Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: bHvvB0dhzYUtg9M794cJOimAYqh86j5q5Zvai9bI2kE=
Subject key identifier: 8B:08:9C:B0:55:6F:0B:73:4B:DF:25:DF:50:D7:E0:3B:17:72:EA:46
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 019FA8994607D89C32FAD556AE08EAB278A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 1698
Signing time: Tue 28 Jul 2026 12:00:44 +0000
Manifest this update: Tue 28 Jul 2026 12:00:44 +0000
Manifest next update: Wed 29 Jul 2026 12:00:44 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: X7Xh6R4tEsbDn7tjOq0aZFl/lcwHJ3C77Su+PsS4Ku0=)
2: n7tDB9WVKLvlzbrTHI3vLNe5dIs.roa (hash: BfpWIrEApwHB8saHvg5FCOOfhPalX/1cWv3N79uY4jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:46:07:d8:9c:32:fa:d5:56:ae:08:ea:b2:78:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Jul 28 12:00:44 2026 GMT
Not After : Jul 29 12:00:44 2026 GMT
Subject: CN=8b089cb0556f0b734bdf25df50d7e03b1772ea46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:67:33:00:30:07:9c:a5:7b:ce:6d:a0:36:
e1:a2:dc:d0:ec:14:bf:18:12:1a:6f:cf:86:1f:ba:
2f:66:81:13:d8:41:52:99:5c:3e:9d:d8:31:a2:39:
d5:eb:a4:db:da:b7:51:54:73:8c:d4:b3:69:e5:8a:
96:50:4f:0a:e1:c4:de:bf:e5:f4:0d:8c:77:98:f8:
54:69:6a:c8:aa:c3:15:06:3c:0f:54:95:94:c5:30:
0f:11:11:33:a0:ba:84:9f:d4:47:61:55:e9:bf:25:
ec:d4:f8:dc:79:8d:93:45:9e:69:de:a1:b8:0e:c3:
e3:72:58:8f:59:73:99:21:de:72:d9:61:77:6b:0c:
da:4d:2d:50:3b:20:23:9e:ad:57:c1:4b:54:a2:ef:
a4:cb:af:a5:73:83:7d:01:7b:0a:b1:22:9d:1b:7a:
be:d2:a1:06:9d:b0:3c:19:88:a2:da:25:54:81:0e:
7d:7e:6d:d2:0e:b0:62:a2:11:e8:91:4c:61:40:e8:
b2:9e:5b:2a:0d:df:ad:17:e7:07:6e:00:66:79:11:
75:09:63:c8:5e:95:26:31:63:30:49:02:f1:86:89:
63:9a:b6:76:1b:0e:0b:2e:00:30:2c:1e:57:cc:8a:
29:9b:44:4d:70:88:1f:99:57:4d:bb:75:0f:c1:ce:
3e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:08:9C:B0:55:6F:0B:73:4B:DF:25:DF:50:D7:E0:3B:17:72:EA:46
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:72:86:df:2f:52:7b:d4:e8:55:52:de:0b:93:c9:13:f1:b1:
7d:ff:f6:cb:3d:98:2b:04:3b:90:c0:c7:55:53:b2:02:71:b3:
66:3f:de:e6:bf:53:b2:8b:65:20:64:3f:db:0d:c1:c7:f1:ec:
3c:65:b0:8b:18:cc:34:6e:5c:93:80:97:80:a4:1a:e3:6c:c6:
66:58:a7:45:25:32:26:94:e1:61:fa:1d:d8:2a:96:cb:68:29:
fc:27:bc:45:32:c7:da:22:12:f5:b2:ef:d0:fe:43:f3:6d:27:
aa:1a:e4:f7:29:78:85:da:90:dd:a4:ea:88:3c:6a:49:50:2c:
d0:5d:a4:2c:20:4f:7e:1c:f4:99:08:e2:ec:63:4e:05:ec:bf:
a6:c8:55:be:95:a2:94:72:56:5d:10:e9:a7:5d:aa:e8:18:bd:
ce:6b:60:01:de:3a:98:ce:5d:b3:7c:27:9f:de:c6:b0:f4:b3:
4c:c8:ad:2c:be:dc:9d:aa:d4:9e:5c:3c:ee:5d:83:f7:ea:8e:
6d:b3:47:04:72:87:22:2b:6b:ba:32:b4:7a:34:9b:c9:7b:06:
ad:65:5e:66:01:64:f4:22:da:0c:02:85:35:23:d0:4a:34:1b:
60:7d:e3:11:92:02:5e:09:91:3d:bf:e4:68:39:16:ac:31:2b:
da:ec:c9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:39:11 2026 by rpki-client