
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier: bS4RB4uHzYseC8NuDzbAauC210MbDC3LV3vHmAhGh5o=
Subject key identifier: AD:94:A3:16:13:C3:43:B8:8E:D2:C6:D2:0F:A5:60:B0:CD:C1:90:54
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial: 019E1C479667F40473D19D586B67350A758A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number: 049B
Signing time: Tue 12 May 2026 13:01:53 +0000
Manifest this update: Tue 12 May 2026 13:01:53 +0000
Manifest next update: Wed 13 May 2026 13:01:53 +0000
Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: wm1XsJsd72U89JQxYZiVq2ydlVvHIeRO2iYiOrGt+E0=)
2: Xhzxh_1tEvbHh31P53cpofaJHAY.roa (hash: 31jnPeVemUW3b4ECC8z4gudFDjDHIoHHJ4mUtzZB8F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:96:67:f4:04:73:d1:9d:58:6b:67:35:0a:75:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Validity
Not Before: May 12 13:01:53 2026 GMT
Not After : May 13 13:01:53 2026 GMT
Subject: CN=ad94a31613c343b88ed2c6d20fa560b0cdc19054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:c2:99:ab:7f:7f:fe:d5:62:79:55:d1:97:
81:7f:80:06:05:0c:4d:f4:c1:74:a0:76:71:ab:67:
05:70:6b:8f:b7:b3:1a:f6:fa:ce:22:b7:6d:d7:a2:
85:76:6f:89:08:f7:ad:0f:66:6c:e0:4a:e5:19:fb:
40:a6:52:2a:fd:d4:92:2c:1e:7c:f4:76:12:73:e2:
fb:7b:99:3d:51:78:84:3b:d0:e7:b4:55:e8:f3:e9:
dd:ba:69:e2:6d:92:b1:06:3a:a4:6a:3c:49:44:e2:
51:f0:b3:2f:1e:b0:fc:25:3e:37:67:24:b2:30:71:
42:f0:9d:08:d1:85:c6:ee:c7:7b:f8:60:cf:bc:8d:
19:ec:a1:cd:fb:59:09:8c:c4:4a:71:ad:78:fa:f4:
f5:61:10:8e:79:84:40:86:05:b1:5a:ed:e5:86:e4:
20:0a:fc:78:76:4f:f6:a2:e9:bc:93:aa:f1:e2:fd:
c0:73:ba:f0:76:4f:25:cf:6c:34:2b:ea:44:bf:c6:
c0:b2:ca:b9:f9:54:45:5b:6b:b1:65:72:7b:81:c6:
dd:d2:b9:2a:19:8e:b4:5c:58:a3:1c:0c:90:d6:8f:
d3:9d:f9:4e:d1:41:41:dc:ef:fe:ce:4f:c0:09:7a:
9a:39:41:15:62:44:a6:23:c3:4a:f1:12:e3:84:a6:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:94:A3:16:13:C3:43:B8:8E:D2:C6:D2:0F:A5:60:B0:CD:C1:90:54
X509v3 Authority Key Identifier:
keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0d:c0:dd:5f:fa:06:ad:d4:77:68:3a:dd:05:c3:14:ae:b4:
38:92:e9:5b:6d:8e:48:23:c3:58:d0:f4:d0:14:82:5b:2e:9e:
9a:0a:6b:2c:31:d6:a5:f1:90:0a:92:f7:1b:0f:35:28:34:b5:
dc:8c:14:a6:50:08:91:aa:50:d1:70:b0:05:06:78:9d:e3:f4:
2a:3c:00:ff:bf:4d:82:4c:63:90:26:25:c5:40:42:12:d6:80:
4e:85:2b:2c:32:39:fa:e2:04:1c:8a:d8:e9:ca:99:9f:04:59:
06:c0:aa:82:ab:e1:13:56:fc:10:6e:5a:63:6b:45:f9:18:e5:
d3:3f:3e:4f:6d:cb:81:28:e5:f4:47:f2:f6:4f:a8:b5:b3:3a:
03:39:36:8a:81:27:32:37:cc:e6:38:e7:5f:3e:fe:ff:e3:a4:
c5:c9:b2:84:7f:cd:ac:b1:39:f9:2d:4e:da:f4:ca:67:78:1e:
dd:7a:84:a9:87:fd:ee:3a:f5:24:44:ea:0e:31:95:c7:a0:1d:
9e:1b:2a:62:76:20:36:db:8a:2b:1a:19:e5:c5:3a:db:9a:01:
67:30:d5:df:25:ca:69:9e:58:7e:13:a0:0e:a3:91:7c:10:10:
da:d8:f2:8b:bd:01:83:56:6f:ca:49:77:31:4c:0f:1d:13:6a:
74:fe:3b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:16 2026 by rpki-client