Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
File: 4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json)
Hash identifier: r9EoO2q0QKfp136vlqRUVgemuc0sPfewsQt9kqM65Hg=
Subject key identifier: 85:1F:7B:23:29:F6:1F:BE:2B:39:68:26:E2:B0:1E:BD:CE:CA:1A:29
Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
Certificate issuer: /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Certificate serial: 019D9BF5667E068E8EBAEC729038675DC358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
Manifest number: 0EC1
Signing time: Fri 17 Apr 2026 15:00:44 +0000
Manifest this update: Fri 17 Apr 2026 15:00:44 +0000
Manifest next update: Sat 18 Apr 2026 15:00:44 +0000
Files and hashes: 1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: WFKzXZ0k6Xf4Iras4kvJQ3q8OdIV3PFMPs+HiU4IJsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:66:7e:06:8e:8e:ba:ec:72:90:38:67:5d:c3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Validity
Not Before: Apr 17 15:00:44 2026 GMT
Not After : Apr 18 15:00:44 2026 GMT
Subject: CN=851f7b2329f61fbe2b396826e2b01ebdceca1a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:74:7c:ba:9f:44:05:5e:38:ca:d9:f0:9f:
bf:0d:19:ee:c5:2f:11:5d:c7:f8:1e:20:96:61:b4:
b0:35:10:0d:d5:fc:4e:88:ce:39:65:02:7a:3e:d7:
e2:db:0c:e6:23:63:39:7e:0a:e1:43:1d:5a:74:8d:
69:23:21:fb:f2:e7:aa:18:21:c5:ac:5d:35:c9:04:
b9:8a:3b:5f:c0:af:b9:e9:ed:da:34:29:aa:16:2b:
41:34:c4:fe:68:dc:44:20:49:97:83:47:fa:51:81:
0a:33:1c:e1:80:53:a8:4a:e8:44:df:ba:03:07:a9:
45:4c:44:b3:bf:78:06:57:74:82:88:96:ed:eb:cc:
ec:99:5c:2e:fa:a0:3e:b7:15:ec:00:05:74:1c:8d:
64:bb:82:6a:e9:55:5a:17:98:2e:24:b1:10:99:62:
10:31:32:73:86:ce:c1:29:22:2c:41:4a:43:77:e7:
0b:08:1d:5d:a7:ce:ae:9d:a3:ec:3a:d2:f2:53:43:
45:b8:5d:55:67:bb:e9:7c:25:09:21:3a:ff:12:5e:
9c:91:3d:a4:b0:8a:7d:05:b9:6d:d2:7b:f2:12:f4:
b6:50:51:68:00:b7:f7:2c:38:6f:d0:24:a4:0d:2b:
cc:a5:ef:a8:5c:92:96:a9:2d:d6:ab:91:c2:c3:4a:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1F:7B:23:29:F6:1F:BE:2B:39:68:26:E2:B0:1E:BD:CE:CA:1A:29
X509v3 Authority Key Identifier:
keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e7:a1:17:11:52:80:0d:1e:6f:05:35:dd:1e:1e:5b:13:ec:
ee:ac:e6:98:b2:a7:50:07:62:8f:93:9c:4a:12:63:11:15:3a:
91:43:28:fe:f9:84:fc:a1:ce:af:5b:a0:bf:69:ab:64:d2:a2:
57:22:a8:cf:02:7a:66:43:e2:01:33:f5:0e:ca:cd:50:f5:42:
68:f0:7f:ae:47:19:0b:ce:91:2e:af:5a:84:03:30:4b:21:b1:
34:c8:05:10:cc:e1:05:58:b7:24:30:3f:21:41:b4:95:9a:76:
5c:55:8e:0f:3c:55:d8:65:1f:18:39:42:9e:4a:c0:63:e3:be:
85:f9:a3:78:5a:fb:a4:cd:c6:da:39:e9:94:35:c5:25:61:0c:
7d:c7:41:29:94:22:3d:ce:ce:f4:a8:2d:85:22:4b:77:99:4c:
69:91:10:f8:12:3f:a8:bf:1e:b1:f5:86:6d:e9:1d:cf:2b:88:
a1:14:44:4d:c8:94:db:6e:cc:52:99:f1:fe:6a:b5:41:3b:5e:
4f:9d:02:69:a1:6e:91:2c:b5:4b:44:04:50:03:56:bc:e0:53:
06:d1:a4:54:51:be:9b:3b:39:ac:ca:19:5f:41:a4:bc:08:f9:
17:ef:8f:fc:79:6f:6f:0e:c6:db:3b:dc:a1:ba:1a:6a:c3:bb:
e9:98:8f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:20 2026 by rpki-client