Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier: r5p8lH4EHF6r4l48IDDv2v336R8zgdzTmCD0Iefy/jY=
Subject key identifier: 84:6E:24:71:7D:45:E1:B6:8C:25:77:37:AA:FB:23:85:6A:8F:EC:6D
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer: /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial: 019E1E34F59BCF56240BC065DE682F7692FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 22:00:47 +0000
Manifest this update: Tue 12 May 2026 22:00:47 +0000
Manifest next update: Wed 13 May 2026 22:00:47 +0000
Files and hashes: 1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: fnG0xgkFmVncGWsU7xQCNLs4LMlgSPggKcsblbJM0tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:f5:9b:cf:56:24:0b:c0:65:de:68:2f:76:92:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Validity
Not Before: May 12 22:00:47 2026 GMT
Not After : May 13 22:00:47 2026 GMT
Subject: CN=846e24717d45e1b68c257737aafb23856a8fec6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:bf:66:47:d9:3c:55:9e:e7:f4:26:18:24:
80:db:2f:13:fd:45:b7:fe:90:a2:eb:43:e9:da:30:
90:d3:ee:ef:c5:d1:2a:a5:61:bc:f4:34:53:cf:cf:
e2:4d:1f:c0:9a:70:87:ab:03:a1:4f:fb:84:a4:35:
03:b8:0e:fb:71:27:7e:9a:48:96:38:3c:f0:f0:17:
68:97:a5:91:b6:98:02:ca:09:71:a7:f3:90:6d:46:
60:b9:b3:20:aa:b0:3f:58:ed:34:c9:7b:71:b1:0d:
a1:2f:3a:ae:6d:bc:0c:88:61:88:86:76:8f:8f:ae:
2c:06:fe:5d:99:cf:37:57:77:30:cb:f8:09:51:7f:
25:e4:49:c2:b7:d1:2c:f1:1c:bc:dc:00:32:cc:f2:
f0:c5:20:b2:fa:6b:da:03:f3:5f:f1:a1:e9:bb:b0:
b2:6d:47:4a:e9:5a:12:f8:f9:62:9e:de:23:44:97:
50:ea:aa:44:22:97:ad:9a:61:a2:62:af:eb:cd:41:
c3:e1:4e:eb:9d:56:8c:77:13:35:7f:c1:dc:89:de:
2c:2c:78:9c:04:ab:78:a6:c5:c0:de:5b:30:c8:78:
04:db:36:a8:ea:01:e4:3a:33:6b:72:b2:dc:e4:3d:
18:0d:08:f9:7f:db:c1:34:42:57:11:e6:e3:6d:86:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6E:24:71:7D:45:E1:B6:8C:25:77:37:AA:FB:23:85:6A:8F:EC:6D
X509v3 Authority Key Identifier:
keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e9:e6:48:2e:2b:ff:90:36:4a:8d:89:62:a3:58:05:6c:9b:
a4:2c:b9:f3:29:31:18:c2:27:79:fa:d0:94:c2:9f:65:28:34:
d3:25:c5:eb:8c:b1:37:2f:bb:8d:b6:7d:da:88:10:cf:53:6a:
5f:81:8e:3b:53:82:68:37:2c:f5:ba:01:c1:b5:05:15:d4:f0:
60:83:05:64:fe:7f:02:6b:61:5b:19:ad:24:72:67:e6:ef:fa:
20:05:e6:92:7d:7e:ca:37:19:97:76:ab:8c:21:ca:07:51:a4:
9b:4e:fc:08:e8:d3:67:49:a7:2c:a7:78:d4:df:36:10:9f:4f:
88:14:98:af:b2:80:11:4a:b9:40:ac:40:d5:b0:df:20:e1:1f:
1e:9f:a5:ce:0a:da:b0:70:57:3f:1e:02:d3:30:a9:a8:11:3a:
ff:80:73:ce:4e:ff:00:a6:1e:8b:d1:a3:49:50:39:72:23:cf:
df:5e:89:98:7c:11:b2:db:c0:e5:23:d9:2a:01:34:8c:44:11:
76:a2:73:0d:6d:a0:56:40:9c:f4:c3:d5:99:ab:67:d7:0f:c6:
26:4f:9b:d7:74:e0:38:3e:5e:d8:1f:6d:f6:9d:4b:50:c9:d5:
d2:ef:7d:4a:bf:7c:21:52:f7:e6:9d:e5:e6:ac:41:78:d7:7a:
36:9f:73:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:23:08 2026 by rpki-client