Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: wfVPo/iclYQGhotVsMzd7x2PeF6QAmShI0BNYvePIJs=
Subject key identifier: 13:99:4B:EC:B4:3E:83:F3:78:B1:5B:DE:61:2F:35:D6:A2:CC:9E:91
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 019E3117ACA0E7FC85A74E6CB21137C933B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 14:01:35 +0000
Manifest this update: Sat 16 May 2026 14:01:35 +0000
Manifest next update: Sun 17 May 2026 14:01:35 +0000
Files and hashes: 1: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: sb+TqFGimiCZxWwOZ046bS90Gous7Ekg9BbfAx6M7B4=)
2: jbafLlCB65wc3lu8qCmYl11AIFk.roa (hash: K+M36ULpoKKc2R4rksKlSojLYrf7EhhEe4ldkXRNVqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:ac:a0:e7:fc:85:a7:4e:6c:b2:11:37:c9:33:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: May 16 14:01:35 2026 GMT
Not After : May 17 14:01:35 2026 GMT
Subject: CN=13994becb43e83f378b15bde612f35d6a2cc9e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:49:84:a7:fe:2c:59:18:47:b5:de:05:3e:05:
dd:36:ff:63:d1:2e:93:d4:6c:82:ad:4d:25:c2:91:
66:91:6a:2f:48:77:14:e1:c2:e6:fd:70:92:26:41:
ee:f0:45:77:27:4b:a4:d0:c7:c6:4f:01:f9:f3:8e:
47:f2:63:1c:02:33:0a:2f:0f:b2:8b:0d:b4:47:b7:
f2:16:f4:c7:26:3d:c0:25:7f:3c:4d:49:cf:12:96:
80:94:1d:85:64:86:bb:bb:6e:e1:49:3d:68:be:8e:
a4:4c:02:36:98:32:3f:60:08:c5:a1:a0:85:ff:3f:
fd:1f:82:18:de:c2:7f:3c:96:31:0d:1b:5f:b5:1b:
73:3d:3c:cc:56:df:93:2d:2f:26:06:be:9f:ad:45:
93:7f:83:7f:0e:89:1c:e4:2a:de:b6:d0:c5:3c:8e:
79:82:94:59:69:86:bb:ca:9c:09:40:6e:33:ef:a0:
44:e5:a4:a4:25:85:48:48:3b:ff:fd:fb:d0:66:0a:
4d:e4:68:9c:5f:81:15:40:42:b4:36:ab:b6:9b:0c:
a6:95:3b:cb:30:bb:95:b2:32:81:37:3b:05:42:db:
b9:af:9e:fc:9c:56:94:e9:19:e5:c1:51:3b:3e:0e:
19:8f:5d:9a:12:19:84:af:07:7b:0d:d3:4d:d0:e9:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:99:4B:EC:B4:3E:83:F3:78:B1:5B:DE:61:2F:35:D6:A2:CC:9E:91
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:77:cb:76:c2:20:dd:e0:e0:f2:a0:17:eb:b8:eb:98:46:d7:
ec:5b:60:bf:a3:a8:b8:1a:b6:c8:40:d2:90:44:67:fc:2d:9c:
c9:4d:ad:f1:bd:cf:ab:6c:2c:c5:cf:99:36:cb:47:5f:05:8e:
ad:25:c2:0e:1a:16:4d:c3:32:c0:dd:b6:16:14:c7:f9:2a:f3:
e8:cd:cb:77:1a:c5:98:6f:5f:d7:3d:18:ce:e8:25:0f:be:ca:
b7:e9:6e:fb:47:33:24:56:0c:5f:07:28:ff:16:57:31:43:51:
94:25:c1:fa:f6:c4:45:f5:4e:29:92:a1:42:ff:1b:e8:ab:54:
ba:2b:05:e4:6f:f2:89:8d:b3:de:5a:a3:b0:13:a3:54:3a:2a:
30:60:49:83:c7:d1:4d:d1:d2:d4:8a:09:23:10:75:fe:79:53:
9e:72:fe:11:2b:3f:d6:56:b0:35:7a:13:56:4b:27:17:dd:e2:
c0:81:e6:5c:fb:aa:8a:44:b5:eb:ea:26:9a:f6:55:49:f9:31:
b5:76:e0:e1:4b:04:2c:96:fd:fd:87:3e:39:5b:6a:ca:07:db:
d6:6f:e1:9d:fa:1d:04:09:43:9a:51:b2:54:71:b2:ca:da:43:
11:73:65:79:b5:42:e1:9b:f7:47:10:d3:f2:42:c1:29:62:25:
84:cf:63:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:43 2026 by rpki-client