Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier: lWSshFuWalknt0rlYuXMcwNXG7hu9mZl95Eg5Klbn9E=
Subject key identifier: DD:33:67:DC:87:E3:F0:0A:B9:71:77:97:57:65:3E:21:13:20:D7:33
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial: 019E314E2C110195E09274682D6894873370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number: 0CFC
Signing time: Sat 16 May 2026 15:01:07 +0000
Manifest this update: Sat 16 May 2026 15:01:07 +0000
Manifest next update: Sun 17 May 2026 15:01:07 +0000
Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: jEPx4oF2rw0d4vec/DoZ4cJ368fcymNsny0XLmxrsFk=)
2: j_t_jFAta10RI31T6FonCloC3D4.asa (hash: Omact/OG1Vjza6tNA6dIAQIik0sg+Ex+j9k7Zm7x4yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:2c:11:01:95:e0:92:74:68:2d:68:94:87:33:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
Validity
Not Before: May 16 15:01:07 2026 GMT
Not After : May 17 15:01:07 2026 GMT
Subject: CN=dd3367dc87e3f00ab971779757653e211320d733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:c2:85:38:c4:e6:03:52:88:15:b2:46:3a:
ba:51:d0:7f:7b:34:d2:5e:02:f4:98:af:11:df:70:
60:ee:b8:0d:74:77:aa:da:fa:da:3d:c8:82:35:ee:
91:65:4e:c2:16:37:21:ff:2c:93:5d:db:39:94:35:
1b:71:c2:90:c7:47:fe:6b:ee:81:02:b0:b1:ed:3b:
81:f8:3f:6d:a5:80:c3:93:40:f9:e0:93:4b:65:e0:
18:5c:00:c3:98:52:3f:79:0d:01:87:8d:40:8d:fa:
d2:81:a2:3d:0b:dd:78:e7:91:66:6d:71:2d:cb:64:
5c:0c:3e:65:02:85:d9:bc:ea:e3:8f:0b:d3:3d:39:
0f:94:dd:a4:6c:c7:98:a7:04:c2:9e:b4:ec:fe:d7:
dd:2b:d3:4c:a0:de:d2:0b:3e:80:cb:7b:af:18:85:
cc:b2:27:c5:14:4d:51:13:fb:02:6a:3e:b5:be:6b:
7f:22:92:7d:14:46:9f:ef:d5:a1:8e:a4:c9:08:e6:
87:6d:9f:d8:75:b0:9a:03:52:26:20:84:83:2d:5b:
10:bd:f5:30:ae:2f:e5:1c:ad:8e:23:f4:5f:1b:e7:
70:84:94:d4:dd:9a:bc:b3:2b:3e:da:c6:a1:fa:3d:
0e:9c:f8:45:9c:6a:9b:21:99:f4:8e:4d:7f:77:55:
3d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:33:67:DC:87:E3:F0:0A:B9:71:77:97:57:65:3E:21:13:20:D7:33
X509v3 Authority Key Identifier:
keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4b:9d:7a:42:86:d5:f4:b4:65:d8:8d:cf:ff:d5:b6:4c:4a:
8a:87:6f:c2:29:92:0c:15:a6:25:9b:a3:e4:f5:53:27:f5:7e:
b0:1b:18:d7:21:70:6e:6e:2d:3f:48:4f:21:78:93:4b:fd:f4:
f4:85:b9:0c:1c:b0:9b:3a:f0:3b:c3:e0:a3:87:cc:21:cd:5e:
e9:2f:91:3b:0b:ca:15:fa:b1:dc:dc:51:10:fe:b9:ee:cf:f0:
c0:cd:2c:68:44:46:b2:aa:8c:91:46:04:8c:d8:29:3d:88:a9:
56:bc:34:01:24:43:fc:4c:f9:cc:8a:71:16:6f:29:ea:f0:56:
e8:47:46:c2:76:1a:9f:5a:95:08:c0:cb:4c:4e:fc:c2:d8:b3:
f4:79:71:50:48:63:4b:f3:97:4c:1f:ce:52:4a:7e:27:28:b3:
bb:22:9b:82:0e:88:40:4d:91:33:bc:64:84:2d:dc:ad:55:bb:
00:4f:bc:53:5a:d8:2f:34:bb:c9:90:70:72:2d:da:ca:66:c0:
3d:e4:ae:3c:8d:85:d0:ae:5e:3d:cb:34:a1:0c:bd:1e:b2:bb:
22:5e:75:e0:22:c9:a1:e9:d6:e6:9a:66:26:3a:30:eb:b7:d0:
5a:9b:5c:40:e2:be:79:4b:1e:b5:b6:86:50:f0:f9:de:61:b9:
0c:55:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:22 2026 by rpki-client