Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier: D22orVZF27NLQuW2HqQ+2Z9YHlh4ew86jz6xyDg9CSQ=
Subject key identifier: 42:98:E1:97:0B:08:4B:1E:14:3F:BD:F9:C7:AA:31:8B:16:2F:5D:04
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial: 019E3004C68A07D512BAC6F54863BB7C4822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number: 1790
Signing time: Sat 16 May 2026 09:01:19 +0000
Manifest this update: Sat 16 May 2026 09:01:19 +0000
Manifest next update: Sun 17 May 2026 09:01:19 +0000
Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: /59X7L9HNkNBuSNHwverVEv6ClnuqTMVnjafyQWqdd8=)
2: wxMlSMWtQ0ndBMMV3tfXfzI4pMo.roa (hash: Cum4Di2WX2Vf5OYvq7GxldvC9jsMY0qM5fo7QBzndMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:c6:8a:07:d5:12:ba:c6:f5:48:63:bb:7c:48:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Validity
Not Before: May 16 09:01:19 2026 GMT
Not After : May 17 09:01:19 2026 GMT
Subject: CN=4298e1970b084b1e143fbdf9c7aa318b162f5d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:4d:06:34:63:e8:4d:f1:3c:44:46:e4:ae:c8:
80:79:4c:c8:07:d2:bf:46:b8:c9:d9:48:5d:54:d1:
00:19:90:b8:12:3c:18:2c:12:92:da:d0:59:6a:f1:
19:f6:7b:7b:7d:21:52:f4:d0:10:ae:e0:8d:b7:40:
80:8b:84:44:4a:c4:f0:e2:33:cc:91:6e:19:c8:b7:
05:de:35:20:2d:42:8d:29:09:9a:1d:bd:9e:fd:85:
4b:0c:1b:78:b7:ef:81:bb:eb:d6:c4:91:d3:e2:e4:
38:a4:13:63:bc:42:77:43:5d:77:df:67:90:9a:40:
f0:3c:dd:a4:a2:c0:ed:70:d1:5c:10:69:11:7c:f6:
2f:8c:55:2e:93:dd:f0:23:0d:cc:06:8a:cd:e9:4a:
4b:a4:9f:4c:73:64:aa:4b:4c:bf:04:ee:04:00:f9:
41:e0:1b:01:dd:f9:42:b9:0c:9d:df:eb:42:af:93:
5a:c0:a9:0a:f5:e8:0a:f3:6c:c4:0f:a4:db:a3:32:
9b:33:38:7a:f3:f3:d6:7a:b4:d9:c7:e3:36:18:0b:
a8:a4:20:ca:e3:b2:cb:3f:55:ee:84:ff:7b:d1:6e:
99:57:4b:d6:06:11:f7:70:d7:24:fa:8a:84:72:1c:
08:ba:54:6e:bf:0f:af:b0:78:0c:7d:60:80:d2:06:
a9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:98:E1:97:0B:08:4B:1E:14:3F:BD:F9:C7:AA:31:8B:16:2F:5D:04
X509v3 Authority Key Identifier:
keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:36:1f:90:2c:de:e9:86:15:bc:0b:0d:19:5f:73:fc:d9:9e:
88:a6:6a:0a:12:6c:02:c7:be:9d:71:8d:ae:cb:26:6f:e7:3b:
43:ac:e2:da:e6:be:16:57:1a:9d:37:a1:bb:78:f1:54:68:88:
d5:f2:a7:92:f9:22:9d:83:64:87:95:77:15:fb:68:80:6d:fd:
d3:b6:4c:f2:39:aa:78:44:b2:7f:f1:c4:12:da:fb:91:32:df:
34:4e:2a:dd:26:27:d4:5d:f7:4c:0a:cb:95:00:87:98:1a:a4:
ba:5b:6f:b9:32:8e:64:ae:2b:ef:91:1d:cf:26:38:92:db:f7:
9f:d6:99:e5:b6:cc:f0:e8:11:ce:8b:58:bd:76:d3:ca:bc:d8:
31:92:45:7b:2d:72:79:16:aa:b3:08:9a:c6:87:b0:10:fd:b3:
e6:fa:dd:b2:cd:b0:13:af:d0:e8:73:03:b4:54:e0:39:86:72:
dc:af:38:5d:d5:4e:e9:fe:c6:54:bf:37:ce:9d:34:b9:ee:a7:
07:94:6b:ee:57:be:3b:ad:63:08:0f:8b:38:2f:14:99:f8:78:
91:9a:c4:e0:d7:c1:60:58:9c:ad:7e:5a:62:6d:4d:c8:36:25:
c7:16:c6:b1:15:23:b1:67:8b:f5:28:37:da:e1:32:87:9d:8f:
f3:81:50:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:49 2026 by rpki-client