Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier: oeNYWwxtlvmmf6BAUm8/O796OqMXQIX/rJLr7VfNXGE=
Subject key identifier: 14:A7:18:2F:81:02:94:64:4D:5F:9A:A6:B1:F3:E5:0B:43:B5:C3:59
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial: 019D28F28E28CE3AA416D4A4238930275ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number: 0A96
Signing time: Thu 26 Mar 2026 07:01:17 +0000
Manifest this update: Thu 26 Mar 2026 07:01:17 +0000
Manifest next update: Fri 27 Mar 2026 07:01:17 +0000
Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: ylybMxhxR2z0qlJf7BSgIfWC8S93RfStm1X9B0Cf6AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:8e:28:ce:3a:a4:16:d4:a4:23:89:30:27:5e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Validity
Not Before: Mar 26 07:01:17 2026 GMT
Not After : Mar 27 07:01:17 2026 GMT
Subject: CN=14a7182f810294644d5f9aa6b1f3e50b43b5c359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:b9:5c:b1:27:e4:ff:d2:c3:bb:bd:f9:9a:
52:81:18:d8:99:14:8c:c3:a3:56:97:7a:09:59:76:
6e:d8:f7:73:b9:78:66:ab:1e:a5:51:f5:cf:22:50:
bb:c0:b9:a6:b6:39:1b:10:14:ee:25:1e:4c:ef:fe:
20:95:df:44:7f:3e:50:7f:3a:d4:17:96:e0:bd:4e:
15:84:8c:b7:4d:fe:8e:9b:ad:2e:04:a8:ce:8b:bb:
52:39:c6:16:fd:f2:6b:92:1d:18:85:38:b2:8c:f7:
b3:7f:7c:a1:45:eb:8d:9e:6e:cb:f7:13:26:b9:f0:
17:2e:1f:8d:b1:9f:81:c0:ac:8e:b8:43:2f:31:05:
45:ef:85:30:ce:ce:3f:25:55:1f:0e:80:e8:90:fb:
42:8a:f4:4e:38:cd:33:8a:57:2b:5d:64:22:31:45:
9b:37:fa:95:72:8a:0e:52:9a:0f:cb:d0:b1:d8:1b:
83:f0:19:ec:e3:99:75:62:e5:d7:08:a4:4e:dc:df:
ed:c0:97:b1:da:68:ec:fc:75:ae:f7:8b:1a:ac:3a:
96:59:44:2d:16:28:ba:e6:cf:b4:46:c0:b7:44:42:
3b:96:b8:ca:16:d5:30:42:78:06:db:11:77:e3:7f:
25:55:f8:ce:87:09:b9:30:5b:27:92:da:72:22:0f:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A7:18:2F:81:02:94:64:4D:5F:9A:A6:B1:F3:E5:0B:43:B5:C3:59
X509v3 Authority Key Identifier:
keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0a:dd:55:d6:88:09:82:c8:7c:9a:01:29:e2:41:1d:48:09:
21:e3:19:c6:e0:22:5b:73:f3:6e:30:c5:50:55:ab:5f:f1:53:
5b:dd:25:42:8c:f5:13:18:13:90:f0:fb:88:6c:a0:66:97:88:
29:12:ef:5e:b0:97:14:2d:d5:da:47:7a:63:a4:c4:45:20:e9:
aa:7f:51:94:4c:e3:b2:7f:e6:1d:cd:2b:15:2e:02:59:bc:54:
57:09:6d:8c:0f:ca:e8:91:d4:d4:33:9d:f9:84:c8:7a:bc:df:
d0:d9:3c:27:c5:2d:11:74:c3:d2:8c:f1:4b:af:97:a8:c5:3f:
e9:e6:e8:cd:ae:36:23:67:dd:f9:57:86:84:8d:68:ee:68:bb:
dd:1d:19:7f:a0:ed:99:03:ac:51:c6:10:de:62:ea:3a:3b:5c:
6c:3a:1b:48:57:3b:97:b8:dd:15:8b:0f:3e:36:2e:21:9b:e9:
1b:fc:3b:9f:96:b3:dd:82:3f:6d:a3:71:d1:3f:f9:36:94:37:
93:0a:11:f9:48:f3:08:a1:9a:b3:ff:ce:8e:9b:a5:50:0f:ad:
24:ce:8a:72:a8:42:74:a4:0c:aa:5b:82:7b:78:d8:49:07:d9:
fc:2f:b3:17:1e:ec:7e:64:48:cf:17:35:7e:2e:74:2c:ed:7d:
59:9e:e3:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8o4ozjqkFtSkI4kwJ17VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZTFlYjAyMGFiNmE1NDJmNjBiNTg1NzY5ODcyZDlmMDYx
N2FmMjYwHhcNMjYwMzI2MDcwMTE3WhcNMjYwMzI3MDcwMTE3WjAzMTEwLwYDVQQD
EygxNGE3MTgyZjgxMDI5NDY0NGQ1ZjlhYTZiMWYzZTUwYjQzYjVjMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7m5XLEn5P/Sw7u9+ZpSgRjYmRSM
w6NWl3oJWXZu2PdzuXhmqx6lUfXPIlC7wLmmtjkbEBTuJR5M7/4gld9Efz5QfzrU
F5bgvU4VhIy3Tf6Om60uBKjOi7tSOcYW/fJrkh0YhTiyjPezf3yhReuNnm7L9xMm
ufAXLh+NsZ+BwKyOuEMvMQVF74Uwzs4/JVUfDoDokPtCivROOM0zilcrXWQiMUWb
N/qVcooOUpoPy9Cx2BuD8Bns45l1YuXXCKRO3N/twJex2mjs/HWu94sarDqWWUQt
Fii65s+0RsC3REI7lrjKFtUwQngG2xF3438lVfjOhwm5MFsnktpyIg/+VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSnGC+BApRkTV+aprHz5QtDtcNZMB8GA1UdIwQY
MBaAFOHh6wIKtqVC9gtYV2mHLZ8GF68mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lZWYzNjktNmIxMi00Nzg2LTk3ZTAt
YzgzNWU1ZGFhZjI0LzEvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9lZWYzNjktNmIxMi00Nzg2LTk3ZTAtYzgzNWU1ZGFhZjI0
LzEvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJArdVdaI
CYLIfJoBKeJBHUgJIeMZxuAiW3PzbjDFUFWrX/FTW90lQoz1ExgTkPD7iGygZpeI
KRLvXrCXFC3V2kd6Y6TERSDpqn9RlEzjsn/mHc0rFS4CWbxUVwltjA/K6JHU1DOd
+YTIerzf0Nk8J8UtEXTD0ozxS6+XqMU/6eboza42I2fd+VeGhI1o7mi73R0Zf6Dt
mQOsUcYQ3mLqOjtcbDobSFc7l7jdFYsPPjYuIZvpG/w7n5az3YI/baNx0T/5NpQ3
kwoR+UjzCKGas//OjpulUA+tJM6KcqhCdKQMqluCe3jYSQfZ/C+zFx7sfmRIzxc1
fi50LO19WZ7j0Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:22 2026 by rpki-client