Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier: yNcIvlUqDUL2MCtZ8O2SflnIggyq1mzL7b6nFphQjQo=
Subject key identifier: 46:C7:C2:95:89:92:79:62:E3:4D:EF:65:57:D9:9C:F7:1A:AA:97:A7
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial: 019DA29CBE9969DCB0271BF1C2F82F4400EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number: 0AD5
Signing time: Sat 18 Apr 2026 22:01:14 +0000
Manifest this update: Sat 18 Apr 2026 22:01:14 +0000
Manifest next update: Sun 19 Apr 2026 22:01:14 +0000
Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: behJyW0hM78kNDF5Mb7kFUg+k0Hh7NqRKx4KfatGKIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:be:99:69:dc:b0:27:1b:f1:c2:f8:2f:44:00:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Validity
Not Before: Apr 18 22:01:14 2026 GMT
Not After : Apr 19 22:01:14 2026 GMT
Subject: CN=46c7c29589927962e34def6557d99cf71aaa97a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:6d:d1:df:bc:26:95:ba:50:c7:6f:6e:17:
e2:59:a3:3f:07:96:2c:62:19:50:00:0a:4e:50:6a:
42:4a:78:8b:95:97:72:29:1c:0a:1d:61:57:b7:b3:
ba:ec:da:49:49:0a:f6:ff:f5:80:31:e5:09:70:1d:
c7:8c:fd:c0:4f:7e:83:b5:d1:77:d7:db:cb:bd:e6:
f3:42:af:59:f0:87:1a:3f:d6:bc:1a:83:61:ce:2d:
dd:ba:25:43:0a:22:34:2b:58:9a:dc:c7:a4:e8:75:
8a:ec:f1:91:d8:6f:ac:55:94:c9:74:63:05:cc:64:
ec:42:f4:ef:e4:27:54:36:6d:47:00:02:f6:24:16:
19:84:17:14:2f:08:30:8d:6a:9d:4f:b0:da:40:40:
25:b5:f3:37:28:89:3f:d9:f0:8f:47:fa:36:cf:8a:
43:4d:e6:9b:3e:78:fb:f3:c3:10:83:1a:0a:b2:13:
90:69:6f:7d:35:b5:7e:c6:d3:49:3e:17:bd:c9:ce:
94:ee:9c:90:2a:d1:f1:8c:27:dc:c4:5e:1e:fd:08:
c1:13:23:47:ee:9c:56:4e:b1:1d:a3:a4:fd:4e:cd:
9c:a3:7d:91:a5:81:78:84:cb:31:34:44:52:bb:f5:
7f:4e:14:74:25:b5:aa:f6:1d:70:68:52:cc:ea:3e:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C7:C2:95:89:92:79:62:E3:4D:EF:65:57:D9:9C:F7:1A:AA:97:A7
X509v3 Authority Key Identifier:
keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a9:00:44:a5:c4:bf:1d:9e:64:c6:de:71:3f:e3:71:8a:81:
c7:4c:f4:71:40:92:61:f7:58:06:59:6c:bd:2f:4e:69:95:23:
93:de:be:22:af:f0:56:b4:f5:51:c3:6b:4a:5f:26:12:b9:12:
b5:c1:82:e1:be:c2:b2:26:49:c2:0d:d9:01:1d:0e:d3:16:c0:
b7:3c:70:15:61:29:c1:de:e3:02:9c:e8:d8:88:bd:2d:7d:1b:
dc:a1:5a:b2:f5:30:3c:f2:9c:2a:1e:98:f8:6d:14:fb:6f:44:
41:3a:7f:6c:c6:54:0c:e5:e2:a9:41:d6:e7:ac:82:ae:57:9e:
2b:7d:ab:0a:7f:fe:4b:75:70:81:c7:d5:6c:18:d6:de:02:eb:
14:39:23:6a:a6:46:8a:dc:d0:2e:91:4c:bd:a7:a3:de:c6:d4:
71:25:1e:f8:aa:f6:22:bf:ab:14:fe:1c:7d:d1:93:96:0c:e3:
69:86:40:23:9d:80:16:15:c2:5f:f8:ba:1a:42:7c:77:47:95:
a0:3b:58:05:6d:cc:b2:27:de:e4:5e:3a:32:e6:4c:65:93:30:
66:95:9e:6d:92:af:77:23:03:ac:16:41:32:ca:8e:b1:7a:e7:
66:ee:20:0b:f2:bf:57:93:99:f9:c5:c4:12:95:26:e6:94:7d:
00:59:d9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:11 2026 by rpki-client