Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: LkEmV5hU5kh6Gy7Fsu8fk1AhFS92yBUjN9D277S6Bl0=
Subject key identifier: 5E:9B:8B:8C:BA:31:79:DD:37:A1:61:72:78:27:05:73:A9:DD:06:05
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 019D9962AAF376D8C73E3BEE1B7BCDDCBD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 1587
Signing time: Fri 17 Apr 2026 03:01:13 +0000
Manifest this update: Fri 17 Apr 2026 03:01:13 +0000
Manifest next update: Sat 18 Apr 2026 03:01:13 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: jQgw5YY5XQcAlzeIWibDAsS0RKroWjMcHisZN6yvap8=)
2: n7tDB9WVKLvlzbrTHI3vLNe5dIs.roa (hash: BfpWIrEApwHB8saHvg5FCOOfhPalX/1cWv3N79uY4jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:aa:f3:76:d8:c7:3e:3b:ee:1b:7b:cd:dc:bd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Apr 17 03:01:13 2026 GMT
Not After : Apr 18 03:01:13 2026 GMT
Subject: CN=5e9b8b8cba3179dd37a1617278270573a9dd0605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:61:74:97:7b:6d:d4:2d:a1:bb:42:cf:9b:
a5:54:2d:47:51:46:0c:22:fd:65:0b:d6:1c:c5:c5:
e4:19:f7:b5:95:5c:dd:e8:09:f6:9e:0a:53:20:62:
9e:44:8e:10:a1:5b:6c:47:34:c2:e7:55:92:d7:24:
32:26:5b:cd:a8:74:cf:63:20:1c:5e:4e:54:5c:a7:
eb:5b:65:fa:63:9e:f5:03:ff:b3:12:97:dd:0c:c8:
82:fe:9b:0c:8b:fd:70:3d:6d:44:e4:0f:5d:a5:9f:
6d:07:bc:ae:87:85:b0:21:e1:e1:52:db:6e:e6:36:
2c:3e:b6:12:22:4f:68:33:11:41:88:09:0f:c5:ef:
ae:3a:4d:a0:88:44:0c:b8:fc:f9:0f:f6:30:a4:10:
83:bb:87:08:01:86:2f:f4:60:84:1f:72:62:f7:1d:
d2:e5:f1:ba:3d:ac:25:c7:6c:61:35:42:10:13:28:
37:10:9c:15:80:2f:f4:85:ab:57:21:63:8e:f0:dd:
29:b9:d1:1c:ee:8c:80:e2:59:f3:38:c3:2f:49:88:
71:20:aa:6c:34:1c:e1:f0:4f:a8:b2:00:55:a6:5a:
f6:ff:5e:4f:70:79:73:1c:ae:7a:d0:7c:10:ac:52:
6c:d7:e9:37:70:4e:7e:2a:de:d3:f1:f2:44:b3:4a:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9B:8B:8C:BA:31:79:DD:37:A1:61:72:78:27:05:73:A9:DD:06:05
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:52:4c:cb:1d:f1:9f:aa:93:bf:34:50:e6:eb:7d:c7:6d:5b:
93:8b:9f:47:24:08:72:cd:1c:0a:72:a1:c5:30:9a:6b:7d:84:
57:0b:57:b1:6f:3e:82:02:99:83:68:60:ab:7b:c3:21:98:f8:
fe:18:ab:c2:ef:b9:fb:fb:fc:98:cc:80:65:b3:cb:a8:55:e3:
5c:99:98:f3:56:03:8e:d6:4e:22:87:2f:c2:f1:60:54:08:e5:
13:59:4d:e2:82:6c:ae:07:4e:7c:ac:ce:53:27:22:1c:2d:d8:
7c:18:67:18:7b:29:ab:40:15:0e:84:6e:40:cd:29:a5:53:30:
c7:0d:7f:f3:c3:a5:60:f9:08:52:9e:c3:05:a9:a1:1c:f2:ba:
dc:64:7d:a8:9d:e8:91:0a:9e:c6:19:04:48:d4:63:68:c6:fb:
18:80:1e:1a:e3:77:db:cd:84:80:e2:00:1f:24:e7:a7:b9:ed:
b2:75:d5:76:35:65:20:66:33:ca:bd:b6:9a:54:0e:89:da:b0:
ed:52:23:8b:19:47:d9:25:9d:23:36:7e:98:08:a4:ce:70:eb:
f9:fe:e9:7e:02:89:54:ee:6c:6f:8a:a7:2e:6c:ac:ff:d1:de:
83:71:61:86:e2:8b:a1:18:57:aa:3d:b1:9e:6d:16:be:39:13:
d6:84:6a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:07 2026 by rpki-client