Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
File: 4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json)
Hash identifier: 6sgmzANDPISoVqjPpyeYN5HHK9gyvztp43Ns4p1+Ts0=
Subject key identifier: 2C:13:A5:C5:29:55:1C:E6:DC:C8:C1:71:9D:D0:56:EF:B4:FA:21:04
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial: 019E2F9787B7618F5EF81FC38CDD06DA9129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
Manifest number: 0573
Signing time: Sat 16 May 2026 07:02:00 +0000
Manifest this update: Sat 16 May 2026 07:02:00 +0000
Manifest next update: Sun 17 May 2026 07:02:00 +0000
Files and hashes: 1: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: khQM3+C1g3tf096ErqfxxVg0b0hpQP8LUxi6sAoCwYI=)
2: lmDwmz-GtyiaNLLugK40qWh_h8s.roa (hash: v9wEGxooeJNf+ZcLBoaKH/aJqtCxaC4olgQz9drbKc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:87:b7:61:8f:5e:f8:1f:c3:8c:dd:06:da:91:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
Validity
Not Before: May 16 07:02:00 2026 GMT
Not After : May 17 07:02:00 2026 GMT
Subject: CN=2c13a5c529551ce6dcc8c1719dd056efb4fa2104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:c3:98:9f:d7:28:ad:eb:d1:58:b9:d5:e4:
22:b6:b9:02:45:9e:aa:08:48:48:38:a4:61:a0:ea:
8c:94:b9:36:97:9d:94:de:6d:fb:dd:d4:3a:18:41:
9a:0d:ce:5e:e4:21:24:65:cb:24:c1:43:a8:54:83:
d1:8b:f1:17:a3:40:48:f5:54:c4:b2:95:7c:8f:35:
b3:ab:4c:34:17:29:6f:62:e2:d5:ea:8f:0c:6a:57:
39:a4:c0:80:ce:ea:8a:b6:30:df:66:98:82:1e:97:
13:62:32:a0:7d:54:7f:95:7a:33:ae:14:f9:e5:f0:
d3:ce:a5:ca:5a:ab:9c:1f:90:3b:ba:8d:6c:b4:44:
c4:11:cf:bd:92:b5:05:50:1f:a0:8a:0f:b6:a4:9b:
93:1a:c2:1f:c7:26:c8:d7:71:2b:ae:20:71:75:d8:
3f:cb:ae:89:0d:7a:b9:72:2f:70:09:92:ac:5a:eb:
d7:94:be:1a:cb:21:a8:58:42:77:13:67:13:3d:7d:
75:4a:0f:66:36:9b:c8:a5:00:73:ab:d7:00:0b:13:
ce:90:63:c7:0a:3a:30:5a:f7:b7:01:d0:1a:79:6b:
8d:31:8f:6e:b2:43:d6:90:83:1d:6a:80:81:86:0f:
38:f1:33:f6:50:08:40:9d:d5:8f:96:ed:25:6d:d4:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:A5:C5:29:55:1C:E6:DC:C8:C1:71:9D:D0:56:EF:B4:FA:21:04
X509v3 Authority Key Identifier:
keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:e1:af:e0:1b:38:8e:c9:99:38:c7:4f:cd:98:07:16:3c:33:
e1:c8:1a:97:85:32:3b:c8:b4:e5:5f:47:e8:dc:52:b8:12:51:
8b:db:a5:fd:8c:6a:29:a6:e3:1d:9f:14:d0:f6:a1:49:4d:3c:
3a:e2:63:0f:8a:0c:ab:4b:48:7c:14:82:fa:74:79:df:20:ea:
a3:8c:24:75:89:dc:b4:51:a2:72:08:43:89:5a:98:83:cc:39:
46:af:41:ea:bf:8e:94:dd:00:63:f9:7c:2b:4d:b3:53:e8:38:
29:28:70:99:1a:58:f3:39:99:49:04:16:c2:e5:b6:61:24:bb:
07:25:57:18:03:57:00:ff:66:a7:d8:2a:99:d5:b3:9b:a0:ba:
52:06:ba:a3:81:b7:8f:07:26:eb:6d:d3:8e:e2:df:ba:9f:c9:
ef:64:d0:63:44:36:c1:fa:b0:22:6d:af:55:3f:53:e1:e2:88:
62:d3:f9:8b:56:e7:9c:fa:42:4b:ce:88:0e:db:14:f7:3b:80:
d1:bc:f1:9b:e0:9f:d7:42:79:99:d6:3e:56:34:94:74:72:63:
0c:d3:55:bd:5c:de:c8:c0:05:dd:6c:5f:74:f9:94:31:30:3a:
93:bc:87:35:bb:40:65:c4:ef:68:7a:87:d9:fb:e1:8e:4e:51:
a1:31:e5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:03 2026 by rpki-client