Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier: BBKCCSFOcgHEtfXDbEt5AUze6IrTvIlFjRSUc0xjnU8=
Subject key identifier: E5:A7:A2:EA:48:CB:EA:FA:A9:8B:D1:82:B2:78:61:F5:B4:4A:2A:81
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial: 019D9A3E975CA514837C7DBE5557C48CD5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number: 0CEF
Signing time: Fri 17 Apr 2026 07:01:26 +0000
Manifest this update: Fri 17 Apr 2026 07:01:26 +0000
Manifest next update: Sat 18 Apr 2026 07:01:26 +0000
Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: gRbPaHcZfeSNePBKwzcdwEnkAkwbyp5+VBiTVdHlgXU=)
2: xtYobtIx2W6_g9SOOJPQhPICYpQ.roa (hash: mB2srtxC3TvgB8CL9USorDjZQ7e+W7OquH6xXCy/qr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:97:5c:a5:14:83:7c:7d:be:55:57:c4:8c:d5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Validity
Not Before: Apr 17 07:01:26 2026 GMT
Not After : Apr 18 07:01:26 2026 GMT
Subject: CN=e5a7a2ea48cbeafaa98bd182b27861f5b44a2a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:84:3f:9d:71:48:bd:f0:93:1a:e5:b6:3b:
46:5a:53:48:a8:2f:ba:cd:48:f8:b1:86:3a:f9:09:
94:d7:cd:12:b3:3e:48:4c:18:73:1e:54:14:2c:f4:
9a:6d:8a:f8:f2:16:22:da:e8:c7:60:fe:38:59:2d:
84:aa:02:d7:27:78:0b:40:66:b0:3d:70:b4:d5:28:
ba:4e:d6:ea:74:12:cd:57:73:13:0e:5e:7b:e1:a7:
81:4e:51:23:a0:1b:ad:7f:d9:c3:97:41:3e:6c:e7:
e2:fa:a0:bd:a8:6f:f8:e1:03:80:af:a3:03:8d:c2:
7b:2e:ba:30:0f:2a:a0:5a:e6:a0:02:37:2e:5f:0c:
e4:9b:0a:06:04:a1:87:95:b5:4c:43:24:56:85:98:
65:b2:c6:04:8d:cb:db:1c:9d:b2:a7:7a:6a:ad:e0:
7c:cc:a2:68:b2:53:ff:23:6d:c7:6f:5b:02:32:03:
5c:31:c6:c0:28:27:40:31:73:c5:ed:66:f4:5f:19:
22:f0:c7:9f:1a:d7:f7:f0:90:d9:64:7d:f3:ce:b9:
fa:5e:7f:9c:f1:c4:dc:c5:f7:f5:77:62:90:80:c7:
7a:cf:d7:4d:33:6e:51:f8:de:9c:e8:d8:d0:96:dc:
45:82:ae:cd:af:88:4b:62:0b:d2:29:25:d8:5b:fe:
49:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A7:A2:EA:48:CB:EA:FA:A9:8B:D1:82:B2:78:61:F5:B4:4A:2A:81
X509v3 Authority Key Identifier:
keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:14:ff:2a:f6:ab:a1:3b:25:c5:6b:04:b6:04:39:36:6e:77:
c2:65:ec:07:3e:1d:76:00:29:e0:82:2d:3f:ac:81:d0:b9:8f:
f9:51:98:7a:b9:4f:23:5e:1d:9a:65:8f:62:07:76:96:9a:13:
c5:d1:3a:37:ca:65:92:5b:09:4e:ed:97:7c:bd:bc:35:fc:e3:
79:64:89:51:45:52:04:57:e9:f3:3a:d4:2b:23:8d:18:62:4f:
70:1e:b3:59:fe:54:16:95:0d:a8:c7:ad:06:b7:91:43:72:02:
a8:a8:d4:a2:a1:94:5a:f8:d8:6b:97:c7:45:ca:6e:22:35:3c:
88:4d:e7:e6:32:8f:85:e0:e0:65:e6:26:ea:03:a7:ba:e8:18:
60:45:7b:b3:9d:d0:71:8c:59:ff:7a:e1:58:f5:a7:07:1e:4d:
9c:1d:67:01:9a:fe:47:23:1a:26:71:ba:36:13:b1:01:76:a6:
4e:9e:b7:f4:34:ab:0c:3c:fc:1c:9c:fa:e3:d1:d3:cc:36:4f:
32:99:e4:a1:83:a1:71:dc:c0:b6:c3:36:83:0e:b5:57:a2:c3:
4b:c6:84:cf:9f:44:b4:64:8a:76:01:86:51:eb:71:bb:9b:66:
a3:20:7d:16:d8:e9:d8:dc:21:65:34:8c:f5:1d:12:ea:6a:db:
68:6e:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:36 2026 by rpki-client