Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: bt1PpiPzHhMaG2jPto6mdcTRjzShquAwpgkgM+8nD6A=
Subject key identifier: 50:0E:97:88:20:37:94:A1:CA:5B:4A:19:36:79:06:2B:0B:63:8F:16
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 019EBEECEACA1F4AD98CF4ECCF28DFB4ED39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 0D14
Signing time: Sat 13 Jun 2026 03:00:58 +0000
Manifest this update: Sat 13 Jun 2026 03:00:58 +0000
Manifest next update: Sun 14 Jun 2026 03:00:58 +0000
Files and hashes: 1: CWBx_YaW55wp0Q8nHPmUDJfmm9g.asa (hash: sICMwCqCa7TLjDMZRJ5VqSQf7cfIQN96H4gFU0ZqRjs=)
2: a3t44Injkb3R_GXSuc0dS5CiLrY.roa (hash: zbUvHz7MU2Z+aJkIb7Yi+6/dp3AtOWPuD0S1MFlgedM=)
3: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: EWIp3qen9oIUhWp19iBldnF4q8N6kmT7853HCNsLlZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:ea:ca:1f:4a:d9:8c:f4:ec:cf:28:df:b4:ed:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Jun 13 03:00:58 2026 GMT
Not After : Jun 14 03:00:58 2026 GMT
Subject: CN=500e9788203794a1ca5b4a193679062b0b638f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:45:5b:2e:83:5e:3a:e4:fa:cc:e3:ec:4e:
64:87:a5:3e:a7:79:56:61:15:84:cb:d6:1b:c8:b6:
0f:23:48:b8:60:fd:06:4b:cf:c0:05:00:97:bf:24:
a2:f2:95:8f:b7:8b:36:36:17:b1:b7:be:86:10:e0:
1e:dd:12:bc:4d:43:9a:b1:79:d0:67:30:d7:06:d9:
4f:c6:0c:a5:e0:d9:0a:4b:55:db:0f:4d:c7:6e:9d:
41:d7:c1:e7:c1:22:a8:90:4b:92:04:0f:af:d9:99:
1c:8e:05:72:be:92:27:98:4f:16:8c:4d:86:83:ec:
41:f9:4f:ab:20:5d:27:81:8d:44:ed:46:00:6e:7a:
86:73:e5:67:0d:63:05:fd:d1:59:64:2a:67:c9:97:
89:3a:8a:a0:ae:9d:0d:9e:b8:b7:a5:45:c1:89:a4:
60:75:55:d4:35:c2:14:ef:23:c1:ba:1d:6b:0b:18:
c6:9a:30:6e:c1:4a:7d:89:eb:44:d5:0b:d2:4a:08:
3c:6e:c8:d8:40:6a:ad:2a:9e:20:4b:78:72:e7:97:
e1:ae:31:0e:90:ea:56:ee:02:c5:4f:fb:f9:0b:0a:
b9:c5:c9:b8:8b:cd:01:a1:0b:6f:b4:13:1d:20:48:
9e:a5:49:21:53:0c:27:03:56:a4:f0:43:57:0c:57:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0E:97:88:20:37:94:A1:CA:5B:4A:19:36:79:06:2B:0B:63:8F:16
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8c:d4:c8:5e:c6:f5:c0:b7:59:b9:35:1d:2f:fe:bf:ef:08:
d3:1e:d9:59:28:e7:4d:5a:e2:2f:f3:c0:c0:1c:e9:9d:6b:27:
ab:af:40:68:98:4c:e4:3a:64:0f:3b:31:ce:4e:a7:7f:34:c5:
2b:a5:82:7a:32:28:ed:b8:22:5a:50:71:43:35:cb:fd:6e:d5:
f9:71:93:02:14:b3:b7:72:7f:39:86:ab:b0:5b:92:2b:72:8a:
9d:ec:35:3c:2e:d9:0b:03:ef:ec:57:b2:ef:82:bc:1a:c4:7c:
97:d4:f9:df:4b:12:19:f1:fd:e2:97:bf:09:0a:7e:23:91:c2:
9a:4a:95:5b:90:40:44:71:77:21:98:b5:e6:f2:e3:d3:83:18:
3d:55:a6:2d:f2:87:c9:40:70:da:89:a3:00:89:d5:a7:25:bc:
f3:fb:f3:e7:45:fb:77:1a:a9:b7:ab:de:b8:43:15:2b:20:1f:
1c:c9:4a:50:96:df:31:6d:62:06:fc:a9:97:bc:da:74:b3:2c:
fc:e6:dc:0a:2c:6b:af:2f:62:e8:6e:8e:11:43:1b:58:23:e5:
67:36:2f:52:30:b9:0a:42:73:5c:fc:33:5c:02:a4:6e:72:bc:
59:c0:f6:c3:70:25:31:b3:bc:e0:52:73:f5:f2:9b:67:78:9a:
58:08:fb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:48:39 2026 by rpki-client