Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
File: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft (raw, json)
Hash identifier: FbXxR/jL87hyJG6YHUJFXEOQn/Y8SP7MAIq3psWc+bc=
Subject key identifier: AA:D5:F3:8A:1E:B0:57:89:FA:B2:10:AE:BA:24:8E:E1:CE:5A:FA:66
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Certificate issuer: /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial: 019D27A8E743797434EC806B4019303A2916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
Manifest number: 147F
Signing time: Thu 26 Mar 2026 01:01:13 +0000
Manifest this update: Thu 26 Mar 2026 01:01:13 +0000
Manifest next update: Fri 27 Mar 2026 01:01:13 +0000
Files and hashes: 1: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl (hash: F5FaZMvHqdFy3DuD6VYuhvWFhTGfIP2Lu3iAd/6GCj8=)
2: ivkUxaGtEsJtdEm-0-az5FTe9g4.roa (hash: jf7yns1EHQl0bSQHREu9Zc2V/PBevRWEVblmvAVkiQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e7:43:79:74:34:ec:80:6b:40:19:30:3a:29:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Validity
Not Before: Mar 26 01:01:13 2026 GMT
Not After : Mar 27 01:01:13 2026 GMT
Subject: CN=aad5f38a1eb05789fab210aeba248ee1ce5afa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:74:6d:f1:9e:e9:3d:30:ea:ad:20:01:45:
86:9b:57:23:e2:f3:10:1c:ef:0a:f4:25:1e:08:38:
ec:16:fc:39:cf:e6:f1:77:41:03:90:58:09:1a:81:
d2:04:16:37:9f:3a:ee:16:83:e9:74:bd:37:53:37:
70:b3:1c:00:d0:bc:fa:d4:d8:7d:06:48:58:5e:10:
1e:e7:da:62:d5:dd:dd:f9:16:e2:af:58:39:04:e5:
b0:33:d5:1d:9b:19:c9:fc:18:7a:a5:ec:a1:3d:b1:
12:0b:60:6f:07:fb:4b:7b:ac:01:ed:3e:3f:6a:ac:
82:d1:a2:ab:14:14:e6:70:76:74:02:fb:58:72:2f:
b2:4c:e1:8e:7d:ab:55:3c:fe:ed:8f:3d:41:bb:ec:
08:50:c8:55:38:e4:70:cd:b6:cc:c7:51:2a:f1:0e:
7f:dc:d4:e2:a5:00:74:17:b8:7f:33:9e:52:4d:6a:
27:62:19:f3:af:6d:1f:7b:e3:1e:81:a4:64:94:cb:
78:b0:78:43:55:7f:e0:4a:f9:a9:c6:ef:e5:29:a3:
97:37:d7:26:66:fa:ab:78:f4:f1:04:3c:16:db:98:
dc:c3:a8:dc:bc:c8:31:29:82:57:05:b2:6c:8a:61:
7b:42:1b:6a:5b:cb:0a:b2:1b:ef:ef:b3:c0:c8:0e:
b2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D5:F3:8A:1E:B0:57:89:FA:B2:10:AE:BA:24:8E:E1:CE:5A:FA:66
X509v3 Authority Key Identifier:
keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:80:da:0a:e8:b8:d7:0c:1d:8c:e8:d4:f8:7f:b3:24:41:b7:
85:9e:d3:51:53:0d:6b:5c:2c:f4:a0:4f:2e:d5:e3:ba:d7:58:
60:47:bd:dc:91:bb:8a:0e:ad:9d:b7:39:db:ac:2e:d1:be:43:
c8:8c:1c:d7:f6:00:2f:38:a9:ed:35:29:3e:ff:ee:28:21:dd:
40:21:07:44:11:70:76:74:e4:aa:2b:da:db:18:66:07:5c:f8:
e1:92:68:03:27:c1:2b:11:4d:8f:7c:d9:eb:a6:7e:77:48:c2:
fb:f6:7f:ac:23:fa:29:81:7f:b1:91:8d:63:7c:41:12:be:3a:
1f:13:cb:66:40:14:99:50:a0:64:20:e0:33:dd:31:30:ec:eb:
aa:11:6c:dd:58:9d:41:7a:e4:bc:f5:a6:24:3d:ae:12:ee:52:
1d:99:81:5e:1b:c8:00:01:10:7c:26:99:1c:fd:f0:a5:d0:49:
94:03:b8:52:c8:f3:53:71:5e:e6:90:8e:73:96:e7:d6:c3:e6:
29:e3:17:46:dc:82:ad:c8:8a:c2:92:66:2e:e6:19:0d:85:a1:
2f:c3:0c:b7:50:4e:db:a8:19:4d:36:a4:3b:66:2e:eb:78:06:
61:b8:72:1e:ac:59:e1:c2:5b:8c:f0:67:99:e1:62:c5:6c:06:
49:41:cb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:32:59 2026 by rpki-client