Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: ZteXPNTIQqHXIZdtdIIVX6+rYlBxR0eoGw+pHIIDPH0=
Subject key identifier: ED:BF:75:16:3D:6B:2C:DF:0E:ED:6C:18:FD:3A:86:89:53:51:CD:99
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 019D9C2C946272DA77990B9A83F6DC23278F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 0B01
Signing time: Fri 17 Apr 2026 16:01:00 +0000
Manifest this update: Fri 17 Apr 2026 16:01:00 +0000
Manifest next update: Sat 18 Apr 2026 16:01:00 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: csv+mxjgwbACl8uBDAUoRZHTcIzrWrHq9I0cHRSOxkM=)
2: OPFTuLGWkU6mUdnCpgOtMP0wcEc.roa (hash: mYTV++dJNwiiA96b08GGaua3APnQu69gvPcnLc6GiRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:94:62:72:da:77:99:0b:9a:83:f6:dc:23:27:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Apr 17 16:01:00 2026 GMT
Not After : Apr 18 16:01:00 2026 GMT
Subject: CN=edbf75163d6b2cdf0eed6c18fd3a86895351cd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:5f:a4:0a:87:c2:4e:a9:b4:ac:8a:e1:82:
27:38:84:31:ef:f1:ca:15:80:29:1b:c3:f3:10:7e:
2e:54:6e:2e:d1:c6:03:21:7c:6e:53:e4:32:10:22:
d6:f2:97:e4:b3:60:53:1c:6c:fc:f6:da:de:51:71:
f9:20:d7:e8:01:90:8d:91:8e:75:1c:e5:4e:53:32:
6d:ce:20:4a:a8:5b:a4:e2:48:cb:34:ac:84:7c:17:
69:c0:fd:9b:b4:3d:10:e9:63:bb:f1:91:29:86:a9:
b3:6e:76:b6:4d:5e:c3:c1:f6:58:de:15:99:8b:a2:
71:8b:f8:1f:ed:87:69:e4:da:aa:2c:19:ae:52:18:
29:3d:9f:96:04:b1:ae:34:cb:66:cf:ef:11:18:75:
e5:1f:d2:e5:16:35:05:3a:f1:f6:96:3a:5b:b0:dc:
e4:5a:b0:fd:b3:45:5f:cd:52:f3:e2:ef:22:15:e5:
6d:00:dc:05:c5:fa:5e:c5:78:34:06:12:c9:b7:b8:
54:54:65:06:20:74:ca:8f:da:0e:a7:29:b4:5b:79:
c0:fa:92:be:b3:f1:5c:39:46:ce:f4:23:30:97:af:
5a:b7:5e:53:89:30:9b:bf:1e:09:05:d1:bb:bc:96:
71:ea:7b:2a:c7:95:40:e2:0e:01:f0:43:22:29:a0:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BF:75:16:3D:6B:2C:DF:0E:ED:6C:18:FD:3A:86:89:53:51:CD:99
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7d:df:d9:69:0d:b8:9b:d4:06:2c:1b:16:c0:69:31:d9:6f:
7c:be:d0:95:87:95:94:41:34:c7:9f:15:f3:43:58:80:27:95:
ad:5e:64:c7:44:8f:aa:60:77:e4:a2:05:ab:d2:8d:f6:48:cf:
78:f3:73:71:7e:fc:7d:a9:82:18:ae:d1:8b:45:0b:19:1c:6d:
dc:44:53:6c:53:f9:7a:44:ff:a1:77:c3:76:4c:5c:a6:5a:be:
63:b0:18:3e:08:df:51:6b:8b:3d:cc:2e:36:ed:d7:49:28:c6:
63:f9:e1:48:ca:9f:43:7f:d1:de:de:2b:9f:dc:e1:7b:e3:d1:
60:ff:1e:e2:7d:78:fc:17:65:02:0d:1d:71:35:50:01:91:e8:
d1:a2:91:b4:1b:de:55:5d:c7:b5:f1:56:eb:d5:9e:8d:8a:17:
bb:32:16:4b:b3:3e:0e:85:68:5d:f8:17:c3:fe:06:f7:53:9a:
e5:ee:e7:5a:2c:dc:c8:43:b4:d9:50:97:ec:c7:e1:bc:01:4e:
02:32:1d:23:fd:60:c0:d0:8d:78:31:7c:75:25:f1:c2:24:ca:
91:23:05:02:fa:75:60:1d:40:09:08:f0:5d:8a:5b:05:7f:d5:
11:38:78:28:c2:dd:49:98:0f:8f:4d:a0:e0:fa:03:60:01:5d:
a0:dd:c3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:53 2026 by rpki-client