Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
File: 4EHIW0dOi2wAiR2VQST_DIEgDYw.mft (raw, json)
Hash identifier: yXsIX3pJ24oSDpxTnuBpB80hRj1Mq+5eRq03xRf1I0k=
Subject key identifier: DF:59:B9:18:1F:BF:8A:87:B5:DF:D6:03:86:D5:0F:21:98:A4:A0:62
Authority key identifier: E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
Certificate issuer: /CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Certificate serial: 019D28F2F76E47C29EC1A8021672A4B81AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
Manifest number: 0BE1
Signing time: Thu 26 Mar 2026 07:01:44 +0000
Manifest this update: Thu 26 Mar 2026 07:01:44 +0000
Manifest next update: Fri 27 Mar 2026 07:01:44 +0000
Files and hashes: 1: 4EHIW0dOi2wAiR2VQST_DIEgDYw.crl (hash: CRmr4y1hNTl83iwfCJPTyBKH1e7Tf3PvCuZcIIA7DWI=)
2: _-JfME-Erck4pkvS4WQAD8N3srk.roa (hash: QrEZHXMbaydoz+Hi0SYY4JVGJuxwhF6iX/ilfGhMhOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:f7:6e:47:c2:9e:c1:a8:02:16:72:a4:b8:1a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Validity
Not Before: Mar 26 07:01:44 2026 GMT
Not After : Mar 27 07:01:44 2026 GMT
Subject: CN=df59b9181fbf8a87b5dfd60386d50f2198a4a062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ec:40:59:ec:ae:98:2d:48:ae:0f:3d:54:e1:
6e:fd:5c:cb:5b:04:70:05:8e:a8:c7:1f:d5:61:79:
81:de:dc:f6:da:c1:56:23:c8:11:28:29:04:3b:1e:
59:0d:1d:64:a9:7b:5d:59:9b:b5:c2:8b:ae:ce:b1:
10:0d:f9:8a:09:9a:06:2e:83:9a:e4:f9:25:4c:e3:
c9:cc:43:3b:dd:9b:bb:16:e4:c7:96:c6:64:9a:77:
95:66:b3:99:90:76:5a:d2:53:02:82:bf:57:0b:9b:
9b:7b:a0:06:4f:0e:7b:96:5c:94:92:02:93:2f:cc:
75:03:32:e2:52:dd:93:86:14:ef:c7:ff:7d:e5:2f:
8f:a6:86:60:9c:2f:20:5c:7a:a5:0d:cf:c9:13:8a:
4b:1e:dc:40:17:b8:0f:2d:5b:4f:bd:20:8b:02:74:
cb:f0:d4:ee:d0:fe:67:bd:9c:b9:91:13:f2:9b:54:
ec:ae:ca:0c:48:8f:f2:ff:43:d7:01:ad:68:2e:5c:
d8:2b:3a:2c:53:4c:c3:7a:52:c9:93:a0:bb:ee:49:
08:17:35:aa:f4:60:3f:8e:4c:eb:3c:51:34:d4:de:
57:41:2e:da:24:0d:95:5a:59:b6:5f:5b:54:a9:84:
98:45:ba:50:fc:b0:d5:d5:d3:df:5b:f1:72:5d:bf:
bb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:59:B9:18:1F:BF:8A:87:B5:DF:D6:03:86:D5:0F:21:98:A4:A0:62
X509v3 Authority Key Identifier:
keyid:E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1e:a6:33:13:eb:25:93:d2:ff:1a:08:d8:be:44:f6:f4:3c:
a7:e9:b3:15:1e:e7:f0:ce:2d:c5:a5:ca:f5:18:b3:a4:52:d7:
64:4a:06:ac:37:ad:93:f2:de:b8:7f:ae:8f:3e:4b:e6:95:81:
22:4e:7b:11:2b:c8:2d:16:e9:48:17:94:c5:c2:e6:14:91:b3:
ca:c0:b4:e2:da:61:13:69:d1:4e:66:22:e7:d8:9d:91:96:02:
fe:34:52:bb:a3:94:ea:da:2f:02:be:3b:04:30:53:68:56:47:
b4:7b:22:0f:ed:43:72:dc:f6:b3:45:5f:5a:f1:cd:b1:70:5d:
69:b4:8f:94:1a:0c:c7:50:64:e4:db:8d:d7:f7:e6:68:80:02:
e0:77:4b:90:bc:76:80:ca:7b:05:05:fa:60:64:0b:78:51:62:
b9:de:b5:38:42:4b:ca:8c:16:86:90:1d:01:e2:91:a9:e1:21:
b1:40:01:37:c5:33:06:62:70:47:ca:eb:4a:a9:ce:a5:c9:62:
69:4b:77:64:73:ee:aa:3c:4e:a2:3a:cb:3a:6e:c9:8a:96:29:
d1:29:ad:de:bb:2c:6d:56:69:0f:83:6b:d3:88:8e:dc:7e:ea:
be:77:e8:c8:97:26:e8:d5:96:cc:c1:01:e3:3e:4b:62:d9:35:
d1:0f:06:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:00 2026 by rpki-client