Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
File: 4KWDmEmtO4v_oBSbsOEeZhycPX8.mft (raw, json)
Hash identifier: NLZ9a4yE5KahvYM1jwRsgd9bBrBhBN8SNu3cTAqUmqk=
Subject key identifier: 30:63:12:C0:C4:28:77:D2:2A:19:66:7B:30:5C:A3:83:9E:21:B2:73
Authority key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
Certificate issuer: /CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Certificate serial: 019D9962AB8E7A3EC535B4E9297DD8BF71B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 03:01:13 +0000
Manifest this update: Fri 17 Apr 2026 03:01:13 +0000
Manifest next update: Sat 18 Apr 2026 03:01:13 +0000
Files and hashes: 1: 4KWDmEmtO4v_oBSbsOEeZhycPX8.crl (hash: 5WVLmwgXUZS6UxVCm7ShqcMMDkDiPimboifX86qm6XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ab:8e:7a:3e:c5:35:b4:e9:29:7d:d8:bf:71:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Validity
Not Before: Apr 17 03:01:13 2026 GMT
Not After : Apr 18 03:01:13 2026 GMT
Subject: CN=306312c0c42877d22a19667b305ca3839e21b273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:4d:c2:f1:2c:42:4e:40:a2:de:d5:33:1e:
ed:12:62:ea:a3:a5:ef:90:74:a4:a8:69:b5:b1:ca:
96:ec:11:76:e6:b6:b4:02:50:2f:db:db:2f:98:1e:
60:4e:8f:ca:af:2a:ab:bd:98:b4:88:77:fc:c7:5c:
ca:b8:da:74:93:b9:cd:03:8f:e7:b2:0b:73:ca:5e:
e3:d9:b9:fe:f8:6f:67:bc:cf:70:f6:93:b4:c1:5c:
6a:e0:fd:3a:34:57:c7:a4:ae:e4:69:47:55:a6:51:
76:bf:98:6d:25:49:79:6c:b3:cb:41:44:89:5f:30:
c0:00:1b:2e:f8:d3:b0:ff:61:c2:24:b9:57:8f:ed:
e6:83:2a:76:42:78:ac:64:9d:e1:53:4f:62:44:05:
33:5c:38:3f:a1:95:26:72:85:21:36:ff:2d:db:ff:
86:ec:bb:e4:d6:8d:23:24:78:4d:9e:b5:b3:52:26:
4d:89:18:1e:b6:00:07:60:d7:db:e4:e9:f1:dc:0d:
e1:72:d9:b7:c7:7e:b3:7a:bc:09:6c:c3:74:92:dc:
86:39:35:fe:d5:ae:7a:95:65:9e:ee:85:bc:4f:bb:
1a:ef:4f:92:6a:73:08:a7:1f:31:49:0b:bf:5c:95:
9e:c1:db:06:7c:f4:b2:c4:f9:f6:14:3e:fe:b1:1f:
23:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:63:12:C0:C4:28:77:D2:2A:19:66:7B:30:5C:A3:83:9E:21:B2:73
X509v3 Authority Key Identifier:
keyid:E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5b:75:85:b4:68:52:93:79:cb:8f:b3:7c:40:c8:43:27:70:
13:05:2f:1c:8b:d1:a5:7a:3c:3a:78:cf:a5:5e:8f:3b:b2:47:
c7:e6:d9:13:08:c0:0c:1c:8e:88:d9:9a:b9:79:72:f5:30:b4:
90:19:56:02:69:26:79:80:e7:5c:d4:79:33:e7:f4:60:3a:ff:
4f:71:6e:ad:5e:7e:11:13:bb:3f:1b:35:ae:a4:f7:85:5e:65:
c0:79:64:2e:c8:84:6c:4b:91:25:b2:33:c5:aa:80:19:2f:96:
05:57:ad:9e:6e:12:60:4a:18:23:1b:6a:3f:b8:b9:d0:76:13:
38:98:49:f9:f1:bf:0e:82:2d:4b:c7:dd:c4:e8:cf:24:1c:4a:
4b:44:d4:47:f8:d0:ba:f4:63:ef:5a:b4:dc:69:1d:30:1b:20:
5c:b3:3d:9c:78:a3:79:f9:81:fc:b2:42:84:d8:80:b7:d1:9f:
dc:26:5f:b7:a2:5c:77:73:bf:25:97:6b:2a:c9:e5:3e:44:9d:
cc:70:e3:3e:d8:d2:16:12:dd:22:73:65:7e:d8:7b:af:d0:40:
96:80:da:9c:dd:79:89:0c:e4:9d:5a:60:40:51:16:c0:19:55:
fe:e7:bb:b3:be:67:8c:f6:9d:7e:8c:5b:45:8e:97:c7:ff:09:
90:3b:44:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:47 2026 by rpki-client