Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
File: 4ucXSfgCklOQH3HUZBA56Q8al_o.mft (raw, json)
Hash identifier: wZy3QoGtCUxJd/dZ0Kxc6sc0cbAlPPe/2cDMIBr8o98=
Subject key identifier: 40:43:BE:C1:2F:FB:6B:86:6E:14:7A:49:C1:BE:6B:D9:95:67:8D:AE
Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
Certificate issuer: /CN=e2e71749f8029253901f71d4641039e90f1a97fa
Certificate serial: 019DDCFA59A78AC549D05BE138FDD5666DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
Manifest number: 0108
Signing time: Thu 30 Apr 2026 06:01:27 +0000
Manifest this update: Thu 30 Apr 2026 06:01:27 +0000
Manifest next update: Fri 01 May 2026 06:01:27 +0000
Files and hashes: 1: 4ucXSfgCklOQH3HUZBA56Q8al_o.crl (hash: edgPilswPQrBsaFsSF9nAfw0z924ExIUaOjPshT5fU4=)
2: JcRsIAV11TxO42T56xBXGNtE8kc.roa (hash: 3pabyOSkwOQBV5aehMnDFgC88a6tehv2gFnKarnZZow=)
3: XbFlHyCBOID9fwZAWWJUvKR3I1U.roa (hash: d1XG1P6bU90g/zeLcvn00HiiT+uT6qBEWhZA1fPBjyc=)
4: ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa (hash: Ilz4iptmtb2hDf1QiYufOvE04YvbCXcLVA+AVaG4uKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:fa:59:a7:8a:c5:49:d0:5b:e1:38:fd:d5:66:6d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa
Validity
Not Before: Apr 30 06:01:27 2026 GMT
Not After : May 1 06:01:27 2026 GMT
Subject: CN=4043bec12ffb6b866e147a49c1be6bd995678dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:1e:a4:9c:db:d8:2b:8f:85:6b:50:ef:b6:
d5:b6:f9:cb:a9:28:e0:4b:5f:82:95:45:1d:0f:7e:
e8:c4:97:e0:19:e2:1c:25:1e:11:9a:25:b5:62:de:
20:f1:eb:38:68:5e:15:d5:84:f3:f0:6b:e5:8e:82:
19:46:81:c5:f8:4c:43:c4:04:f4:6f:59:9c:16:91:
e2:62:d9:36:35:59:ef:3a:80:03:90:a1:4f:b4:ff:
05:68:52:89:67:6f:4d:3e:7b:a5:09:dd:06:f4:bf:
67:e4:1c:90:12:b0:00:b2:57:43:55:93:0e:0c:1c:
18:e6:eb:fc:fa:c5:b4:b1:e1:78:39:e3:76:64:d0:
eb:ee:07:07:d1:f3:52:01:fc:59:6e:13:c0:d0:a7:
b9:e2:e2:f1:43:2a:bb:5e:a0:75:26:89:33:46:87:
a1:26:38:19:9c:2c:64:9e:b8:f9:d7:60:60:92:b3:
65:52:ec:6d:91:91:e2:09:6f:97:5d:a2:f6:79:1b:
2e:38:60:22:79:a1:aa:05:aa:41:c9:19:d7:24:e0:
a0:fb:e0:62:d9:29:e2:2b:e6:81:60:53:51:95:78:
c7:bd:14:94:2e:97:e3:8d:9c:65:ed:d3:c9:74:a8:
34:59:45:c8:f0:36:f0:84:be:86:d7:ce:a5:bb:de:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:43:BE:C1:2F:FB:6B:86:6E:14:7A:49:C1:BE:6B:D9:95:67:8D:AE
X509v3 Authority Key Identifier:
keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ea:36:9f:9f:ec:a4:f2:8b:02:5e:46:e5:bc:56:da:f5:ff:
6c:b0:e1:8d:e6:20:16:fb:62:52:66:42:5a:9a:ff:a5:2b:40:
d7:a8:c7:74:ac:19:53:29:49:88:9d:97:2c:f6:88:56:64:21:
12:41:7c:ae:42:a8:2a:fc:a3:3b:8e:8a:ce:b9:80:d8:41:95:
2c:81:f5:fe:9b:b7:23:5c:2e:c6:b9:6c:63:68:d8:f0:e4:d3:
0f:32:a0:61:3b:fc:03:17:69:91:81:88:fa:5e:e3:bf:71:28:
50:92:f0:d1:32:c8:34:aa:52:6f:d3:d1:2c:ba:16:2f:85:50:
ad:1f:e8:73:b5:8e:69:bb:a5:48:67:41:75:9b:51:d5:93:3f:
c5:76:3c:1c:47:b7:9e:a9:ad:78:dc:64:b0:91:73:4e:28:85:
e4:43:1f:46:53:1b:3b:86:aa:33:f5:e4:87:b1:8f:a9:ab:cd:
d4:95:ef:59:63:72:44:02:00:47:f8:7e:e2:43:2a:2d:c9:bb:
75:05:20:5d:7a:1c:42:eb:80:b9:ec:ad:31:7a:dd:96:36:0c:
aa:dc:c0:5f:0e:87:cb:18:2d:a2:a6:13:5a:14:95:8b:dc:97:
33:45:ae:01:9d:e2:d1:45:c5:f6:9a:c3:a8:42:4d:ab:4e:a3:
5d:25:d4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:48:41 2026 by rpki-client