Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier: DZZ8zBuC+dC3Zp90CocZQShboNRNMKrlrpHqW01v0uk=
Subject key identifier: 1E:23:50:BD:B1:A8:A3:73:74:EE:7B:37:AC:84:61:C5:F8:38:7E:3E
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial: 019DA453CFDDA198C4F4911B32F3450A2452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number: 0CB3
Signing time: Sun 19 Apr 2026 06:00:49 +0000
Manifest this update: Sun 19 Apr 2026 06:00:49 +0000
Manifest next update: Mon 20 Apr 2026 06:00:49 +0000
Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: 2ZtuN7kYf8+jaBtzixNSTZ2S0Vxa+7wGasYTLwHqDc0=)
2: j_t_jFAta10RI31T6FonCloC3D4.asa (hash: Omact/OG1Vjza6tNA6dIAQIik0sg+Ex+j9k7Zm7x4yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:cf:dd:a1:98:c4:f4:91:1b:32:f3:45:0a:24:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
Validity
Not Before: Apr 19 06:00:49 2026 GMT
Not After : Apr 20 06:00:49 2026 GMT
Subject: CN=1e2350bdb1a8a37374ee7b37ac8461c5f8387e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:4b:04:74:fb:0c:95:ea:31:f3:1d:90:c3:
64:2a:69:b1:d7:c8:1c:53:9d:1e:d2:16:85:08:79:
74:ca:52:91:2c:f6:d8:99:c4:8b:b4:69:07:49:f1:
97:02:fd:fe:f1:a2:4c:56:ba:74:9d:00:d0:ce:1c:
16:35:f6:3d:78:68:ef:ca:a6:e9:0f:e1:28:6c:e4:
0a:15:d3:a6:19:02:8b:70:af:c7:f5:d4:0d:9e:f3:
e8:13:cf:fc:9b:24:d9:8b:0b:18:0e:1a:d9:83:38:
f1:43:35:eb:7a:aa:96:39:ee:fe:7f:82:2c:0b:76:
ec:2c:d1:8e:6d:c1:8a:62:98:0f:4e:11:3b:26:b3:
ee:ba:b0:eb:35:6b:36:29:43:09:3c:aa:ab:bc:87:
08:86:ab:30:2c:b6:dc:d2:a1:92:fb:1c:05:de:66:
66:0b:a4:c9:55:d1:17:06:a8:34:58:6f:e5:0e:fb:
9d:88:aa:8c:a5:a4:90:70:33:d1:74:9f:c5:3a:0e:
0e:35:2b:e0:66:4e:ff:8c:5d:6e:f9:c5:75:d0:28:
30:93:2e:bf:f3:79:55:cd:12:41:89:7f:fd:82:22:
76:02:1f:ad:d8:40:6e:3b:87:cd:18:5a:c9:66:83:
36:b7:22:99:4a:aa:2f:9d:86:43:90:6d:7e:d4:47:
c0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:23:50:BD:B1:A8:A3:73:74:EE:7B:37:AC:84:61:C5:F8:38:7E:3E
X509v3 Authority Key Identifier:
keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:89:f8:d0:b6:7a:ff:ef:13:4b:35:09:91:37:27:b2:2c:a8:
42:13:57:8d:f1:5a:c9:8f:ff:af:50:fd:6c:e9:9c:4d:1d:27:
86:98:87:81:89:e0:38:40:30:1b:ce:c4:c6:78:1f:39:35:f8:
0e:68:f4:55:38:04:7d:85:ef:ca:ce:c9:38:47:62:a2:59:87:
78:6d:0b:09:36:72:1d:6f:e4:d6:d8:54:6f:a5:dd:2a:73:24:
95:85:74:c2:56:55:da:fa:13:fe:1e:5e:ed:03:b6:d8:8f:a3:
65:7d:41:c1:22:67:ad:e8:c9:59:df:de:89:8c:c3:3d:95:15:
60:cb:76:49:73:2e:90:35:61:e8:14:d7:70:bc:db:74:f6:81:
60:47:44:c2:b3:b5:63:60:6c:e3:1a:71:b1:6c:e4:3e:9d:bf:
18:98:33:c1:78:cf:01:74:ba:34:da:83:0b:4f:27:a9:ba:8d:
4a:64:8e:39:c6:82:11:85:62:f4:80:72:48:7f:c2:47:87:6c:
0e:16:be:bc:8b:56:34:60:2e:1b:36:f8:b0:f9:39:1c:8d:98:
d7:e1:4f:9b:39:e4:fe:41:a0:ec:55:d2:ec:39:86:33:20:16:
41:ee:dc:56:9c:8b:9a:18:62:4c:a6:53:0d:a3:9e:44:73:a0:
d9:a5:5d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:18:48 2026 by rpki-client