Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: NmH65Vr7TZ2Y1+Ur+a6G+B2hHsESJgbnZxui4A6CnaA=
Subject key identifier: 48:E0:A4:38:68:61:7A:74:83:00:1B:B2:65:28:4E:97:B0:FD:69:62
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 019D98BD49EEEA6431CE07B07CFAC17F8841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 00:00:35 +0000
Manifest this update: Fri 17 Apr 2026 00:00:35 +0000
Manifest next update: Sat 18 Apr 2026 00:00:35 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: EwGXi+EisB16JMNn5VRrRfDMZGytgfX6gmqx5tzgEf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:49:ee:ea:64:31:ce:07:b0:7c:fa:c1:7f:88:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Apr 17 00:00:35 2026 GMT
Not After : Apr 18 00:00:35 2026 GMT
Subject: CN=48e0a43868617a7483001bb265284e97b0fd6962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:73:3d:b7:6c:76:da:0d:51:3f:21:c5:6c:
bf:bc:77:49:02:77:07:ad:da:5d:e9:2c:d7:c0:60:
88:0d:a1:5a:66:34:c8:4f:8a:1b:47:7f:ed:e8:5c:
67:d0:15:43:35:46:15:89:1f:fa:82:fb:3f:ff:48:
02:66:da:25:3a:01:9d:22:1a:f9:d6:d7:b1:1c:a9:
aa:d7:7f:db:74:ce:2a:f4:40:4d:05:88:f5:40:bd:
a8:a2:bc:5c:9c:36:e9:36:14:62:e0:da:08:5c:58:
a1:3b:f9:3d:b6:75:a6:ed:08:d5:14:c0:f3:0e:18:
a1:20:da:63:ee:08:70:02:d2:fb:5a:17:15:27:d9:
c6:d8:4c:3f:1d:a4:ef:36:c4:d3:8e:e7:a7:69:e0:
a7:96:0e:17:de:22:ef:3f:77:cf:60:53:6f:b7:a3:
24:38:e4:8d:7d:b0:74:09:6b:73:c2:52:d2:99:a3:
2c:54:82:cd:8c:b4:4d:6a:6a:0e:b6:6d:1b:6d:aa:
9c:53:1f:32:9e:ee:c1:9e:62:66:21:fe:81:90:bf:
b3:f8:6d:32:3c:85:2b:27:31:d8:d4:bb:59:3a:a5:
dd:33:17:1e:fc:41:ee:dd:8c:ce:62:50:ef:10:ac:
54:ff:37:4f:7b:0a:a1:88:2d:19:1d:cd:b9:da:5c:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E0:A4:38:68:61:7A:74:83:00:1B:B2:65:28:4E:97:B0:FD:69:62
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d1:5c:25:d5:af:d8:8a:97:a6:1d:a7:e8:12:62:6d:62:67:
dc:17:08:62:09:ba:27:59:05:90:9e:6c:e1:46:85:84:42:f2:
fc:60:9e:c7:e1:cf:42:f2:e2:44:d6:f6:0e:a7:b6:63:43:2e:
34:92:93:8e:1e:d5:e9:75:66:37:17:85:9e:9b:db:02:ac:eb:
92:92:bb:d5:92:b1:fb:1d:53:23:a8:45:81:fd:9a:6d:1f:57:
91:b8:ac:01:98:81:3b:74:59:35:03:5b:c7:72:06:0b:a1:43:
a9:a4:7d:86:c7:b4:90:1a:28:5a:20:11:a7:0d:93:d0:ef:8c:
98:86:9a:5d:d6:6a:bc:12:4f:e4:fe:21:55:b4:3d:de:7b:56:
f9:b7:1a:2c:f1:78:2a:b8:87:d8:31:97:2c:0b:15:82:72:41:
fb:3c:e8:9b:23:d1:0e:17:ac:d4:b4:c4:9c:aa:0b:40:b0:73:
4b:36:29:1f:70:9b:26:cb:f9:42:15:cc:dc:2a:21:ed:d7:da:
74:13:4b:a1:0e:09:f5:bb:02:f7:19:d5:5e:5b:9d:3f:f8:87:
9f:61:56:a7:93:9e:09:35:53:56:80:ab:b1:41:dc:c5:0d:92:
ea:7a:7c:1f:5f:42:c8:d9:d1:3d:4f:87:3d:c6:9e:56:a8:96:
29:ef:4b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:52 2026 by rpki-client