Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier: CnX9oIfWPpyHTEiUeIPxz0/i1SAquM1enRZz8UL0qxY=
Subject key identifier: 45:D9:46:CE:05:E6:60:F8:5D:83:CB:BB:8B:35:85:D1:21:A7:60:A9
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial: 019E1D9081FAAE75CFB1CD918B39A2E46CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number: 0997
Signing time: Tue 12 May 2026 19:01:10 +0000
Manifest this update: Tue 12 May 2026 19:01:10 +0000
Manifest next update: Wed 13 May 2026 19:01:10 +0000
Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: hKAXNoJXY7ORWTSx3JPBnv5tdsbROkYx3IbOGJLxKf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:81:fa:ae:75:cf:b1:cd:91:8b:39:a2:e4:6c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Validity
Not Before: May 12 19:01:10 2026 GMT
Not After : May 13 19:01:10 2026 GMT
Subject: CN=45d946ce05e660f85d83cbbb8b3585d121a760a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:25:3d:c7:d4:ac:4b:ca:4c:9f:83:b3:68:
17:3f:6f:8c:79:16:47:17:28:53:01:bd:bc:60:49:
af:46:7a:1d:46:39:b7:85:b1:ae:27:14:1e:5c:7b:
ec:c8:1c:6f:0a:48:1e:e1:1b:8f:26:8e:39:9b:a3:
45:56:8d:9f:76:e8:b2:3d:32:37:37:78:03:a7:cb:
dd:e0:ca:c5:d0:fc:95:c7:c2:02:8a:58:2b:94:87:
04:08:79:bf:4c:3d:68:5b:9b:2c:63:1c:6a:58:fc:
b6:ee:9c:7c:9d:2d:4b:92:6e:c9:6d:46:d1:ef:e1:
3c:d6:d1:86:ed:ee:cb:2e:e2:b0:e5:48:be:36:d1:
c6:f1:ab:f1:48:f8:8d:18:5a:f8:4d:67:f3:ac:cd:
77:46:6c:0c:bb:d9:bf:f0:3f:2d:8a:60:26:9f:74:
03:d5:09:93:be:69:ab:8f:b7:27:4b:d7:d1:c8:9e:
89:18:17:10:3d:95:a0:8e:6d:64:6f:d8:0c:78:82:
f9:d0:eb:fc:7a:b9:06:3d:e1:e1:f4:d7:b6:20:0b:
31:81:3c:a2:a8:2b:3c:3c:4f:01:4b:fa:41:56:7f:
3f:ff:73:74:10:8b:24:53:b9:3c:9a:c0:0c:3a:fa:
98:05:6b:73:16:d1:0a:98:d4:30:7e:13:f2:34:53:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D9:46:CE:05:E6:60:F8:5D:83:CB:BB:8B:35:85:D1:21:A7:60:A9
X509v3 Authority Key Identifier:
keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bd:44:a5:fe:31:b6:a8:4a:23:0a:bb:c5:f5:49:bf:42:38:
71:8d:62:40:85:c0:ce:07:fa:c4:ca:57:dc:79:a1:14:5c:e2:
71:6a:f0:e5:5d:fc:c8:64:88:c4:8f:1c:80:78:d9:48:e3:9a:
84:30:b7:16:e3:9f:12:cb:be:2d:5b:e0:af:85:6a:81:0e:7c:
fe:b2:3b:bf:86:04:5c:91:8e:5b:d7:e1:8a:ab:c9:93:ce:4a:
60:66:08:33:e6:de:af:24:11:a8:26:72:e9:3f:e2:6f:81:33:
96:6a:b2:5c:47:a6:14:39:ec:7e:0c:3f:0a:0f:57:a8:26:fa:
d4:77:b5:6f:d1:85:82:81:f6:3c:92:f9:ae:36:ab:1c:18:0e:
48:67:91:fb:75:fb:41:ea:8f:4e:d9:52:c6:03:d9:c6:d2:db:
dc:26:ec:30:e6:36:5a:1e:ba:29:3e:dd:e8:fe:25:fb:63:65:
7f:80:37:b2:3b:a8:99:4d:17:3c:89:7c:99:6b:88:ed:10:12:
d9:89:d0:58:fe:82:65:39:36:11:38:f1:69:57:b1:69:91:b8:
c6:95:09:2a:ef:ef:1a:d3:ad:c1:5f:ab:3f:3a:33:c5:7c:f5:
3c:b4:8c:b7:0a:62:bf:80:1a:9e:8e:62:1c:de:5f:43:3e:a3:
45:3d:1f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:17:03 2026 by rpki-client