Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: U/ORP6vim68U7jV2G0aVbz82k3L9DTwMAlveTX67XG0=
Subject key identifier: 4C:61:8F:A8:31:3E:43:A9:F1:D8:6E:D8:CE:4A:F6:CA:D7:88:80:40
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 019E1CB522F11EC85EE6D2B1D115F2D8640D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 15CB
Signing time: Tue 12 May 2026 15:01:33 +0000
Manifest this update: Tue 12 May 2026 15:01:33 +0000
Manifest next update: Wed 13 May 2026 15:01:33 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: Kb+L2Drm9RFHldx6ClKSLdLp/6mxK38vXRcwMQ6a4nA=)
2: n7tDB9WVKLvlzbrTHI3vLNe5dIs.roa (hash: BfpWIrEApwHB8saHvg5FCOOfhPalX/1cWv3N79uY4jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:22:f1:1e:c8:5e:e6:d2:b1:d1:15:f2:d8:64:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: May 12 15:01:33 2026 GMT
Not After : May 13 15:01:33 2026 GMT
Subject: CN=4c618fa8313e43a9f1d86ed8ce4af6cad7888040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:ab:1e:5a:71:05:c1:a9:69:19:e2:42:93:
59:0a:33:33:e0:bd:8d:cc:0f:6e:37:32:79:81:41:
bb:f0:0e:59:cb:87:11:df:69:ab:32:83:ab:dc:e8:
18:d9:43:48:93:16:93:ab:29:d2:2b:7e:0d:93:71:
ff:65:d3:4e:85:18:5d:b0:f7:0c:e6:f7:5e:eb:be:
49:db:86:9b:7e:3e:1d:3b:d8:1a:19:d7:14:c6:b4:
d9:0a:be:24:09:cb:07:4b:0e:de:2c:e5:cd:1f:ce:
4a:c9:f6:4b:a6:68:18:4e:49:e0:a5:65:39:f2:d2:
dc:60:fa:05:d6:bd:8c:a4:87:3a:de:5a:a6:dd:3e:
70:9f:9f:9c:a2:83:c9:d8:c2:ae:57:4f:3d:5e:c7:
c9:72:a4:43:2d:1e:21:11:47:ad:ae:d4:d9:d4:b0:
64:f1:d4:48:48:5d:41:29:2d:ab:35:45:3f:be:da:
20:ac:e8:54:2c:b8:bf:2d:28:c3:53:88:8d:7f:80:
f3:f7:6c:40:7e:5e:f3:9b:9e:a3:d6:1b:c4:d5:04:
27:ca:67:09:89:56:54:52:c1:16:ab:d7:7f:f2:da:
6d:85:29:13:71:16:24:de:04:84:3f:98:82:49:ba:
da:f5:02:c1:aa:2f:86:6b:80:5a:15:3a:4a:f7:9c:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:61:8F:A8:31:3E:43:A9:F1:D8:6E:D8:CE:4A:F6:CA:D7:88:80:40
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d1:e9:9b:b4:0f:9d:f1:b4:a9:34:26:c2:cb:19:b9:41:03:
77:d3:ed:85:e4:1d:f3:3b:1d:db:8f:b2:a9:c9:2a:5c:e7:4b:
6b:40:29:97:e1:62:61:5d:bd:fb:5a:06:fc:46:84:df:2f:ad:
1b:0d:7d:d8:4b:c0:9e:5c:12:fb:a6:a2:dc:c0:5a:f6:5b:84:
28:d8:7d:1a:17:80:2f:95:a9:65:f7:02:aa:98:80:88:23:9e:
04:d4:12:04:c3:3d:2b:78:36:14:6d:e7:7b:00:d4:e7:8b:29:
db:ae:3b:e6:a7:78:f3:ac:82:93:7b:34:1f:9f:43:de:ca:2f:
13:95:41:0c:ca:17:8e:74:42:08:6f:4b:ff:c8:2b:1f:93:37:
5c:64:74:79:5a:d7:42:a2:2e:6f:44:00:65:66:31:57:14:91:
ed:11:a0:71:75:e7:83:ab:b3:c2:87:9e:bf:02:75:69:49:d6:
42:5d:2e:0f:ad:05:50:e4:47:b4:b2:31:69:22:12:f4:1d:e5:
a8:46:4c:b6:36:f9:1e:a6:d7:2e:75:2a:ad:63:e3:c7:f0:43:
cc:7c:11:18:73:53:d6:d0:7c:6b:d9:86:40:4c:12:88:7a:a3:
7e:d2:c7:ab:6b:40:5c:16:8b:35:4f:7f:db:f6:17:9b:dc:1f:
6e:4f:9c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:33 2026 by rpki-client