Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.mft
File: E2bDmPAyEL8XEDc39JCxuXDtQko.mft (raw, json)
Hash identifier: 6IrteUZhMv0iuHRM6FWeNlF2ruS/HIE5vZ1gvk3sGDE=
Subject key identifier: 46:72:A3:85:08:C4:CF:38:DB:1D:1C:F8:4D:45:AC:7D:A7:B3:AF:71
Authority key identifier: 13:66:C3:98:F0:32:10:BF:17:10:37:37:F4:90:B1:B9:70:ED:42:4A
Certificate issuer: /CN=1366c398f03210bf17103737f490b1b970ed424a
Certificate serial: 019E4B453CBD16120646AF71B960D92F53CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2bDmPAyEL8XEDc39JCxuXDtQko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.mft
Manifest number: 4F
Signing time: Thu 21 May 2026 16:01:29 +0000
Manifest this update: Thu 21 May 2026 16:01:29 +0000
Manifest next update: Fri 22 May 2026 16:01:29 +0000
Files and hashes: 1: E2bDmPAyEL8XEDc39JCxuXDtQko.crl (hash: mEh4CGTHgDG0SmM/Pcc++B/Cy3FNrpj6h4EGP7NOWn4=)
2: fIkPV_l_k4SzslIO_m2xCkrW7yo.roa (hash: 4eiXEQq4L1lVAPQNjACQvwiKKs16RCaoEElInvItTzY=)
3: l12NJpIYI2RvZ6Sne8MdQgF3CAY.roa (hash: be9HgbYHtY8qJtefM856XAcCsr78PfK4drNIboDrauM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2bDmPAyEL8XEDc39JCxuXDtQko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 14:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:45:3c:bd:16:12:06:46:af:71:b9:60:d9:2f:53:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366c398f03210bf17103737f490b1b970ed424a
Validity
Not Before: May 21 16:01:29 2026 GMT
Not After : May 22 16:01:29 2026 GMT
Subject: CN=4672a38508c4cf38db1d1cf84d45ac7da7b3af71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:75:0e:6e:63:b9:30:04:f6:5f:67:76:eb:
05:a8:5c:58:24:d6:2c:27:e8:9f:e9:77:f1:b3:63:
56:66:7f:0c:a0:44:33:67:b9:3a:ea:0b:2d:4f:68:
3b:4c:fb:35:a9:cd:f8:44:eb:d4:e2:90:8e:03:63:
de:70:87:23:c3:eb:d6:ef:c8:37:b0:70:c1:7b:5e:
08:38:d7:dd:ee:3f:7f:3a:81:ec:25:f4:b5:d0:7d:
d7:96:61:2c:a1:45:69:30:8c:4b:e6:e1:86:54:f0:
6f:ea:66:b6:f8:44:0f:ac:7e:6c:55:ce:fd:f9:8c:
d5:c8:49:d6:e3:78:0f:96:87:28:ef:6b:b9:03:ae:
5f:7f:41:44:91:d7:19:2b:ec:ae:fe:0b:f2:c9:b4:
4f:2f:31:68:ee:88:01:f3:c9:16:f2:2a:fe:31:2d:
a8:d0:21:ef:33:8f:02:f4:66:2e:e1:68:56:a3:1e:
78:09:86:60:e5:be:58:96:fa:8b:55:13:ca:61:c3:
5f:ff:40:1a:53:40:be:46:fb:c6:89:14:72:39:2e:
30:4c:0a:7f:60:cb:46:06:67:82:b9:3b:b2:e9:49:
93:74:94:00:59:ee:b3:63:97:48:46:a6:41:1d:a9:
60:74:5d:6a:ed:45:14:29:0c:34:81:0c:a8:17:e0:
dd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:72:A3:85:08:C4:CF:38:DB:1D:1C:F8:4D:45:AC:7D:A7:B3:AF:71
X509v3 Authority Key Identifier:
keyid:13:66:C3:98:F0:32:10:BF:17:10:37:37:F4:90:B1:B9:70:ED:42:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2bDmPAyEL8XEDc39JCxuXDtQko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:dc:d0:13:c4:13:1a:65:68:a5:29:a1:fd:de:eb:e1:d7:d3:
e5:60:ba:d4:ea:6a:89:8e:cd:d7:d1:42:96:e7:0a:fa:20:fa:
40:f0:38:43:e3:f3:78:79:59:5c:32:9d:2a:95:89:f1:b7:c8:
db:ce:5d:a3:f4:cd:43:46:99:87:ed:88:b2:27:bf:81:44:c4:
c8:fb:f0:ef:41:91:8d:d7:2d:2f:5b:ff:c5:17:e0:3e:31:7a:
bc:14:16:da:c6:8c:55:ec:b6:ed:e8:a4:6b:f8:a5:ad:8b:e3:
ae:bc:90:91:c3:64:27:b7:e8:ed:53:b2:c8:54:4a:93:00:9a:
5c:6f:88:07:77:c3:09:c6:b4:40:94:bb:af:32:12:b5:41:71:
ab:b4:cd:1b:eb:bb:4e:7c:f9:ac:dd:4e:3a:86:58:ce:9a:82:
11:79:a3:cb:65:62:b2:bc:43:29:c2:60:94:e9:5b:53:44:4f:
31:7e:5a:34:8b:2e:9e:e1:30:da:d5:6d:3e:2b:6a:91:e5:0c:
5d:25:a5:e7:03:97:ec:23:ba:f1:b4:14:64:10:08:57:e5:02:
dd:e9:b2:38:63:5f:d2:ca:3e:a2:b8:14:7c:65:0c:93:bd:97:
17:72:24:ce:d4:9d:ce:a7:66:06:b7:cd:78:2d:43:30:b7:5a:
b5:87:2b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 22:30:23 2026 by rpki-client