Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
File: 4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft (raw, json)
Hash identifier: bV2ytWKJYv/TT5AEN1m74aa8dze27wCDa8vw8Y0VZ2g=
Subject key identifier: 01:2B:DB:19:43:40:CD:8B:59:04:90:0E:C0:F2:F2:2B:0D:A3:96:8D
Authority key identifier: E0:BB:ED:E6:49:6F:71:72:77:68:AF:6B:61:B0:BD:D3:0E:21:70:B0
Certificate issuer: /CN=e0bbede6496f71727768af6b61b0bdd30e2170b0
Certificate serial: 019E1F4775672C950420B74DB49F509AD905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
Manifest number: 0290
Signing time: Wed 13 May 2026 03:00:37 +0000
Manifest this update: Wed 13 May 2026 03:00:37 +0000
Manifest next update: Thu 14 May 2026 03:00:37 +0000
Files and hashes: 1: 4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl (hash: M1UDMXsyYjS9AvuU4LKJE80DdGHcz4fIpSwr+xgo930=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:75:67:2c:95:04:20:b7:4d:b4:9f:50:9a:d9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0bbede6496f71727768af6b61b0bdd30e2170b0
Validity
Not Before: May 13 03:00:37 2026 GMT
Not After : May 14 03:00:37 2026 GMT
Subject: CN=012bdb194340cd8b5904900ec0f2f22b0da3968d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0a:72:f6:60:b4:ad:8c:d7:3e:ef:31:24:e9:
ac:59:c4:cc:17:ba:b9:5d:de:ed:17:78:e6:8e:1a:
f7:ca:6f:e7:0f:67:6e:6b:4c:94:49:d7:58:dd:c2:
5a:44:c2:3e:25:b2:ba:01:24:dd:46:63:1d:d1:87:
c8:4c:79:33:d4:d0:95:29:62:c5:79:e3:61:32:12:
3b:d1:c9:be:41:aa:87:f0:65:3b:39:7d:07:d6:e7:
38:ef:a6:06:43:3e:ea:c2:3e:c4:88:07:3d:de:3d:
b2:17:dd:b0:d4:2c:73:e0:ba:b5:f2:4e:43:d6:c9:
26:90:c6:9a:44:10:62:eb:1f:6a:59:8b:dc:fb:18:
62:1a:ed:8d:86:47:1d:cb:2f:f0:e0:cf:8b:6e:7b:
ba:c2:56:c9:83:8c:9c:c1:99:3a:d2:4f:2a:42:d5:
e6:13:02:5e:d7:ea:0c:d2:58:a6:76:e4:de:f4:a9:
5c:dc:47:2f:fe:f8:96:b1:fe:f8:8f:4f:78:53:e4:
b8:35:45:70:62:b0:3e:8c:41:fa:1e:a6:63:79:8f:
8c:41:98:3a:2e:d2:76:96:f7:bd:a9:2d:66:d0:61:
ee:83:a4:7a:cc:6b:3a:ce:c7:20:f9:01:5c:10:52:
e1:74:44:d9:bf:41:0d:a3:3f:5e:c6:d8:e3:13:61:
73:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2B:DB:19:43:40:CD:8B:59:04:90:0E:C0:F2:F2:2B:0D:A3:96:8D
X509v3 Authority Key Identifier:
keyid:E0:BB:ED:E6:49:6F:71:72:77:68:AF:6B:61:B0:BD:D3:0E:21:70:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ce:69:4c:f3:82:55:2c:1b:3e:a2:2a:23:ee:00:81:83:87:
a9:5a:18:ec:76:c7:f0:0f:f1:13:4a:93:37:02:8e:7a:26:26:
9a:3a:6b:ff:de:e1:be:21:4d:a4:28:4b:a0:3b:40:50:bd:71:
e0:ba:28:2a:d4:6d:5a:72:ed:2b:11:e0:c5:fd:ed:db:a1:4a:
d2:ae:92:0f:02:78:69:50:18:58:18:37:09:ce:d4:ff:f4:2a:
3a:3e:4d:ca:65:cd:08:1c:d2:a3:f4:51:8d:72:5d:32:73:97:
49:6d:5b:62:df:0b:55:bd:4f:04:3c:b9:37:dc:08:b8:e1:4b:
5c:cb:34:99:78:06:30:f7:e6:6a:b7:13:db:27:ab:e8:65:25:
69:ca:17:fa:8f:d0:18:e1:46:0b:3f:fd:5a:6b:bb:fb:c5:c0:
ab:9f:6d:24:54:40:d1:48:b7:bd:79:28:89:3f:9b:a9:24:15:
07:0c:73:dd:41:c2:3f:a6:52:aa:aa:0d:77:3f:49:e1:d8:f5:
45:05:95:27:ec:d9:db:52:4a:8e:02:31:3a:e3:e4:1c:07:f8:
dd:05:a6:79:70:0f:b8:a7:2f:6c:8a:a1:68:14:b4:5f:d0:f0:
ec:d1:bd:ad:0d:b0:b9:dc:69:9f:af:3e:a9:b4:6d:1e:5f:5e:
bc:2a:e1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:09:28 2026 by rpki-client