Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier: 7HtT+gI9D+EkwFQ98bv0eBT6ITzE3f6A2pg1/FviiyY=
Subject key identifier: EC:65:1D:96:78:CA:85:1F:CE:29:0D:03:29:41:5D:B0:6F:91:28:77
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial: 019D9CD150A858F924356000183A6711FDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number: 0459
Signing time: Fri 17 Apr 2026 19:00:56 +0000
Manifest this update: Fri 17 Apr 2026 19:00:56 +0000
Manifest next update: Sat 18 Apr 2026 19:00:56 +0000
Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: VH/6O6uYt+zxd2DcDK7PiPUi3hldUel+mz8F7vx0db8=)
2: Xhzxh_1tEvbHh31P53cpofaJHAY.roa (hash: 31jnPeVemUW3b4ECC8z4gudFDjDHIoHHJ4mUtzZB8F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:50:a8:58:f9:24:35:60:00:18:3a:67:11:fd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Validity
Not Before: Apr 17 19:00:56 2026 GMT
Not After : Apr 18 19:00:56 2026 GMT
Subject: CN=ec651d9678ca851fce290d0329415db06f912877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:14:10:bd:ca:7a:3d:3b:ae:c4:d7:09:f0:
de:33:c9:16:ac:db:9b:ca:d1:b6:86:5d:db:50:17:
69:ff:ed:09:36:16:bd:e9:38:44:1b:af:f0:39:99:
39:63:c4:e8:ed:98:37:f2:cf:66:b5:f3:f9:07:91:
87:43:3c:f0:26:50:c6:24:c4:54:94:21:d2:29:03:
a4:bf:4b:5e:8c:48:e5:49:70:6c:62:ac:d8:16:3a:
ab:d7:38:4b:02:10:66:80:a6:c5:41:c1:9e:1e:1f:
34:74:a8:05:24:f9:97:5e:dd:de:08:2f:aa:a2:92:
e6:a3:5c:ef:0d:6d:52:e7:d8:87:cf:c3:19:ce:84:
9c:b9:a2:f3:98:88:a8:f7:47:b3:47:c9:5b:46:7c:
26:c2:8d:0b:66:41:03:26:08:94:b1:61:22:40:4a:
b3:e1:f6:a5:aa:04:e1:ce:f8:15:50:7d:16:a0:0c:
bb:be:77:5d:8c:c6:3c:43:2c:87:0b:fd:6a:f2:dc:
e8:e3:c1:eb:47:bb:7d:d5:e8:f3:48:3c:44:d8:a3:
62:ed:25:32:b1:d5:8d:75:f2:a8:4a:ee:00:d9:4c:
5f:fe:74:5a:1d:50:c8:da:58:e3:0b:88:d5:3e:4a:
44:b6:8a:25:b3:0e:9a:44:f4:b8:1b:df:66:f0:4b:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:65:1D:96:78:CA:85:1F:CE:29:0D:03:29:41:5D:B0:6F:91:28:77
X509v3 Authority Key Identifier:
keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5d:d2:48:a4:8c:b3:ca:5f:7b:d3:49:e2:27:cd:cb:4e:5c:
f8:99:a1:70:b1:15:67:b8:4f:69:4a:c2:5c:54:bc:7e:0a:aa:
9e:58:36:98:5e:0b:00:5f:04:ca:36:68:99:12:d2:69:5a:4c:
a0:01:de:87:f9:b0:22:53:46:4c:5e:07:7c:77:65:d4:b9:71:
cb:f4:0e:8e:d4:35:62:e7:f4:fc:12:eb:ae:99:21:f1:30:6c:
6b:07:75:0e:01:e2:86:7e:47:66:02:61:ea:e9:ac:43:f2:9b:
64:84:6d:e7:6f:15:b3:50:82:22:e3:64:37:8e:6e:e3:6e:c2:
db:ef:8b:86:c8:c7:ca:42:63:48:97:fc:f9:51:3f:22:c2:3b:
f7:34:3a:17:c0:76:f5:d0:88:0f:59:b1:41:2e:65:e8:53:48:
da:cd:51:9a:00:0a:dc:5a:cc:9c:d8:32:0d:63:38:8f:20:ed:
1b:30:4d:0c:c0:fd:ed:35:76:a4:b0:64:89:97:bf:fc:0b:5e:
b6:ce:60:7d:79:d9:79:06:76:0a:16:39:68:76:d5:47:26:cf:
8b:2f:53:81:5c:2e:c7:95:7d:d1:af:a2:69:26:84:74:0b:c7:
ae:19:d5:eb:d2:f7:9e:0f:11:75:43:bb:41:1c:ba:35:02:c1:
c2:00:1a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:22:38 2026 by rpki-client