Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
File: MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft (raw, json)
Hash identifier: lNRpiP1yFTnbZm2WqANx9leN6ewqEWpNJgF7nZDHPgE=
Subject key identifier: FE:1A:AA:E6:F4:FA:0E:C5:F3:8B:37:B8:D3:1A:18:FE:0A:D6:68:01
Authority key identifier: 30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
Certificate issuer: /CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Certificate serial: 019D984FE29B96F4E5F6509885E9CAD95129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
Manifest number: 0CB7
Signing time: Thu 16 Apr 2026 22:01:05 +0000
Manifest this update: Thu 16 Apr 2026 22:01:05 +0000
Manifest next update: Fri 17 Apr 2026 22:01:05 +0000
Files and hashes: 1: MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl (hash: Z2FPv2QW7Bx0obY+zQE/tW/OA63dWxeydSla+r9ZtyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:e2:9b:96:f4:e5:f6:50:98:85:e9:ca:d9:51:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301e3fca6f13628e6eb83cffe5ed8a01edd59e8b
Validity
Not Before: Apr 16 22:01:05 2026 GMT
Not After : Apr 17 22:01:05 2026 GMT
Subject: CN=fe1aaae6f4fa0ec5f38b37b8d31a18fe0ad66801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:a2:f9:7b:b0:80:21:66:56:74:1a:0f:0b:
61:80:34:4a:47:42:56:68:01:8e:d2:ed:ac:8d:25:
c9:73:97:eb:a2:e2:8c:c5:77:d2:8b:4f:26:6f:f4:
e9:39:55:8b:e4:ee:75:db:70:b6:ab:89:6c:5f:49:
5d:ff:94:3e:b2:cd:51:ae:63:93:cc:29:d3:67:d6:
c3:45:89:fc:8d:a3:97:f6:63:99:40:7d:9d:f6:50:
60:e5:81:82:63:f4:a4:51:a1:b2:3e:8a:a2:06:9e:
c4:ad:8b:44:06:cf:e8:3c:91:b4:85:7f:0e:73:23:
c2:b9:23:fa:ff:ad:0b:f0:86:f4:6e:97:e0:54:9e:
cb:2b:a3:d4:c3:7d:57:47:9f:bd:e0:8a:75:62:e1:
e8:c5:4f:ad:a1:05:74:67:35:b0:2d:41:1a:4b:07:
aa:a9:45:84:e2:52:06:0c:18:36:d5:78:39:83:80:
6b:99:87:ac:fc:bb:f2:9f:88:61:5a:68:a1:9d:48:
a2:eb:7e:b3:5d:e0:65:09:c0:75:c9:94:aa:26:72:
d2:1c:a2:b0:d2:08:6f:94:17:90:0a:09:ea:1e:91:
76:7f:aa:2f:bc:9e:09:7f:9d:3d:f7:20:af:98:56:
7b:bc:39:61:29:34:f6:27:f0:52:5f:2a:6e:1b:f4:
d5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1A:AA:E6:F4:FA:0E:C5:F3:8B:37:B8:D3:1A:18:FE:0A:D6:68:01
X509v3 Authority Key Identifier:
keyid:30:1E:3F:CA:6F:13:62:8E:6E:B8:3C:FF:E5:ED:8A:01:ED:D5:9E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MB4_ym8TYo5uuDz_5e2KAe3Vnos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/92ce4c-f1c5-4c8f-99df-d0d7f2b2a5e0/1/MB4_ym8TYo5uuDz_5e2KAe3Vnos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:48:a8:7a:52:70:48:d5:b5:bc:e9:0a:7a:d9:c5:87:39:83:
3a:f6:2c:78:86:ce:b7:12:0d:ee:80:d7:82:0e:80:f0:f2:24:
eb:ab:d4:5a:34:6c:73:cc:aa:10:32:cc:d5:2e:f3:2c:ec:f0:
18:45:13:05:95:3d:15:42:47:c8:78:1b:6e:86:34:ec:82:1c:
ec:8d:11:51:71:34:80:34:e6:f1:cb:45:a1:83:48:da:b8:1a:
5c:b1:32:86:70:81:a1:45:cf:7e:1b:6d:51:3b:fa:8b:e3:89:
0d:ea:76:f0:7f:08:e9:f6:48:d7:95:0c:25:47:3e:46:22:7d:
af:69:6f:dd:53:6e:a4:a2:1b:72:c1:eb:5b:c2:b6:3f:e2:ee:
46:3a:cd:d4:47:ba:c2:49:7b:80:61:83:8b:67:60:21:72:e3:
08:3c:12:58:02:86:65:68:77:95:04:1c:86:31:58:a2:58:ca:
a9:a6:5e:19:8b:c0:42:02:98:6d:de:24:e5:37:fb:c4:bf:76:
97:09:e8:65:4e:07:a3:fb:dc:ee:b4:a2:05:84:b6:4b:e4:39:
d8:08:b1:83:27:33:4c:bc:bd:2f:27:92:3c:31:68:4a:59:2a:
39:01:1b:90:ca:c3:cd:b0:37:c7:c2:18:e7:49:22:36:15:b1:
5b:d0:fe:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:53 2026 by rpki-client