Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: NiSrjwMZLdbosTXCKenm9fMA+GsHFnJ/Nxx1bSWaoiY=
Subject key identifier: F1:C3:20:2E:37:02:7D:26:F5:45:4D:EA:CA:EC:26:D3:1E:45:9F:E8
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 019D9818BDF81EA720D3371CB77D19901ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 11E9
Signing time: Thu 16 Apr 2026 21:00:51 +0000
Manifest this update: Thu 16 Apr 2026 21:00:51 +0000
Manifest next update: Fri 17 Apr 2026 21:00:51 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: RUPiIvm1PA6pqnIiDo9a1L8Y4Z54tpvXS6q03zR8BH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:bd:f8:1e:a7:20:d3:37:1c:b7:7d:19:90:1e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Apr 16 21:00:51 2026 GMT
Not After : Apr 17 21:00:51 2026 GMT
Subject: CN=f1c3202e37027d26f5454deacaec26d31e459fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d3:5d:0b:ff:21:98:e0:8e:8c:41:94:29:2e:
f5:db:67:49:fd:e4:3b:67:92:32:19:a9:ad:1e:3e:
46:ad:3c:9c:45:df:b8:79:95:b7:82:25:5e:ac:c6:
fe:85:52:91:2f:df:a9:5c:6e:f5:af:50:92:e8:6b:
15:99:91:43:07:dd:c4:51:26:ba:a4:4b:79:91:a6:
81:b5:68:8b:14:6f:e0:be:58:25:38:cd:c3:bb:a7:
ab:8d:b0:ca:53:d7:16:f1:ce:cf:ad:e1:85:b2:48:
ca:77:93:fc:2d:76:b7:b0:1a:39:c0:c5:e6:43:e1:
7c:85:29:a8:46:5d:a9:fe:bc:54:f4:16:c2:61:a2:
b8:af:70:08:87:61:08:f8:de:15:f5:b0:9c:2f:c9:
a4:6d:04:5e:da:96:39:98:36:a3:96:1f:40:52:ed:
29:cf:88:b2:4a:db:b2:45:27:04:02:1d:74:8d:4c:
4f:1b:d2:43:b3:ce:45:93:62:0b:47:3e:12:47:c1:
07:0a:7e:b7:4c:2c:26:b7:75:d0:16:5f:15:d9:6c:
05:f3:41:25:e0:a5:69:f7:bb:ed:af:fb:a4:d9:65:
70:15:5d:8e:76:35:e2:eb:f1:80:1b:5d:90:1d:13:
93:22:5c:e6:72:88:e9:e6:c1:84:72:26:14:d1:fa:
28:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C3:20:2E:37:02:7D:26:F5:45:4D:EA:CA:EC:26:D3:1E:45:9F:E8
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5b:d7:46:e0:f3:d3:bc:9e:e3:f7:fa:29:26:73:a3:90:95:
b3:4d:2a:97:39:2e:04:50:dc:f9:a8:f7:a4:b1:66:7e:94:f0:
ef:15:fe:d9:cf:fa:7a:db:2a:5e:03:a9:28:c9:e2:63:b9:d6:
72:5b:cd:46:17:b6:f8:24:8a:4f:05:d6:7a:90:da:8e:d0:cc:
94:42:48:58:4a:35:62:bf:6c:55:1b:7d:40:95:99:b0:70:d6:
16:57:63:6f:e6:26:61:82:d8:bf:f7:c2:13:74:a1:da:8c:9a:
05:04:24:64:7d:60:aa:07:83:d9:07:8f:4e:c9:27:35:2b:b0:
53:1a:09:ae:ae:7e:22:89:ba:bc:d6:ec:57:be:d9:d5:ab:61:
c1:53:90:b0:a7:95:08:e1:ef:37:95:84:58:77:30:5f:a8:77:
dd:88:81:6d:ac:d5:fc:15:d5:86:13:73:f6:09:75:5e:db:c2:
b1:fe:66:4c:d4:fc:21:74:1e:3e:c1:ab:e0:a2:88:dd:9f:37:
16:f2:a0:d3:11:c1:64:7a:3e:3d:b5:54:da:b0:85:b2:de:8a:
39:91:a5:c2:9e:d1:f5:92:2c:36:63:2e:92:93:85:33:52:14:
64:78:42:78:b4:5e:c8:9d:fd:2f:9c:29:96:d2:ac:f5:18:e8:
d9:bd:bd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:01:16 2026 by rpki-client