Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: iapVrYHxYzA7b2ioLS6gvZhigDsjM+bCDA1KqSNGHLk=
Subject key identifier: 83:19:5C:DA:5D:A1:FC:BD:58:BA:6D:3C:DC:5F:AF:71:21:B7:68:F5
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 019E31BBA5AFC3CB9BB7DC1A9554F88D7767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 0ABD
Signing time: Sat 16 May 2026 17:00:41 +0000
Manifest this update: Sat 16 May 2026 17:00:41 +0000
Manifest next update: Sun 17 May 2026 17:00:41 +0000
Files and hashes: 1: OBJUqWKdq6kiQbp0gg2le_lxwc8.roa (hash: Q6TNVRFJT35RFtqmG8IVN0WlQLvaNhPi6XH41fNOOas=)
2: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: cc5PEgnZSY27oZZQcO2makHfpHhIxLykKOsYp2LWQ+0=)
3: pDXgmFSEjeXu5kTO9JnxKOTny04.roa (hash: zBFnWy98uBKGBRB8AClKYux+jyTzJfSF7W9SKPlT+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:a5:af:c3:cb:9b:b7:dc:1a:95:54:f8:8d:77:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: May 16 17:00:41 2026 GMT
Not After : May 17 17:00:41 2026 GMT
Subject: CN=83195cda5da1fcbd58ba6d3cdc5faf7121b768f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:e0:ad:53:30:83:54:71:14:ec:fa:6e:ac:
99:ac:1b:84:a4:57:61:be:ab:f3:44:3b:bd:56:9a:
fb:5e:81:b1:20:f7:62:22:b6:c9:c1:ff:62:c3:88:
b3:69:57:2f:bb:fe:39:d9:f8:4f:a3:f1:ea:17:cb:
6b:5b:d0:f1:c4:41:62:b6:b6:29:81:8f:ee:a0:f9:
38:91:21:16:08:02:4d:36:25:04:f8:eb:66:86:9b:
18:cf:1a:38:2a:e7:3b:cc:7f:a5:47:02:96:e8:cf:
ee:bd:17:3f:8d:a5:9e:99:02:6d:00:51:ea:6d:40:
e1:be:ce:7f:9b:8f:df:1c:ec:a7:90:43:9e:9b:bb:
12:61:53:07:21:05:91:ca:75:0b:9d:80:c7:10:24:
b4:7c:9f:30:a1:38:37:0f:0c:95:83:33:97:7e:cb:
2e:bd:e1:74:c4:d1:fd:50:e4:22:d2:ed:d9:ea:47:
f0:71:2e:bb:80:ac:37:67:82:68:fb:72:52:cf:ec:
64:e7:30:d6:44:bd:79:68:5f:12:43:6c:38:47:bc:
59:21:b0:aa:b8:33:59:5a:9b:28:56:dd:b9:62:d6:
44:94:4b:d6:a1:2b:2e:b3:9a:d8:b5:58:34:a2:05:
97:bf:29:b7:31:4c:0a:93:8f:fa:a8:18:6b:56:d7:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:19:5C:DA:5D:A1:FC:BD:58:BA:6D:3C:DC:5F:AF:71:21:B7:68:F5
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d9:a9:54:d3:47:bb:0b:f7:42:a6:a3:1d:62:31:5c:70:89:
a8:9d:d7:7d:62:25:c1:de:51:34:c4:82:a9:c4:c6:1a:b4:64:
08:d3:94:25:95:05:1d:be:2d:20:54:52:54:0f:74:4f:bb:85:
9a:e8:f1:d4:a1:7b:4e:53:eb:1e:a2:de:6f:5c:71:be:57:ef:
83:73:3f:97:b2:0a:8a:d7:e4:56:88:c4:46:8b:d4:49:3d:0b:
8d:06:77:79:52:65:b4:1a:f4:72:0e:45:1d:9d:15:52:9a:a0:
b0:be:ef:3f:4c:c4:eb:c4:cc:c5:ac:00:fe:98:26:8f:a5:09:
a6:c6:ad:51:04:30:b5:64:0e:3b:46:1b:d9:ea:db:32:70:13:
52:85:05:47:bf:24:bb:0f:59:5b:a0:bf:33:e4:a1:be:64:0e:
21:4f:40:57:35:26:8c:40:8d:3d:ce:d0:e7:4f:01:bc:75:dc:
ed:4c:51:fa:b6:fc:23:06:dc:69:e9:b0:3d:e2:69:0e:3c:cc:
17:8e:44:b5:55:e0:57:2d:7b:38:6c:d4:2e:90:f7:d4:9d:00:
b8:51:09:79:ea:15:17:00:c5:14:87:70:8d:0d:69:0a:cb:51:
66:fb:b0:b4:de:b4:6f:74:8a:ca:89:10:52:1d:ab:cb:78:d9:
9a:96:23:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:28 2026 by rpki-client