Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier: hVnoCKV1V1M8Xgzx726OcA69Shz7E5zocVETcaQ2ZtM=
Subject key identifier: 48:E1:FC:F3:D6:AE:13:3B:20:32:A0:E2:E8:03:57:43:01:46:DF:59
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 019E2A02222012B2317A79C88AE7810635DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number: 121B
Signing time: Fri 15 May 2026 05:00:43 +0000
Manifest this update: Fri 15 May 2026 05:00:43 +0000
Manifest next update: Sat 16 May 2026 05:00:43 +0000
Files and hashes: 1: Br3g91W4evf2A8FX4-nPHSqH7Oc.roa (hash: gTgHpNU+s78J1A+sPr7pjfV/Fs0kKMeRldiNIgByjo4=)
2: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: hdrs3+JycYE5cxSDDhTUf4LCmiAUJiFe4UFQuOHrkcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:02:22:20:12:b2:31:7a:79:c8:8a:e7:81:06:35:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: May 15 05:00:43 2026 GMT
Not After : May 16 05:00:43 2026 GMT
Subject: CN=48e1fcf3d6ae133b2032a0e2e80357430146df59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:41:a9:95:45:51:d4:6b:04:55:d9:e8:20:89:
f0:c8:da:1d:0b:7d:88:8b:59:8f:80:1d:7f:2d:5b:
b0:ef:10:e7:09:76:5f:f3:05:67:8a:0c:51:d4:cf:
34:da:3b:53:64:3f:b1:f5:2a:79:18:53:78:28:c4:
5d:d5:d4:24:7b:1d:69:58:e7:8f:20:ba:b8:ea:4b:
bc:bc:5b:fe:a2:68:ba:bf:50:66:1b:d8:ac:46:a5:
78:1f:e1:e1:ef:28:d6:01:96:d1:0d:64:37:6a:16:
a0:de:ce:d6:26:79:e9:4e:ee:98:8d:b2:fc:e8:69:
6c:7f:6f:15:f9:8c:31:df:bd:01:36:64:e8:f6:b2:
b9:54:ee:08:36:5d:17:13:eb:42:80:56:57:9f:dc:
fc:36:57:1c:76:7d:cf:36:36:b6:48:49:99:13:c6:
4d:17:53:11:ac:c5:ca:f1:64:83:c0:f6:0e:dc:3a:
45:3a:e6:e0:78:37:11:aa:eb:74:4e:a9:c0:6f:a8:
50:09:91:0f:ae:13:65:82:6e:cc:ff:c1:df:64:31:
da:77:87:6e:e4:b3:b2:51:63:9d:ca:51:64:14:c1:
2f:3e:eb:ec:75:7e:00:db:0a:2a:85:f5:f1:a0:9a:
3a:dd:45:f7:27:3b:81:49:2c:e8:6c:a5:4d:f0:96:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E1:FC:F3:D6:AE:13:3B:20:32:A0:E2:E8:03:57:43:01:46:DF:59
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:12:8a:a8:5b:61:56:c2:1e:b1:f6:64:62:38:10:be:2e:d7:
1e:04:7f:19:f5:1b:ea:bb:bb:4c:a2:6e:e7:59:b7:1c:2d:e2:
b7:25:db:c0:16:ad:67:23:5c:46:0d:75:db:31:1d:5f:a5:66:
12:f8:86:c1:74:63:bc:97:7a:3d:3e:f0:ce:7b:48:bd:d1:43:
9b:e9:3d:95:56:81:fe:63:cf:7a:8e:50:23:9c:56:41:9f:64:
7f:db:af:c2:14:a6:e6:25:03:c3:90:cc:19:04:38:f8:49:5d:
0a:1f:fd:0e:be:e1:ff:e1:00:32:2f:58:0a:31:26:3d:fe:cf:
4f:c3:e1:b9:63:1d:2a:7f:c2:ec:70:8b:4b:ab:72:29:c3:b5:
e9:2f:32:db:df:f3:0c:e9:8d:27:f9:a8:08:ff:b8:ae:09:cc:
f5:06:ad:38:aa:77:17:d5:36:7c:c4:cb:24:66:6b:03:03:1e:
f1:6e:bf:42:1d:b7:ad:fe:26:2d:9a:73:c6:53:e0:c4:ae:a4:
ee:06:4b:ae:91:30:a6:67:21:0c:f0:da:3c:af:4b:5b:9b:cc:
49:69:42:3e:6c:af:f2:75:4b:7a:fc:44:6b:9e:e9:62:ca:49:
0f:bc:1c:fd:30:b2:67:8e:8d:70:01:41:d9:8b:90:67:db:bc:
55:a7:27:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 12:43:08 2026 by rpki-client