Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
File: 4sVVsgW63NgpS9MyW5wvvViNIZA.mft (raw, json)
Hash identifier: /wfTkfexEbhgwViJrSvBEfQFlM5tUmctH/IoCNt+ecg=
Subject key identifier: 82:8E:63:E8:C2:53:96:9D:F0:F0:EA:7F:B5:BD:B4:1C:5F:7C:B1:09
Authority key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
Certificate issuer: /CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Certificate serial: 019D9B505F42C5E4D46B7BCEBB1F1518110B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
Manifest number: 1851
Signing time: Fri 17 Apr 2026 12:00:28 +0000
Manifest this update: Fri 17 Apr 2026 12:00:28 +0000
Manifest next update: Sat 18 Apr 2026 12:00:28 +0000
Files and hashes: 1: 4sVVsgW63NgpS9MyW5wvvViNIZA.crl (hash: DSB2YEHKVNLsS2tMy4cz2znqYyQK7UE+b8lCXuxlR5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:5f:42:c5:e4:d4:6b:7b:ce:bb:1f:15:18:11:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Validity
Not Before: Apr 17 12:00:28 2026 GMT
Not After : Apr 18 12:00:28 2026 GMT
Subject: CN=828e63e8c253969df0f0ea7fb5bdb41c5f7cb109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:c3:1e:60:ee:39:9f:a6:75:d8:7a:71:e9:
aa:d7:a9:cf:2d:94:77:b8:38:eb:c3:04:90:9e:f4:
57:20:e8:93:cd:21:08:29:06:a7:88:e1:63:2d:20:
db:c7:9f:1c:89:db:e0:16:04:96:ef:30:88:d3:48:
3a:71:a9:0c:19:97:6b:89:26:1f:9e:b7:23:89:42:
87:81:18:e0:05:1a:e8:87:1d:89:8b:8c:08:02:36:
08:9e:9f:c6:59:4b:e6:23:28:0e:a5:d3:a8:b0:f0:
fa:3e:11:52:ea:18:40:9d:6e:2e:ab:88:aa:46:db:
98:03:6a:5c:ae:5d:d8:72:08:76:cc:ab:b6:0b:75:
23:5b:3b:67:12:e4:95:57:ff:83:19:ea:93:64:d3:
84:f9:52:5f:df:27:6a:a9:11:73:0c:ac:30:41:ed:
33:b8:e4:84:5d:5a:be:34:8f:55:b5:c3:55:b0:d0:
00:79:61:71:77:19:2b:f7:b1:75:57:e5:c8:85:af:
ee:b2:01:57:d5:a7:77:7e:04:ff:5f:a4:ad:17:4d:
ee:13:27:0a:e8:77:8e:49:c3:7a:a0:03:15:4e:fe:
e9:9a:89:6e:fd:58:47:f6:84:7a:18:3f:f1:0e:f3:
df:5f:0d:47:a3:30:f4:97:19:22:b6:76:4d:96:fd:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8E:63:E8:C2:53:96:9D:F0:F0:EA:7F:B5:BD:B4:1C:5F:7C:B1:09
X509v3 Authority Key Identifier:
keyid:E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7b:51:2a:c2:02:3b:ce:27:c4:ee:1a:33:f0:da:df:70:20:
09:4b:f8:37:dd:e4:e4:37:8c:b6:88:eb:58:24:ac:2a:6d:cb:
2c:35:7e:2b:3e:63:2f:13:55:4e:cf:f0:76:2d:af:79:24:ac:
ab:f9:18:f9:44:78:fd:be:9d:3b:c5:d1:c7:67:34:e6:c3:df:
a8:f2:3f:ee:f1:34:43:25:76:f3:f6:78:ab:10:f5:ad:f3:44:
27:3f:13:f7:0f:a3:33:3f:43:ba:02:e2:6f:b8:52:7a:c2:56:
b0:2c:5e:51:4e:7d:6e:7d:a4:50:b5:cc:e2:46:3e:b7:8f:fd:
bb:25:a5:4d:b8:ce:06:fa:3d:fb:31:a4:23:bc:7e:b4:36:71:
cc:79:e2:d1:f9:c0:ef:33:86:ff:10:57:9a:b2:2e:a0:dc:cf:
3b:aa:d3:92:36:5e:8f:37:78:47:7f:ae:22:30:84:fc:d1:41:
0a:ef:84:7e:03:9b:b2:07:a1:5c:68:da:aa:e7:05:6b:49:56:
42:d5:1a:1a:9e:a3:f8:9f:1c:a0:05:32:1a:ea:53:5d:3a:95:
69:bc:0b:9f:d9:0b:bb:09:1c:4d:18:85:d0:14:8a:27:1f:03:
0b:ff:1c:4b:41:73:c7:d3:0b:21:d7:39:8d:8e:f6:cf:04:3f:
93:ce:34:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:13:58 2026 by rpki-client