Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier: EmdDfpOfKDSH5xrbrM9TGDGdUe1DSvPNTTixCRFpeKc=
Subject key identifier: 5D:28:97:AE:4B:25:0D:1D:DB:37:FD:30:42:FE:8B:C7:EB:00:A7:99
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial: 019E2B4C0D6EFE0171F98AAA9D8C366ACF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number: 1440
Signing time: Fri 15 May 2026 11:01:04 +0000
Manifest this update: Fri 15 May 2026 11:01:04 +0000
Manifest next update: Sat 16 May 2026 11:01:04 +0000
Files and hashes: 1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: n/4vLs78MK/QuuLs4p7ExEfrsVk0NKVw7fjXrCivdaM=)
2: NdV1685pUzzupc5kE5-ldMdSDxg.roa (hash: ueorjyehMNjdQkD1BLlElPr49sGyaBsEZXRjheGpYAA=)
3: ObqCC5ItaIb9zSaMr1gSLuQWW7g.roa (hash: z8qeiKJfszyHlpziW66XElBOILDVztPeTixCMaYCXnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:4c:0d:6e:fe:01:71:f9:8a:aa:9d:8c:36:6a:cf:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Validity
Not Before: May 15 11:01:04 2026 GMT
Not After : May 16 11:01:04 2026 GMT
Subject: CN=5d2897ae4b250d1ddb37fd3042fe8bc7eb00a799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:55:a3:79:cc:7e:29:95:54:f2:03:00:10:
8d:ff:f9:7c:08:e5:4f:fd:5a:b6:c1:58:9f:c7:91:
d1:0c:88:b2:77:eb:c4:2e:47:35:be:2b:70:b6:79:
60:4d:1e:96:4f:50:68:be:90:44:ae:a2:74:2f:c9:
93:f8:ac:a0:11:cf:ac:28:0a:f7:2e:35:46:5a:b9:
1b:1b:69:4c:97:89:54:9a:78:3d:21:72:d4:74:57:
6f:85:a1:87:6d:33:5d:01:aa:d3:05:d0:52:cf:33:
a8:66:4e:7e:58:9a:45:31:41:e3:e8:aa:4d:73:1e:
95:27:d0:3b:d1:7e:03:9c:af:db:ff:b8:d8:c6:0c:
1c:df:65:f3:f9:1e:11:c1:f0:25:6a:26:66:9a:0b:
47:22:f7:96:72:26:4e:e9:4a:58:99:15:21:ea:12:
a6:e7:3b:3c:db:2f:c2:46:dd:88:97:63:d3:e0:8b:
9e:84:9c:3e:a6:2e:2e:cd:ba:a9:63:dd:a1:eb:07:
11:8c:f7:70:e7:17:f0:35:66:0f:18:d6:3e:a7:92:
c0:98:fd:5d:fc:3f:c2:23:52:08:89:22:e9:78:96:
1c:4d:db:6a:d3:0a:e9:82:8d:9b:83:fe:0a:e3:00:
f5:d9:ca:b7:f9:f4:d1:d2:d1:d3:5e:72:39:1a:90:
82:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:28:97:AE:4B:25:0D:1D:DB:37:FD:30:42:FE:8B:C7:EB:00:A7:99
X509v3 Authority Key Identifier:
keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:62:50:59:eb:90:31:96:96:fd:02:63:55:93:f3:1f:4b:61:
a9:40:80:f8:b4:c3:50:a3:33:48:7c:5f:38:93:db:dd:46:4b:
c9:63:a5:d5:ec:37:c4:0d:85:72:0b:b5:34:a1:39:e8:e2:b9:
5b:be:a6:02:60:cf:39:55:5a:85:34:79:a6:5b:95:57:7a:15:
90:c8:42:e0:7e:57:ab:67:c8:ad:f6:6a:11:80:f4:fa:8a:b4:
91:50:7c:b3:df:82:b6:53:b8:53:0c:6a:5e:8b:89:3c:d9:dd:
17:8e:cc:f2:e2:6d:1a:a9:46:29:39:ea:40:d1:b6:cd:bc:47:
10:5a:72:b8:8b:26:ce:2e:3a:97:32:90:d6:cb:dd:25:71:e8:
eb:1f:c7:da:17:47:48:fb:d6:6e:cd:ec:e0:48:97:0b:d1:d4:
79:ad:b3:a3:1d:4d:dd:cb:ea:0f:05:7b:af:2e:83:c2:40:e6:
ff:c2:5b:90:f8:53:82:fd:58:1e:f0:49:af:70:bd:d4:b5:ac:
1e:4a:fd:5b:1d:fc:aa:72:42:88:55:98:81:d4:8c:d4:35:93:
f0:44:dd:a2:23:2b:37:03:85:14:69:15:c7:54:a2:cb:00:3e:
ee:ab:35:d5:83:af:fc:5b:b5:dc:23:9a:75:9a:06:6c:52:4b:
e7:39:12:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 21:08:49 2026 by rpki-client