Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft (raw, json)
Hash identifier: xz1MzbhEA3JrgoBXlwEKrzjA4BXfuEEHBcnyrVWAQWc=
Subject key identifier: D2:B1:33:03:60:1C:8B:D6:E1:2F:C9:68:97:7D:60:00:76:81:9D:13
Authority key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
Certificate issuer: /CN=e31c010e95015c2123641d33120a7e9c9008002d
Certificate serial: 019D9BBEED7EC64D809AE85B7A70E2F83751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
Manifest number: 01EE
Signing time: Fri 17 Apr 2026 14:01:14 +0000
Manifest this update: Fri 17 Apr 2026 14:01:14 +0000
Manifest next update: Sat 18 Apr 2026 14:01:14 +0000
Files and hashes: 1: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl (hash: xrqseu2Sk14Ke/pXiH70Z/MrjyIbjTGYLayfMh8Lkhc=)
2: EVP8JZC4veSxdxX6T8tUKYQ-OAA.roa (hash: bYUAbwTN22M9GXhG7TnoyYrgAEb8pmrS9QwXIchXrAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:ed:7e:c6:4d:80:9a:e8:5b:7a:70:e2:f8:37:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31c010e95015c2123641d33120a7e9c9008002d
Validity
Not Before: Apr 17 14:01:14 2026 GMT
Not After : Apr 18 14:01:14 2026 GMT
Subject: CN=d2b13303601c8bd6e12fc968977d600076819d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:04:98:a9:cc:3a:c9:b1:d3:af:bb:c7:f7:
ad:7d:85:17:c2:66:2a:8e:5e:76:f4:62:60:53:22:
14:8a:d9:4e:15:08:32:ce:40:0e:6e:5e:5e:05:64:
52:02:cd:8c:70:ab:00:62:13:26:68:3f:e9:28:4a:
e0:18:94:da:2d:85:25:8c:45:de:66:5d:0d:80:ad:
3e:aa:eb:46:6d:c3:96:6e:b5:db:ce:5f:97:fb:41:
1c:fb:d9:28:80:3c:47:56:4f:90:b0:1a:e9:4a:1d:
3a:00:a6:aa:bd:d6:2b:1d:74:56:e3:81:66:ed:71:
8b:6d:a2:fc:3f:f0:ee:fa:a4:95:6d:11:80:8d:9a:
83:c3:3f:39:b8:ee:ad:b4:24:47:cf:fd:11:77:2e:
5b:25:0d:95:cc:18:ee:44:f7:e0:1d:3e:07:74:89:
3b:77:a4:57:46:c0:77:f7:92:01:ac:15:59:ca:43:
c4:bf:de:4f:56:10:e9:d5:c2:2b:98:62:2f:71:e0:
54:bf:bc:4b:db:8a:6c:43:ed:61:cc:a4:f5:07:84:
d1:22:db:c8:d5:91:b5:7c:33:42:d9:99:58:68:18:
de:05:41:02:57:8c:43:7d:98:6d:24:ae:0d:b7:82:
be:78:9f:58:09:d0:00:4b:f2:db:33:f8:c4:6c:dd:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B1:33:03:60:1C:8B:D6:E1:2F:C9:68:97:7D:60:00:76:81:9D:13
X509v3 Authority Key Identifier:
keyid:E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0f:f3:cd:d0:a8:87:3c:bf:ad:73:52:41:74:b1:c9:22:ce:
bb:1e:36:e3:2d:73:ff:5a:06:e1:b0:72:92:f3:07:be:20:af:
49:2f:57:5b:65:29:47:26:4b:cc:59:d2:fb:0c:15:65:7b:62:
8d:77:4c:98:d7:9a:f8:01:5f:a6:dd:b6:88:d3:24:9c:44:5a:
b2:bc:03:d4:6d:5e:e7:6f:da:94:95:34:49:b7:de:0f:2a:3e:
8b:c6:1f:c0:8e:b5:d5:c9:60:1e:fd:d2:ae:b1:10:dc:43:7c:
20:51:9b:f3:86:65:1e:4f:24:f7:12:8d:eb:fe:50:d9:57:18:
ba:ee:a4:6c:71:d8:fa:be:1c:2e:61:e9:75:f8:e0:56:23:d1:
57:7c:dd:52:37:fd:9c:80:cd:57:90:cb:32:85:e7:8c:a6:af:
ea:3a:22:71:8f:b9:87:f7:0b:35:15:32:1d:4f:f3:f9:2c:95:
00:8e:be:43:1f:5b:59:4f:4d:97:a9:87:0f:38:bb:f8:2c:c8:
35:32:8a:69:3c:66:40:51:26:07:25:1b:6d:ed:95:1e:d0:2c:
d8:5a:fb:b2:aa:da:5a:aa:ec:74:21:a1:6f:00:49:90:3d:3a:
db:a6:c8:8c:e0:f5:1b:1c:fa:56:cd:86:5e:91:41:b0:ec:55:
14:06:7a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:37:15 2026 by rpki-client