
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
File: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft (raw, json)
Hash identifier: XiSBUbSCOS5P2Cc/O5RvGAnTjt/zsqX6klB4lmo1eAM=
Subject key identifier: F2:61:C6:CF:20:4D:E3:DB:6B:3A:18:DA:E4:4F:FC:9F:79:19:C3:BE
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Certificate issuer: /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial: 019E1CEC0193A638C1A805EA10E2A42D93D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
Manifest number: 14FE
Signing time: Tue 12 May 2026 16:01:29 +0000
Manifest this update: Tue 12 May 2026 16:01:29 +0000
Manifest next update: Wed 13 May 2026 16:01:29 +0000
Files and hashes: 1: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl (hash: 9J7DztivpaF0fGh/87eJALZ9zOefQ/BAq1/OVloH2OE=)
2: ivkUxaGtEsJtdEm-0-az5FTe9g4.roa (hash: jf7yns1EHQl0bSQHREu9Zc2V/PBevRWEVblmvAVkiQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:01:93:a6:38:c1:a8:05:ea:10:e2:a4:2d:93:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Validity
Not Before: May 12 16:01:29 2026 GMT
Not After : May 13 16:01:29 2026 GMT
Subject: CN=f261c6cf204de3db6b3a18dae44ffc9f7919c3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:5b:88:6d:7a:c4:a0:25:d8:f6:21:dc:be:
99:ac:8d:69:b8:85:0c:53:b5:55:bc:1e:7f:bd:c7:
ec:04:46:b6:9a:0e:a9:63:b0:92:64:31:1f:82:c7:
0a:79:95:08:b4:9f:c6:ca:01:ce:29:44:0f:dc:20:
7b:52:a2:17:5a:8a:3e:e8:e0:6f:e5:e5:63:9e:bc:
16:48:bb:91:49:cb:ab:bc:e7:c3:87:31:0e:1c:b3:
c7:ab:38:dc:cd:16:42:5b:95:6a:a5:35:65:d5:71:
34:4e:97:00:ac:bf:8a:7c:b4:55:35:32:06:fd:7b:
c7:0d:57:5f:a6:1a:b6:19:22:c3:82:a3:14:72:9b:
42:ca:24:82:19:a2:d0:13:ec:77:97:a7:9b:23:17:
55:41:2b:f5:dc:af:8a:a8:f5:dd:10:34:23:78:2a:
59:72:d7:28:61:4e:c2:93:f1:66:0a:04:be:57:eb:
86:fc:64:b2:c4:a8:38:ae:64:b4:8e:e3:ef:4a:be:
49:38:3d:96:bb:09:c8:3b:28:d1:7e:38:3d:ec:33:
c0:90:b1:02:af:23:ad:b3:e6:81:3f:94:e8:81:1e:
83:de:a3:c0:51:5e:1c:c0:27:00:1c:90:6f:50:b4:
40:f6:32:4e:3a:fa:4c:a3:46:98:59:78:26:dc:e6:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:61:C6:CF:20:4D:E3:DB:6B:3A:18:DA:E4:4F:FC:9F:79:19:C3:BE
X509v3 Authority Key Identifier:
keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:21:90:c5:bc:4f:3e:5d:4e:60:9d:9c:16:af:f2:d9:7a:7d:
92:94:3a:0c:bc:52:aa:c3:f7:28:5d:b3:46:46:3d:73:12:02:
e8:bc:1b:1c:8a:f2:cd:4e:84:0d:2f:b8:11:e8:09:75:fc:44:
ae:d2:d0:da:f4:0c:9d:f0:a1:75:45:cf:20:8f:c3:0a:be:31:
1a:74:59:b2:48:09:92:3f:0f:6e:7e:a5:fe:a3:2e:75:ff:d4:
fb:0b:72:89:54:b5:e7:20:73:a3:77:26:28:54:9d:de:62:50:
31:2c:52:7d:ef:d3:a8:8c:5c:15:12:25:62:c2:ef:d1:89:9e:
09:61:9a:55:1a:75:ed:1b:e5:a4:cb:da:86:4f:66:e6:f0:92:
cd:e1:ab:02:d6:19:27:d8:f8:62:42:1c:c4:95:bf:1b:26:51:
95:48:a3:eb:91:4f:bd:93:83:5e:ba:1e:ce:9f:22:84:6b:c7:
d4:11:4b:ba:0c:75:2e:ce:c6:63:0c:f2:a5:6e:37:6a:6b:69:
b7:c8:8a:d7:79:ff:87:eb:86:82:e0:5e:2d:08:f9:2b:c8:b4:
25:24:77:94:86:38:9e:d0:24:53:a5:22:1b:05:17:53:97:ca:
3a:7f:a9:55:b1:dc:c8:eb:cb:34:ce:f6:31:26:5b:80:5b:a8:
cf:bd:84:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:15 2026 by rpki-client