:7b:08:07:b0:a3:f3:80:5f:2f:d2:1f:93:39:59:e2:9b:b4:
11:ee:a9:7d:da:ed:41:59:ad:eb:64:79:83:3b:4e:05:47:02:
dc:00:94:f5:5f:5a:9c:cd:95:ca:e7:81:7b:f0:c6:85:14:b0:
af:69:c6:66:a0:6f:86:cf:94:5b:68:24:87:18:91:56:6f:d1:
77:d1:46:63:80:72:18:f4:c9:4b:8e:73:f3:ed:fd:06:6f:a1:
f5:98:83:f2:24:a9:c3:e2:98:fb:94:c6:0d:4c:96:b7:13:01:
c4:2e:f9:1e:9e:5b:82:65:12:f4:5c:84:f5:6d:a8:ca:10:79:
63:4b:22:ab:f5:71:d2:ed:e9:a3:e0:7f:93:f0:5d:15:ea:4e:
3f:61:c7:ac:1c:25:de:ed:a6:46:57:d4:79:6e:fa:86:d7:14:
43:4e:32:8c:eb:2d:6a:1e:c5:96:30:ce:4c:d7:64:cd:54:70:
74:30:df:a9:f8:d2:75:98:78:3b:26:ab:10:bf:0c:29:64:d0:
02:9b:ad:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:02:31 2026 by rpki-client