Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: M1vq4qwI/UiYrHTkrIZvL1lxZmqRdTcqrLa8fx7jZCw=
Subject key identifier: D3:F5:F5:0D:16:23:6C:62:28:E2:49:3E:AC:09:91:48:E3:32:FD:4B
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 01A0DBA8ABF40596916F80AE8862007A7785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 1737
Signing time: Sat 26 Sep 2026 03:00:59 +0000
Manifest this update: Sat 26 Sep 2026 03:00:59 +0000
Manifest next update: Sun 27 Sep 2026 03:00:59 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: gmwteW9yaa7g2KaH97Rc+9gNkKg/R5Us/DRCdWBtXGI=)
2: n7tDB9WVKLvlzbrTHI3vLNe5dIs.roa (hash: BfpWIrEApwHB8saHvg5FCOOfhPalX/1cWv3N79uY4jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:ab:f4:05:96:91:6f:80:ae:88:62:00:7a:77:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Sep 26 03:00:59 2026 GMT
Not After : Sep 27 03:00:59 2026 GMT
Subject: CN=d3f5f50d16236c6228e2493eac099148e332fd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:0b:13:cb:81:cf:d2:5c:7b:b8:4c:f3:31:
48:c2:e9:b3:d8:54:29:49:f2:0d:80:2a:28:27:a5:
49:f3:8e:16:b2:ee:1b:cd:02:46:64:4f:05:91:cb:
ae:c3:2e:27:c0:6f:71:53:c1:b1:95:e6:22:0d:c7:
1f:a3:6f:09:e1:cf:93:ec:2a:99:45:a4:94:d2:56:
d4:13:bd:54:fa:0a:42:e2:48:64:ea:60:65:0c:0a:
37:a6:8f:c7:00:d0:8e:b2:93:66:1a:e6:d5:a6:e8:
c5:75:d6:b4:cf:62:a4:3d:e1:28:54:7e:d9:31:25:
bb:b3:ca:21:30:86:db:eb:de:cd:6b:58:12:0d:25:
bf:6d:47:92:93:3a:b9:5b:36:cd:bc:9a:78:68:eb:
62:b3:28:ca:a4:89:c1:25:95:ab:ae:66:57:82:b5:
ea:cf:90:b3:2d:b2:a7:45:a4:3a:ef:17:d3:99:fb:
75:52:01:c5:32:b6:96:86:64:e4:c3:93:d2:24:a2:
08:c5:cd:00:75:5f:c9:6d:73:53:0f:1c:df:67:2d:
4d:50:68:b0:e4:ed:46:cd:48:ab:0e:be:03:b3:bf:
85:aa:e9:23:59:4c:4f:ec:6b:05:85:a0:e6:6a:20:
a1:b9:02:82:c9:be:fe:7e:9d:7f:71:b6:1f:99:82:
da:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F5:F5:0D:16:23:6C:62:28:E2:49:3E:AC:09:91:48:E3:32:FD:4B
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2c:71:af:66:12:f1:c6:e0:13:e0:1a:49:a1:a1:38:cd:13:
5c:1d:a7:67:c8:47:ed:c2:38:4f:28:16:43:7e:6e:14:25:ed:
d6:1c:53:7c:94:22:e8:e7:99:a9:6c:d0:96:e4:f4:62:2c:64:
c0:eb:08:b9:09:4d:a9:32:52:2b:6b:20:14:12:23:73:52:87:
ed:a6:ac:d5:3d:17:af:85:54:ea:b9:d1:c9:44:c1:f9:e6:16:
18:57:bc:e5:5f:0c:bb:e9:3f:e7:b4:80:38:5c:cb:da:04:0b:
a9:5a:20:89:79:8f:2a:ce:9b:84:e2:15:a0:54:0e:8b:16:0f:
f3:df:c2:d2:8b:83:1d:85:54:e4:9b:22:d1:39:7c:c0:5e:1e:
2f:1f:61:07:bf:3c:f4:2f:60:6d:8c:67:b7:ca:94:af:86:70:
b6:56:33:01:05:b4:1c:a1:73:a6:51:e7:b8:a0:a4:a4:df:a7:
be:88:d9:35:76:a1:a6:f1:eb:e6:83:f4:0c:14:8c:be:f7:ae:
4d:35:7c:56:b8:6f:00:a8:a8:62:10:47:0d:24:2c:18:21:af:
ec:52:6a:41:1b:73:12:68:9c:3d:a4:eb:41:a2:cf:68:22:09:
06:16:24:ef:53:34:5b:80:16:33:51:3b:5a:c0:2a:37:f8:c5:
1f:57:5f:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqKv0BZaRb4CuiGIAeneFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMTc4NzI0MDM0NTJmM2UwMDhhYjc5ODA0NzM0MmRiMjRl
ZGIzNWEwHhcNMjYwOTI2MDMwMDU5WhcNMjYwOTI3MDMwMDU5WjAzMTEwLwYDVQQD
EyhkM2Y1ZjUwZDE2MjM2YzYyMjhlMjQ5M2VhYzA5OTE0OGUzMzJmZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6ELE8uBz9Jce7hM8zFIwumz2FQp
SfINgCooJ6VJ844Wsu4bzQJGZE8Fkcuuwy4nwG9xU8GxleYiDccfo28J4c+T7CqZ
RaSU0lbUE71U+gpC4khk6mBlDAo3po/HANCOspNmGubVpujFdda0z2KkPeEoVH7Z
MSW7s8ohMIbb697Na1gSDSW/bUeSkzq5WzbNvJp4aOtisyjKpInBJZWrrmZXgrXq
z5CzLbKnRaQ67xfTmft1UgHFMraWhmTkw5PSJKIIxc0AdV/JbXNTDxzfZy1NUGiw
5O1GzUirDr4Ds7+FqukjWUxP7GsFhaDmaiChuQKCyb7+fp1/cbYfmYLaywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNP19Q0WI2xiKOJJPqwJkUjjMv1LMB8GA1UdIwQY
MBaAFOAXhyQDRS8+AIq3mARzQtsk7bNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80Y2MxNDUtOTY3ZC00ZDhkLWFmNWMt
ODc3ZTBlODY2YjI0LzEvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS80Y2MxNDUtOTY3ZC00ZDhkLWFmNWMtODc3ZTBlODY2YjI0
LzEvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSxxr2YS
8cbgE+AaSaGhOM0TXB2nZ8hH7cI4TygWQ35uFCXt1hxTfJQi6OeZqWzQluT0Yixk
wOsIuQlNqTJSK2sgFBIjc1KH7aas1T0Xr4VU6rnRyUTB+eYWGFe85V8Mu+k/57SA
OFzL2gQLqVogiXmPKs6bhOIVoFQOixYP89/C0ouDHYVU5Jsi0Tl8wF4eLx9hB788
9C9gbYxnt8qUr4ZwtlYzAQW0HKFzplHnuKCkpN+nvojZNXahpvHr5oP0DBSMvveu
TTV8VrhvAKioYhBHDSQsGCGv7FJqQRtzEmicPaTrQaLPaCIJBhYk71M0W4AWM1E7
WsAqN/jFH1dfvQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:23:25 2026 by rpki-client