Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: vU8ufg/7D6CWwc2Vjb1CWhf9lSSt/T/OZoXPdBvt3rc=
Subject key identifier: 8C:B3:E5:79:4F:E3:12:12:D9:2C:22:6A:05:29:D7:D0:7D:E7:E1:F5
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 019D985095B721A4B1228840C5C5AE53A293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 1894
Signing time: Thu 16 Apr 2026 22:01:51 +0000
Manifest this update: Thu 16 Apr 2026 22:01:51 +0000
Manifest next update: Fri 17 Apr 2026 22:01:51 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: WgEm0gRPgCa8+qUPpzrRTctPvRH5qVOJQas5u1mVPso=)
2: bfmoXJzoDdpM9K6Axg6RQ6PcK7A.roa (hash: z7weft+bC6v8Gp+CtsE+ZYXb+kZuusFeVfZLKQMSX24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:95:b7:21:a4:b1:22:88:40:c5:c5:ae:53:a2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Apr 16 22:01:51 2026 GMT
Not After : Apr 17 22:01:51 2026 GMT
Subject: CN=8cb3e5794fe31212d92c226a0529d7d07de7e1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:cd:ae:af:da:03:c8:1f:f5:6e:c6:75:89:
d4:46:7d:73:95:63:2a:37:ef:e8:b4:1e:49:3f:06:
df:e7:35:71:b9:f1:4a:4f:01:32:c2:1c:9d:27:bd:
d8:5d:bf:8a:ee:42:37:c3:1b:0f:8a:4f:84:ed:d4:
de:be:e6:37:dd:41:0a:81:cd:b6:4a:46:42:b6:e2:
25:b0:ae:87:c6:8a:fe:5a:08:92:f4:04:c6:97:e0:
5d:f2:53:0c:a4:81:ae:d4:0f:d6:e9:fd:70:84:39:
5b:9f:f1:92:09:69:03:b0:63:b7:2d:87:2e:1b:7b:
9d:f5:2d:d3:ef:49:fc:bf:1f:d3:2e:1c:72:09:4d:
fb:c3:78:53:05:68:95:70:18:61:5b:8a:6f:be:f7:
23:0b:36:5e:9e:f1:4a:8d:b6:00:d9:dd:ef:c7:44:
af:17:1c:56:23:6b:e6:9e:e8:35:4b:3c:a0:d8:3f:
b4:e5:85:3b:6b:1f:a6:3a:74:62:23:72:05:06:b2:
40:dc:df:24:e1:62:dc:61:6b:85:a8:45:43:17:fb:
cf:48:cc:ac:98:71:28:7d:a2:c6:38:9b:99:f1:47:
96:53:79:b7:a0:6f:04:61:42:35:d2:47:90:0a:a2:
c5:6e:d7:4c:63:b5:c2:99:39:2c:f7:cf:23:3e:9b:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B3:E5:79:4F:E3:12:12:D9:2C:22:6A:05:29:D7:D0:7D:E7:E1:F5
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b8:21:4e:5b:b1:a9:d9:f1:e9:2b:a6:c9:9f:9d:9b:43:46:
47:74:57:a0:29:4f:b0:d2:0f:5f:9b:1e:89:ab:39:d7:6e:cc:
29:f4:92:cc:51:02:6d:41:80:8d:fd:b5:b4:22:ce:66:fa:5d:
e4:9e:1d:ea:6f:0a:20:71:ae:5c:27:71:b7:96:f3:f8:91:0a:
6e:ef:62:9c:2d:0f:6f:9b:be:b8:d2:b6:84:18:94:03:c7:b3:
e0:02:39:0c:21:2a:36:d7:9d:a6:7a:0f:df:b2:f7:76:4b:18:
bf:9a:44:3f:ff:8a:bc:67:a8:b4:bf:5b:65:81:ed:79:9e:7a:
40:4b:71:ca:e1:ce:13:bb:34:79:42:45:79:bb:f8:a8:9a:ab:
81:31:e7:bb:11:83:9f:d6:d5:2c:3b:91:f7:93:8a:a8:11:2e:
8c:76:12:ad:7a:34:f5:4c:d6:ee:e1:18:6d:3b:83:ba:47:6c:
18:f7:29:4d:81:f9:70:13:d1:be:96:e0:24:bd:7e:bc:63:6c:
75:76:ed:c8:5d:59:64:e9:c2:56:ed:a9:d8:27:25:a5:a2:b6:
e2:10:5d:ec:8a:f9:c9:ef:69:77:96:8f:80:eb:f8:df:82:7a:
85:21:4d:cb:95:5a:f9:76:26:ed:a5:52:ce:c9:75:be:43:8d:
31:78:b6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:23 2026 by rpki-client