Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: NDrGhSDSkLhY09n37UkZJQvoITmCUB5I4ocrJg6RsPA=
Subject key identifier: 98:11:01:AA:91:53:B0:3D:0A:2C:B5:7F:FC:BB:59:9C:28:A9:21:D9
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 019F916CBC8C2A6A7C66EFD82A7722785F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 168C
Signing time: Fri 24 Jul 2026 00:00:50 +0000
Manifest this update: Fri 24 Jul 2026 00:00:50 +0000
Manifest next update: Sat 25 Jul 2026 00:00:50 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: c9WKv4SSSvWHFwhJDhGVe2GRjaMRGzZT+c8oyM7KK4U=)
2: n7tDB9WVKLvlzbrTHI3vLNe5dIs.roa (hash: BfpWIrEApwHB8saHvg5FCOOfhPalX/1cWv3N79uY4jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:bc:8c:2a:6a:7c:66:ef:d8:2a:77:22:78:5f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Jul 24 00:00:50 2026 GMT
Not After : Jul 25 00:00:50 2026 GMT
Subject: CN=981101aa9153b03d0a2cb57ffcbb599c28a921d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:f6:6f:b6:90:68:6f:a1:81:30:f6:b5:8c:
86:26:32:c2:b1:43:aa:9c:29:d6:52:ce:60:7a:06:
45:0d:b4:b6:19:26:8f:75:20:ff:44:cb:41:ea:4c:
ed:be:38:50:e0:c5:63:3a:ea:1a:d7:a9:be:2b:90:
7e:ea:6b:51:81:04:c5:fc:7b:09:a4:1b:4b:69:32:
f9:08:52:25:49:b9:46:25:86:c9:63:a4:28:cd:41:
05:95:7a:0a:ef:e9:09:81:12:ed:9d:3a:88:51:eb:
d9:22:02:bc:a1:fe:28:2d:5a:20:6d:f7:97:15:1e:
4c:2d:ae:e7:cd:63:c0:ff:c5:32:a2:1c:fa:e7:15:
3b:27:70:c4:e6:9d:68:84:b5:3f:4a:82:28:0d:d3:
1c:8b:2e:60:6a:39:02:38:91:4b:80:08:e5:14:16:
54:99:a6:52:96:37:d4:96:ae:a9:88:1f:5c:c2:ec:
3d:21:31:bf:6b:dc:b5:5e:e8:3d:0c:b9:8b:40:fb:
89:53:a5:fb:26:82:37:d8:22:1c:b3:af:12:6a:e4:
83:d4:31:c1:39:e1:90:92:3d:4d:4f:76:25:f2:a0:
3b:0b:0f:00:7f:0a:d7:b6:eb:f2:7c:c7:64:ca:03:
39:9c:05:6d:cb:57:71:94:d6:f4:0d:ff:ff:95:b0:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:11:01:AA:91:53:B0:3D:0A:2C:B5:7F:FC:BB:59:9C:28:A9:21:D9
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:52:46:a4:82:6d:d4:75:74:25:3c:0a:b2:4a:0a:bd:9c:85:
5e:56:29:d1:eb:66:73:f3:69:ef:ab:9c:e4:b3:4d:6b:35:a0:
fb:d2:1f:1d:ab:e7:77:a4:48:0a:bc:8c:b1:2b:d3:11:15:13:
ed:fc:04:4c:2e:e9:ab:23:d0:4a:56:73:98:73:4a:2c:ff:ba:
02:48:d2:07:98:e9:0e:6c:66:04:23:27:2a:b3:85:e5:8f:38:
78:6d:e0:02:2b:1d:5d:5d:67:9c:89:5a:82:91:40:f1:38:ee:
84:50:15:92:dd:4e:35:01:bc:64:ea:41:dc:a5:78:dd:f0:db:
8b:dd:79:24:f2:74:0f:df:7b:9d:86:e4:1e:2e:24:06:79:59:
54:3f:19:c4:52:10:de:b3:41:85:6b:89:32:ef:22:0a:f7:04:
f0:56:a8:a2:ae:72:0d:cc:2d:6e:ca:1e:32:ff:8f:c5:2e:59:
6c:9c:47:5b:aa:c4:1c:ac:46:a9:98:8b:9b:84:00:03:f3:c4:
5b:f1:f4:c3:a0:3f:34:07:c4:8d:7f:e7:b3:49:ad:bb:39:79:
8f:79:70:f6:c5:bb:9c:e3:9c:49:85:5e:15:18:15:45:80:a3:
78:39:f7:a7:90:62:5a:d8:26:79:a9:83:63:ed:b5:71:a0:0c:
8c:85:cf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:58:27 2026 by rpki-client