Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json)
Hash identifier: tZrwAgjDJnhnaS65fgns9UWHL+xWZJXF2tUDuGHX4Gs=
Subject key identifier: 78:73:85:E3:B0:37:6C:CF:D9:46:A2:D8:25:6F:57:4D:FB:5D:EC:4F
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial: 019E2F5FB3452C31BDEC33F4AE0E4AC91E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
Manifest number: 190F
Signing time: Sat 16 May 2026 06:01:01 +0000
Manifest this update: Sat 16 May 2026 06:01:01 +0000
Manifest next update: Sun 17 May 2026 06:01:01 +0000
Files and hashes: 1: 3VLJL7-f2gIaDHt9s5O08zvl02o.roa (hash: nvn//iDJID27yb0p4DmlRMNLDXzJBDmTCGYaGUQJ1lA=)
2: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: mYx0PLlEZR9pKa4LXXBeR8Ym/IwmAklPNapKrC3BKZM=)
3: AK-YlCPEVbLAZegzYkNrI96Oefg.roa (hash: TQp9SWZ90VsXFNcjm672V8NJs6N2oP9XQNZuCEin7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:b3:45:2c:31:bd:ec:33:f4:ae:0e:4a:c9:1e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Validity
Not Before: May 16 06:01:01 2026 GMT
Not After : May 17 06:01:01 2026 GMT
Subject: CN=787385e3b0376ccfd946a2d8256f574dfb5dec4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b2:de:4a:a7:1f:e5:c9:38:37:20:a7:3e:fe:
c8:7d:a2:d1:a9:f3:04:99:de:3c:04:ab:fb:09:db:
15:16:ef:a0:32:bf:eb:70:de:9b:d4:78:ed:b6:1d:
d4:bb:d4:87:86:65:3e:ed:48:62:a0:d3:89:de:c6:
ab:8e:6f:cb:82:fb:ce:41:20:0c:dd:00:b6:b6:6e:
01:d2:7d:58:a7:e0:2e:f4:f7:04:e8:54:4a:00:06:
50:2d:3d:ec:12:19:30:d7:4b:82:bc:3f:53:74:75:
c8:9a:f4:ab:95:5c:d0:a8:c4:3d:90:92:c5:97:7a:
5d:38:9a:ae:b3:f1:cf:1e:fa:5b:c2:bf:1d:57:5a:
3a:ee:ac:d2:df:7b:90:ae:45:75:84:5e:3c:87:3e:
53:af:ce:b4:91:4b:b7:57:71:f4:d7:d1:7b:3e:85:
5e:01:77:34:75:a0:7c:0e:24:fb:36:d8:2f:dd:ea:
05:e5:99:d8:fc:79:6b:98:7b:dd:b6:f9:ce:e9:ab:
e4:08:a8:6d:1f:e2:3f:b2:94:03:b1:0d:0f:8f:be:
5a:26:12:05:37:48:da:03:ae:37:5f:65:0c:c3:5e:
a3:34:f9:25:3f:98:39:a4:88:0c:52:40:bc:ea:f4:
4f:4a:a5:62:f6:d5:e6:c3:ca:e0:27:3f:b8:62:88:
0c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:73:85:E3:B0:37:6C:CF:D9:46:A2:D8:25:6F:57:4D:FB:5D:EC:4F
X509v3 Authority Key Identifier:
keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7b:8d:ae:5c:cd:a8:68:30:0c:22:55:9d:33:4a:1f:d6:1a:
d3:43:40:db:84:72:ae:43:ab:2c:e8:bf:ad:fb:60:4a:78:3b:
f2:07:e4:26:93:8e:a8:3c:3f:fa:50:55:c7:82:40:3b:6a:86:
b8:62:7c:83:86:d5:94:2b:e0:06:3f:d4:d5:1c:eb:cf:95:27:
c6:ca:a5:a0:44:37:23:bc:23:c8:a4:f0:55:ca:3a:37:d7:77:
d6:72:d5:96:18:03:b8:ee:64:3b:01:50:41:30:46:20:0b:44:
28:88:d4:13:cd:ee:c8:c7:3b:82:68:69:5c:66:da:74:3d:1e:
d5:78:c9:1c:da:ab:fd:88:2b:eb:2c:8a:ac:8e:96:37:26:7e:
07:c1:b4:db:c7:ee:90:1b:9d:2f:2d:20:eb:3b:4e:cb:0b:bc:
85:48:f1:a9:b2:a2:8f:66:bb:f7:9e:65:37:8f:b4:c7:7a:ac:
32:3d:61:70:15:b9:64:6e:2e:19:99:85:2f:20:12:a2:01:90:
d0:21:73:29:cb:87:53:14:04:c4:a8:38:d6:c1:c8:b6:2e:e4:
9d:6c:b1:ce:ee:15:49:36:31:a1:d9:89:0a:15:9e:cc:48:d0:
1d:a3:3f:c8:b6:80:0b:42:8c:93:00:c1:f3:55:82:cb:87:ba:
1d:22:69:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:38 2026 by rpki-client