Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: FZBXCU01t5NTle5Aytt08FNYTLeecM81qzOY1B8hqK4=
Subject key identifier: D3:E1:EE:1B:B1:0D:3D:7A:33:69:F1:4C:D0:3D:FF:54:84:BF:8C:4F
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 01A0D7CC0E89043EC5CA7363BFE6BE52A34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 1735
Signing time: Fri 25 Sep 2026 09:01:09 +0000
Manifest this update: Fri 25 Sep 2026 09:01:09 +0000
Manifest next update: Sat 26 Sep 2026 09:01:09 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: JjN/ilpHAIa+aeL4eIuR8CQtfDlAtTA+eP3hQ7gsCiU=)
2: n7tDB9WVKLvlzbrTHI3vLNe5dIs.roa (hash: BfpWIrEApwHB8saHvg5FCOOfhPalX/1cWv3N79uY4jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:0e:89:04:3e:c5:ca:73:63:bf:e6:be:52:a3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Sep 25 09:01:09 2026 GMT
Not After : Sep 26 09:01:09 2026 GMT
Subject: CN=d3e1ee1bb10d3d7a3369f14cd03dff5484bf8c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:0f:5e:f1:1b:80:fc:67:71:4d:11:cd:f8:
87:23:76:0a:01:e3:b8:ca:5a:9a:50:dc:c7:8a:20:
ed:47:b9:db:c1:39:23:55:aa:09:76:85:fd:a9:ce:
4c:72:f6:24:03:b3:2a:e6:bf:ca:1e:ef:ce:f4:fa:
da:b0:ea:ba:c4:b8:21:63:63:9a:51:8f:c3:6a:8b:
ba:8f:8d:02:ea:40:a3:fb:00:27:6a:d6:15:ea:70:
36:88:f3:88:10:d2:d7:2d:24:3d:fa:a5:58:14:97:
95:f9:1e:58:73:02:33:4f:92:26:95:93:55:59:a4:
32:27:48:9c:09:7b:f8:9d:fd:3d:45:f5:47:3d:3b:
dd:1b:95:e0:64:a0:fa:3b:a5:11:02:e2:7a:fe:2e:
ed:93:ca:bb:76:72:ac:08:55:6f:d0:55:f2:69:12:
84:55:89:29:75:89:12:4c:7b:f9:26:cb:06:0e:cd:
c4:f8:f3:f3:44:a8:d2:53:5d:d0:95:b4:b6:50:31:
84:86:6a:a9:ec:70:de:67:53:79:5f:af:00:6e:0f:
b6:f3:93:a4:ea:cc:96:d6:86:29:e0:70:87:a6:3b:
b3:ea:eb:de:1f:84:86:04:7e:0d:2e:7d:c9:9c:a6:
02:fc:64:dd:ba:c2:eb:13:b2:8e:b1:4b:0a:a5:51:
98:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E1:EE:1B:B1:0D:3D:7A:33:69:F1:4C:D0:3D:FF:54:84:BF:8C:4F
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:90:a1:82:49:3f:f6:8d:aa:24:a0:75:fc:6e:c7:47:a7:97:
8b:8f:a1:aa:30:2b:26:8f:6e:f6:e0:a5:3e:8d:94:7e:2c:41:
14:6f:82:45:52:19:0a:e3:6b:26:e8:c6:07:72:a9:c4:6d:e8:
da:db:b9:66:c9:34:0e:95:74:da:7c:0b:01:dd:28:67:e5:d1:
93:b7:f2:8c:f8:95:f3:df:ae:c3:91:33:11:b6:bc:d9:c7:0b:
75:2f:d6:bd:05:b8:d9:77:50:9e:fc:d4:32:3f:82:32:4c:f1:
ee:fc:69:64:bc:68:0a:e7:75:79:53:3b:38:4d:b7:b7:fc:4c:
73:35:f9:34:97:17:7d:3e:de:69:31:a5:a3:c8:24:07:8f:fd:
0e:d0:1a:2a:66:26:ed:63:49:92:98:aa:e7:b7:a4:57:21:f0:
96:5d:78:f1:43:67:44:8b:42:c2:3f:f3:77:3a:70:e5:72:27:
77:97:56:c0:ff:51:2f:c6:31:1e:c3:16:a1:82:bc:28:82:eb:
70:23:95:b1:24:80:70:cf:cb:1a:45:f2:60:ba:1b:f3:5e:74:
27:ee:53:d0:76:fc:a2:2a:49:d2:49:5b:db:ec:f3:2a:0b:90:
8f:52:1c:32:c4:0a:3b:b5:59:40:4e:24:e6:dd:1a:db:46:3b:
95:b6:e8:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzA6JBD7FynNjv+a+UqNPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMTc4NzI0MDM0NTJmM2UwMDhhYjc5ODA0NzM0MmRiMjRl
ZGIzNWEwHhcNMjYwOTI1MDkwMTA5WhcNMjYwOTI2MDkwMTA5WjAzMTEwLwYDVQQD
EyhkM2UxZWUxYmIxMGQzZDdhMzM2OWYxNGNkMDNkZmY1NDg0YmY4YzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyoPXvEbgPxncU0RzfiHI3YKAeO4
ylqaUNzHiiDtR7nbwTkjVaoJdoX9qc5McvYkA7Mq5r/KHu/O9PrasOq6xLghY2Oa
UY/Daou6j40C6kCj+wAnatYV6nA2iPOIENLXLSQ9+qVYFJeV+R5YcwIzT5ImlZNV
WaQyJ0icCXv4nf09RfVHPTvdG5XgZKD6O6URAuJ6/i7tk8q7dnKsCFVv0FXyaRKE
VYkpdYkSTHv5JssGDs3E+PPzRKjSU13QlbS2UDGEhmqp7HDeZ1N5X68Abg+285Ok
6syW1oYp4HCHpjuz6uveH4SGBH4NLn3JnKYC/GTdusLrE7KOsUsKpVGYcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPh7huxDT16M2nxTNA9/1SEv4xPMB8GA1UdIwQY
MBaAFOAXhyQDRS8+AIq3mARzQtsk7bNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80Y2MxNDUtOTY3ZC00ZDhkLWFmNWMt
ODc3ZTBlODY2YjI0LzEvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS80Y2MxNDUtOTY3ZC00ZDhkLWFmNWMtODc3ZTBlODY2YjI0
LzEvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZChgkk/
9o2qJKB1/G7HR6eXi4+hqjArJo9u9uClPo2UfixBFG+CRVIZCuNrJujGB3KpxG3o
2tu5Zsk0DpV02nwLAd0oZ+XRk7fyjPiV89+uw5EzEba82ccLdS/WvQW42XdQnvzU
Mj+CMkzx7vxpZLxoCud1eVM7OE23t/xMczX5NJcXfT7eaTGlo8gkB4/9DtAaKmYm
7WNJkpiq57ekVyHwll148UNnRItCwj/zdzpw5XInd5dWwP9RL8YxHsMWoYK8KILr
cCOVsSSAcM/LGkXyYLob8150J+5T0Hb8oipJ0klb2+zzKguQj1IcMsQKO7VZQE4k
5t0a20Y7lbboig==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:58:51 2026 by rpki-client