Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
File: 4tNxxKeqqFX4zDsa6oAilCCoDyA.mft (raw, json)
Hash identifier: 50av09R5dork4nraWmcIXo/uAGRfUiK8NUAAwv2agI8=
Subject key identifier: BA:B9:BC:5A:D3:A3:8E:D4:3B:70:B2:82:72:01:54:10:C5:01:49:FD
Authority key identifier: E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
Certificate issuer: /CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Certificate serial: 019E20912A5F86262A7F29596C289E6C974B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 09:00:44 +0000
Manifest this update: Wed 13 May 2026 09:00:44 +0000
Manifest next update: Thu 14 May 2026 09:00:44 +0000
Files and hashes: 1: 4tNxxKeqqFX4zDsa6oAilCCoDyA.crl (hash: 0bYMYhK6wRBmgX/V4VAmaqLt191mH6+tVltXW1+QsWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:2a:5f:86:26:2a:7f:29:59:6c:28:9e:6c:97:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Validity
Not Before: May 13 09:00:44 2026 GMT
Not After : May 14 09:00:44 2026 GMT
Subject: CN=bab9bc5ad3a38ed43b70b28272015410c50149fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:7c:37:c6:d1:0f:6b:e4:16:1a:3e:d9:1d:
28:b5:a7:3c:cb:48:c9:81:ae:ed:05:84:db:ee:b8:
c0:27:38:63:5d:30:52:f7:95:aa:67:56:6f:e8:88:
95:56:82:a5:24:ba:06:d4:ee:b4:7d:60:b5:f1:35:
8e:10:ca:d5:50:96:f1:ab:38:84:a6:1a:04:29:31:
93:60:d1:ea:9c:ac:09:8f:2b:e3:79:b9:40:a1:c5:
05:88:a3:a2:87:e6:ce:8d:e1:dd:17:40:da:ab:99:
b8:ae:86:00:f0:56:82:5f:da:b0:01:e4:0b:1e:60:
fd:7e:3a:8b:5e:de:5b:5e:55:66:d6:e3:e1:2a:dd:
7a:e5:e2:78:1e:8a:7e:74:45:6f:25:a8:dd:8e:8f:
74:c3:ea:f0:22:55:ec:49:2f:aa:8f:56:5a:10:3a:
5a:c0:ca:33:bf:c0:4d:a5:e2:fd:96:41:c9:10:db:
72:9f:75:7c:f7:c1:f4:0b:43:8c:3f:a5:94:4f:6d:
ba:4e:ef:70:55:62:e2:52:44:6f:67:8d:cb:54:18:
ce:1f:34:23:c0:95:40:69:4d:51:39:28:82:ca:8c:
20:31:5e:ad:76:ad:80:03:4d:67:1f:cc:8f:6c:e2:
17:32:4a:b7:f8:26:6f:af:b3:cb:9c:2d:a3:fb:1e:
ac:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B9:BC:5A:D3:A3:8E:D4:3B:70:B2:82:72:01:54:10:C5:01:49:FD
X509v3 Authority Key Identifier:
keyid:E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:34:04:95:12:60:83:9e:66:67:2a:84:d8:5c:da:ae:1f:14:
33:8e:a8:83:70:a6:98:4a:2b:e7:47:53:2f:ec:9f:7b:25:7c:
9f:ef:d8:ed:d8:f3:0e:4e:67:2c:8e:c9:6c:d4:bd:b8:67:0b:
81:85:35:69:65:48:24:0e:b2:eb:03:b8:24:18:aa:8c:cb:b6:
2c:ad:8a:90:32:10:d4:6b:0d:05:7b:e6:69:a5:c8:12:ab:01:
fa:f7:cf:10:57:de:47:a1:76:c3:32:a3:28:72:07:64:33:7b:
a1:8b:4e:13:20:50:55:63:c5:04:65:bb:d0:2a:d6:9a:cb:bd:
e9:50:9e:60:1a:d8:a6:9e:00:10:b5:e5:01:e5:95:78:fd:4b:
16:b5:2b:19:02:f9:2d:53:27:86:15:29:9a:98:3e:8e:ea:b0:
84:0c:c8:63:6c:e8:74:10:e3:37:9b:1d:b6:ca:77:d4:a5:8a:
24:05:6f:6b:eb:b3:da:15:3a:49:34:84:5a:ad:58:ac:ed:d1:
93:90:af:96:b7:5a:0f:5d:7a:0b:68:81:df:37:4a:f0:3a:31:
6a:f0:62:81:5a:8c:34:cc:4f:05:97:82:3b:12:c8:71:03:39:
77:c9:de:c7:7d:df:1a:e4:d9:f7:f0:77:25:53:cb:ec:45:d4:
26:99:ff:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:35:03 2026 by rpki-client