Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: 3rp2vuAPB0L9xhTp2toKr2uDUHXQQzRuhPgc2Zp9vAw=
Subject key identifier: 04:3A:9A:1E:05:87:BB:F8:17:CA:26:52:9F:03:E3:39:84:C1:5C:8E
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 019E1F7EBA8D73FF1CE476794E8AB2D6DBFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 0B45
Signing time: Wed 13 May 2026 04:00:59 +0000
Manifest this update: Wed 13 May 2026 04:00:59 +0000
Manifest next update: Thu 14 May 2026 04:00:59 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: sWG7uUMjJ3kxbcdM3nGyTgVa6EFt2n83FPl4cOS9/4w=)
2: OPFTuLGWkU6mUdnCpgOtMP0wcEc.roa (hash: mYTV++dJNwiiA96b08GGaua3APnQu69gvPcnLc6GiRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:ba:8d:73:ff:1c:e4:76:79:4e:8a:b2:d6:db:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: May 13 04:00:59 2026 GMT
Not After : May 14 04:00:59 2026 GMT
Subject: CN=043a9a1e0587bbf817ca26529f03e33984c15c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:a6:b7:58:d7:b1:e3:aa:e9:e1:60:12:3f:
f5:08:45:62:7e:19:55:58:84:ad:41:e2:c9:30:0e:
46:96:a0:18:8d:0e:19:df:7a:31:2e:68:0d:25:b6:
8a:5b:7e:15:e2:eb:1e:de:b8:b9:28:92:62:07:fb:
8e:20:a2:94:12:dc:23:35:c5:a8:4c:fb:06:2e:b1:
a8:43:b8:0c:9f:a7:ce:b1:18:a1:b2:cb:56:0d:91:
3c:53:85:81:be:9a:0b:00:85:f1:e0:78:8f:dd:35:
03:0a:39:c7:76:39:fe:fc:c7:c7:1b:e3:d2:48:88:
0c:19:f5:3c:56:ee:cf:c3:0d:d5:ea:c5:da:11:45:
d6:58:50:1a:33:31:af:90:16:16:f9:e0:74:38:c0:
d1:7f:75:72:01:84:34:7d:20:5b:e9:a9:a1:e5:d6:
da:2e:0d:68:65:1c:1e:51:f3:8c:cf:28:85:be:56:
9c:f7:63:6b:ce:8d:67:c2:b6:3f:d6:70:1c:43:c7:
0c:8a:3f:9e:cf:dd:8a:7c:39:ca:27:03:20:ad:b2:
95:86:07:58:b5:88:ff:63:19:06:5e:dc:4b:1a:bf:
05:da:ba:c0:89:90:74:33:e3:e3:dd:03:cc:e1:c6:
fc:3f:a7:fe:08:22:b3:87:27:8a:ec:f4:d5:8d:72:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3A:9A:1E:05:87:BB:F8:17:CA:26:52:9F:03:E3:39:84:C1:5C:8E
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ec:a7:9b:21:02:41:c5:7f:c5:c3:cf:b9:36:e2:1a:4d:c4:
57:15:23:38:d5:9c:af:0c:a5:06:64:83:ff:55:00:2e:61:41:
4a:3b:c7:78:0a:96:68:a3:aa:b8:04:23:b8:79:e8:2b:81:fc:
8a:cc:e3:78:81:d6:67:f1:1e:ab:d4:b5:dc:b5:e3:d5:c7:43:
cc:e0:78:bc:e7:f2:cd:10:ba:42:dd:de:ee:e7:1f:bb:ba:aa:
23:61:25:a0:16:62:b7:e0:60:a1:e1:31:fd:d1:e7:6b:05:b6:
77:d7:9c:c2:ed:e8:39:af:87:8c:b3:90:04:15:16:c6:75:8d:
2a:91:95:b1:2b:82:3a:c4:57:b3:84:34:2e:ae:27:c0:46:f1:
b9:87:a0:06:e7:50:91:4f:dd:62:9f:87:30:1d:a5:8d:42:db:
6e:5a:28:7d:d5:41:b4:1d:de:7c:fa:49:eb:37:c7:5d:a4:e6:
e5:b6:fa:fc:5e:7e:8c:47:5d:a6:d0:de:d0:3e:c3:bb:45:01:
0d:e5:c9:e4:d6:88:34:5c:0b:58:49:06:96:f3:cf:ab:03:10:
f6:23:df:05:81:f2:84:f3:ba:92:7c:30:2a:71:34:dd:5c:cb:
6a:4d:fe:4b:6f:5f:f3:1a:6f:57:2f:52:86:4a:81:0b:d2:6c:
bb:ab:83:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:31:13 2026 by rpki-client