Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
File: 4mi9DSXlWsGkKoTCo7nIkINh1uE.mft (raw, json)
Hash identifier: SSiTimhUXjpoTJqMj/2fdyWSfvsddcyCr6sHexyicTI=
Subject key identifier: 6E:E1:7E:55:12:30:41:54:97:06:3A:04:71:0A:C8:89:8B:B8:B0:48
Authority key identifier: E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
Certificate issuer: /CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Certificate serial: 019E311757194417FFA363D2BE5317475422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
Manifest number: E8
Signing time: Sat 16 May 2026 14:01:13 +0000
Manifest this update: Sat 16 May 2026 14:01:13 +0000
Manifest next update: Sun 17 May 2026 14:01:13 +0000
Files and hashes: 1: 4mi9DSXlWsGkKoTCo7nIkINh1uE.crl (hash: JTnkU+4Xft0jkmnMZEAzClEWeQsXIMZRw6pRoJl7q6k=)
2: JQH3U3cXJOwqHLIl-7Bwky7-HLY.roa (hash: SJWNpyd0W8U00MUBSeKEN8/PPIQ0TFlfn5di0BSI3Hg=)
3: K0Bz8gUXJ1GAp68K0LjDByi_SVk.roa (hash: CPs5nAdCCsQDzUUAym9dDL0dv2iUIo+oUoQLSVCUp9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:57:19:44:17:ff:a3:63:d2:be:53:17:47:54:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Validity
Not Before: May 16 14:01:13 2026 GMT
Not After : May 17 14:01:13 2026 GMT
Subject: CN=6ee17e551230415497063a04710ac8898bb8b048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:73:e1:c8:65:0a:8f:3f:86:22:76:8a:96:0e:
9f:f9:b6:5f:5e:ab:2c:07:f5:06:f3:1c:de:1c:21:
13:71:03:74:ed:54:6c:53:7f:d9:9f:8d:d4:b4:81:
9c:66:19:47:21:7d:b2:5c:9f:cf:d1:54:11:c3:7e:
e4:f6:54:e5:cd:a7:72:f3:13:a0:f2:c8:ce:4d:84:
f1:a0:b9:77:44:d9:00:75:fd:ff:96:21:1a:20:c8:
e5:b0:8c:a4:f7:0e:37:95:f8:59:7a:38:c9:9f:45:
14:80:b1:87:d9:29:f3:4c:4d:74:21:28:bf:13:4d:
96:08:20:52:6d:95:7d:e0:a1:d1:00:41:3f:ce:c7:
0c:fb:e7:8c:fb:b2:21:27:62:20:03:7d:a9:98:7f:
ed:36:02:30:9c:c5:fa:85:cd:5e:9b:9e:1b:10:0b:
4e:f5:e0:5d:d5:a3:74:50:65:d7:9d:23:44:ee:9e:
77:a9:c5:27:97:a4:2c:a7:b0:13:88:90:19:19:58:
d6:cc:d7:cc:20:92:c8:f7:0c:f2:ec:68:98:9e:10:
97:87:dd:e7:cb:77:60:f7:69:be:3b:bf:7f:30:e2:
f2:8f:5d:ff:34:3d:f6:56:3b:fc:f7:02:4e:2e:bb:
da:43:da:e8:b3:b3:03:52:01:75:c8:75:c9:0e:ed:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E1:7E:55:12:30:41:54:97:06:3A:04:71:0A:C8:89:8B:B8:B0:48
X509v3 Authority Key Identifier:
keyid:E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a5:b0:2b:1c:64:61:38:a7:af:cc:be:11:c0:6d:37:7e:fe:
78:f2:30:e1:8c:09:78:07:b1:c0:37:7c:9f:97:e2:50:93:1d:
d9:ed:d9:c5:00:cb:3b:60:36:11:60:dd:ab:74:60:a0:03:aa:
40:e7:f1:30:3f:e4:ef:65:74:e7:31:06:9b:44:cd:36:16:99:
8f:26:c9:2e:a2:a3:79:24:d5:2a:e4:e9:79:07:26:d7:34:72:
14:54:0a:6c:3b:3a:88:d8:dc:32:9c:2e:f1:5d:86:58:42:e2:
ce:ff:bd:fc:64:7d:42:48:28:51:6e:97:18:dc:55:b4:9a:12:
80:33:d3:83:48:e2:28:eb:81:14:56:77:50:8a:f6:0c:df:92:
2f:d5:e1:c4:b0:1b:65:12:84:d0:9a:c2:62:5f:ad:5f:66:9f:
bf:98:ba:ab:00:c1:46:0c:09:7d:25:03:06:db:d9:91:78:37:
81:c8:11:4a:ff:86:40:c3:e9:26:c0:82:19:1e:d6:4c:49:41:
b9:63:a9:05:11:d6:7b:64:44:36:55:47:1d:db:1f:b8:2c:2b:
9f:82:91:50:49:55:71:20:c9:13:26:40:de:cb:1c:b0:6e:b4:
fc:9d:71:93:99:ee:fd:b4:bb:74:be:ba:73:a8:8e:b8:62:ba:
0c:f3:80:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:28:40 2026 by rpki-client