Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: S+zkIeDulIKp7rI8/pA9a5xWPoq05TPqJVWJbx/FCBo=
Subject key identifier: D1:E0:24:D3:A2:33:5A:51:D1:88:1B:B6:23:CC:66:19:8D:CC:DA:61
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 019D2772CBF527E4E80DD2433453B43205FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 154C
Signing time: Thu 26 Mar 2026 00:02:07 +0000
Manifest this update: Thu 26 Mar 2026 00:02:07 +0000
Manifest next update: Fri 27 Mar 2026 00:02:07 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: o66Je5tdGqTLoN8XNqK18FdzlOKLXv465W5V9BGxgU8=)
2: n7tDB9WVKLvlzbrTHI3vLNe5dIs.roa (hash: BfpWIrEApwHB8saHvg5FCOOfhPalX/1cWv3N79uY4jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:cb:f5:27:e4:e8:0d:d2:43:34:53:b4:32:05:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Mar 26 00:02:07 2026 GMT
Not After : Mar 27 00:02:07 2026 GMT
Subject: CN=d1e024d3a2335a51d1881bb623cc66198dccda61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:8c:f1:1b:8b:79:84:c8:f7:c9:3e:21:d0:
6e:6e:7e:c4:bb:aa:68:cb:80:5d:5f:45:c2:80:f2:
b7:e1:99:91:1a:61:48:98:44:ca:cb:00:84:f3:a0:
16:8f:25:10:e8:4f:b7:04:bb:ec:fa:40:0e:cc:3e:
7d:42:cd:d3:c7:b3:98:30:02:3e:24:1a:ba:73:c7:
ed:ae:c8:2d:76:d5:f7:70:dc:d3:e9:5e:de:14:57:
ea:a0:a9:dc:52:76:f9:fd:67:f3:9b:4c:93:93:98:
95:6a:b0:53:be:eb:78:36:84:10:af:5f:6c:12:8c:
25:70:89:92:7c:51:a9:a2:6c:22:40:59:94:03:d9:
e1:77:81:44:60:51:7f:75:db:17:d2:e4:a9:58:32:
f6:92:57:74:07:ce:72:1c:fa:c0:3a:8c:f0:47:36:
51:1b:5a:55:23:0e:56:e0:53:f8:38:b2:43:31:bf:
d9:a8:20:13:9b:78:85:c8:90:f1:45:5d:19:eb:bf:
0d:08:a9:5f:2d:3c:a2:ed:35:03:9c:db:d6:eb:e2:
6f:5d:fb:16:bc:8a:c1:30:f6:26:64:11:53:d0:48:
57:e1:09:4f:9f:65:6a:00:ae:68:3d:3e:db:55:7a:
08:84:f6:ef:3f:06:fe:93:2d:ce:8a:48:ad:d9:fa:
29:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E0:24:D3:A2:33:5A:51:D1:88:1B:B6:23:CC:66:19:8D:CC:DA:61
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:50:de:f6:df:bd:04:99:00:c7:09:56:a4:4f:81:66:37:13:
06:fe:fc:b3:4e:5e:cf:fa:a2:4c:f4:18:01:48:3f:70:06:94:
e9:69:52:5b:68:2a:5f:46:2b:c5:3e:8b:a3:95:f3:b3:39:84:
ee:fa:b3:6c:d4:2b:b8:ae:3a:62:8d:f1:0c:be:37:98:5f:27:
14:d9:44:ac:f2:f3:73:7d:bb:7d:96:99:f4:60:1c:9d:d8:3a:
eb:0c:5b:11:b1:96:d5:f4:41:73:b3:c2:37:f7:71:8e:3a:bd:
d5:18:22:97:a9:9b:9a:a0:5f:08:51:c7:de:9e:63:b2:fc:20:
6f:3b:d4:4a:2b:72:73:fe:c5:c1:9a:16:e4:6a:f4:24:a0:80:
f1:f4:93:4a:e9:39:2a:70:a6:a0:dd:95:51:70:c5:80:b3:24:
89:de:d7:0b:36:06:e9:02:a4:e8:77:8e:f8:c2:52:1b:e7:35:
1c:40:4f:73:57:6a:24:46:2a:92:c0:fe:f2:a8:0f:69:d0:e8:
3c:e2:e6:c7:9e:79:3a:5f:a5:1c:82:ce:da:78:71:58:0c:d7:
ce:8f:34:25:99:cf:66:23:e7:46:25:1d:39:4f:03:44:62:91:
8d:74:ee:f0:9f:f9:54:53:b8:89:60:c8:c3:cd:d2:d0:f3:55:
bf:dd:7e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:28:55 2026 by rpki-client