Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
File: 4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json)
Hash identifier: jEEfEkpK2U8wkGmBstjiA6Yd13zTr1HoaJ91pNVp8Is=
Subject key identifier: 5A:D0:4A:B8:B2:BC:4B:D8:D9:8C:0C:D6:6D:36:3D:C4:0E:00:7A:FA
Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
Certificate issuer: /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Certificate serial: 019D9B513D7E7452555D8DCCD6581CB79F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
Manifest number: 051D
Signing time: Fri 17 Apr 2026 12:01:25 +0000
Manifest this update: Fri 17 Apr 2026 12:01:25 +0000
Manifest next update: Sat 18 Apr 2026 12:01:25 +0000
Files and hashes: 1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: rWzJjJvUoV5J9RPCE36FMNkGcpi3V+vGrQuKD7+zN/o=)
2: O4YiRIWBlabnpHM7xKFcaOrOaKI.roa (hash: ayodsdmBoAdUSEjYUyXeYrwcQDz8Nad0uAG3lrZysIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:3d:7e:74:52:55:5d:8d:cc:d6:58:1c:b7:9f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Validity
Not Before: Apr 17 12:01:25 2026 GMT
Not After : Apr 18 12:01:25 2026 GMT
Subject: CN=5ad04ab8b2bc4bd8d98c0cd66d363dc40e007afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:68:46:00:c1:4a:cd:0b:f7:4c:a1:dd:9b:
c8:43:f5:48:1e:a9:4c:e9:34:22:9c:04:ee:9f:d2:
35:0f:6e:66:db:42:fc:fa:f2:d1:95:9f:37:ef:9e:
37:c1:d3:c9:a4:f2:6d:95:e4:ab:a0:c4:36:10:70:
49:46:24:1f:3b:ac:79:92:bf:6a:fc:3e:0c:a5:c3:
2c:21:52:02:30:cb:0a:a0:25:8e:cd:84:c9:98:33:
80:33:00:c0:3b:00:6f:1f:cb:90:0d:56:39:e9:1b:
78:f9:1c:a4:07:ee:2d:49:df:4f:c6:00:d7:7e:d5:
08:8a:f4:d0:d7:74:8a:94:74:c1:8e:0f:0e:29:47:
61:13:78:a9:d6:f0:f0:52:75:a5:35:a9:22:cc:fb:
ff:18:06:d5:24:dd:a7:a8:e0:05:2c:2b:fe:5d:a7:
4b:a8:4b:35:85:0f:8b:77:f1:1b:7f:18:ff:c0:91:
f9:ce:76:7a:07:61:a9:31:0c:c0:52:fb:b3:f1:16:
b8:7f:8b:8f:c6:3c:5b:ca:b4:91:1e:b6:90:57:52:
72:c4:0c:39:bf:89:1e:dd:1f:62:7e:8c:88:ab:89:
d6:d6:57:f6:aa:6b:1b:ed:a0:03:5b:0b:c7:cd:34:
5a:ea:21:99:c0:e7:99:73:20:71:0e:67:04:97:6f:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D0:4A:B8:B2:BC:4B:D8:D9:8C:0C:D6:6D:36:3D:C4:0E:00:7A:FA
X509v3 Authority Key Identifier:
keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2f:65:1b:6e:6d:21:29:1a:ce:27:11:2d:ca:79:ad:99:74:
0d:51:69:a9:10:c1:5e:8c:c7:41:fd:87:ab:27:06:55:88:88:
e5:0d:8b:1a:d4:88:26:62:28:01:cf:63:b2:cb:14:14:fd:f6:
a7:b4:00:93:93:79:8f:c3:20:55:19:20:af:80:fd:68:1c:8e:
df:c1:b3:95:5f:64:70:dd:84:57:7f:45:4a:20:37:a9:c2:9d:
47:44:44:f3:5f:d2:60:45:a2:fb:5a:62:ce:c5:b7:d7:72:79:
6c:3e:39:d3:91:9c:72:c1:06:c9:bd:37:ec:9b:e9:ad:34:29:
24:f2:a1:0a:3f:bf:83:7f:c5:5d:4a:7d:77:a5:70:e1:ab:f4:
f3:70:66:ed:05:ad:4f:c9:b9:23:4a:7c:e5:fc:bc:26:fc:e2:
da:45:f6:a5:b9:83:a2:19:f0:ca:df:06:ec:b4:ae:b3:ed:d4:
f3:5f:50:8c:7e:ca:7e:6b:a2:bf:83:f2:7f:42:85:0b:11:f4:
56:e8:c7:57:21:00:04:21:83:80:b8:d9:32:70:dc:75:b6:3a:
ae:3a:e8:8c:b7:0f:ab:1f:09:3f:b3:87:a9:9e:dd:4b:1d:20:
69:70:4f:5d:f2:c8:3c:d1:d4:55:71:cb:3d:8b:42:ec:27:97:
bd:b8:97:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:23:09 2026 by rpki-client