Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier: fBIUGSI0LED4h3NtoWUqf0FeWmLMfyu2IQno/Jr6mug=
Subject key identifier: DB:12:00:14:32:AF:4E:0C:6B:39:73:97:5E:CF:54:9F:AC:11:0D:52
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial: 019D9A3E12E9BEB631F9252B6EE34EE38375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number: 0953
Signing time: Fri 17 Apr 2026 07:00:52 +0000
Manifest this update: Fri 17 Apr 2026 07:00:52 +0000
Manifest next update: Sat 18 Apr 2026 07:00:52 +0000
Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: 50xuxxwNxAeDxW92D8P+ydo3QqJYXLuTNbQuezGHzH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:12:e9:be:b6:31:f9:25:2b:6e:e3:4e:e3:83:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Validity
Not Before: Apr 17 07:00:52 2026 GMT
Not After : Apr 18 07:00:52 2026 GMT
Subject: CN=db12001432af4e0c6b3973975ecf549fac110d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:90:b5:72:3c:10:2e:7c:80:15:92:a9:57:77:
1c:a9:ae:47:b0:e0:c2:64:97:1e:f5:14:01:a5:0c:
e5:e1:7b:a8:bc:31:d6:24:e0:99:85:61:03:a4:63:
d3:e7:2b:62:a6:1d:60:9d:99:28:46:50:84:07:07:
72:18:23:08:cb:07:dd:4f:94:c1:1d:97:68:89:7b:
be:0f:c5:fd:ff:84:03:57:04:0d:1f:59:08:ff:1c:
b2:b0:7f:00:54:27:cd:29:12:59:fd:af:27:be:cf:
55:45:f1:f5:0f:51:b3:14:33:0b:0d:ea:a1:cb:d7:
ea:f1:ee:74:1a:0b:cf:97:51:10:b2:7c:d4:6f:70:
02:7d:c0:91:b3:5c:43:f1:47:67:85:c1:f1:6f:ee:
22:ec:77:2f:fd:32:39:49:6c:db:be:dc:13:19:df:
37:cc:0a:ce:64:f7:d8:b0:63:0e:53:d9:f4:8d:e7:
65:bc:b7:fb:c5:dc:32:aa:58:69:3f:5f:74:29:8f:
1d:2d:99:31:a2:c7:6f:fe:86:0d:3a:c1:fd:7d:b4:
48:7c:00:6b:ed:3b:74:29:2a:30:8b:02:fe:8b:91:
ae:11:d2:ab:4f:dc:05:cd:20:f1:4c:94:77:07:28:
f8:d1:a5:74:00:ee:43:d4:12:bd:8c:2d:6f:ef:28:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:12:00:14:32:AF:4E:0C:6B:39:73:97:5E:CF:54:9F:AC:11:0D:52
X509v3 Authority Key Identifier:
keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:51:6f:48:76:ad:1e:6a:fb:5d:33:c2:56:34:d4:4c:74:37:
d3:66:64:d4:16:06:f2:61:2d:5e:e6:b6:6e:7e:08:9b:88:52:
ba:fd:fb:6c:53:5d:38:71:6f:5d:3d:d7:8a:db:8b:a6:c3:ad:
08:51:8d:b2:14:e2:9a:5d:3c:1f:cf:44:78:96:4f:43:54:5d:
82:22:1c:6b:c7:d0:51:1b:36:fc:e2:88:56:74:60:b4:2d:d6:
95:e2:30:71:a0:a5:08:48:5f:59:75:5a:28:65:e9:d4:bd:79:
fc:62:cf:bc:8a:b6:44:4a:9f:70:49:6d:a9:9b:4f:dc:7b:ee:
5d:68:ec:79:07:d3:9c:1b:30:d9:fe:09:ee:2c:49:69:be:35:
16:18:f2:8f:16:e7:16:e0:cb:e0:e9:0f:5b:ec:b1:3d:4d:9e:
b3:2f:48:13:a6:cb:ce:ce:cd:6e:ef:2f:1f:c7:22:6a:01:36:
65:d6:fb:c5:68:bf:bf:78:f4:59:28:7c:48:fd:b6:b4:0c:e1:
4d:3a:28:7c:d5:19:90:b6:84:d0:6a:ec:4a:b3:24:92:e9:ce:
c0:4a:40:6e:91:a8:c9:cf:69:c6:bb:79:5a:df:af:f6:34:7c:
5e:04:57:4c:f9:a5:49:22:58:f5:7d:f0:b8:ca:d0:48:e6:a8:
72:3b:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:29 2026 by rpki-client