Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: ZQkkMRt/k+49z/4FFwIYcXNE6QBJnIDMX1AJByOMMGE=
Subject key identifier: 11:82:CA:62:EA:F5:C3:DE:5D:3A:26:64:F0:DA:A0:F3:A7:25:2F:E5
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 019E1D9014247B6B7490726E74AADE34EAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 18D9
Signing time: Tue 12 May 2026 19:00:42 +0000
Manifest this update: Tue 12 May 2026 19:00:42 +0000
Manifest next update: Wed 13 May 2026 19:00:42 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: LsjvFTxpQIPlb5xtCqq6E+Wt4VIe5fwxKLWFg+lFfsM=)
2: bfmoXJzoDdpM9K6Axg6RQ6PcK7A.roa (hash: z7weft+bC6v8Gp+CtsE+ZYXb+kZuusFeVfZLKQMSX24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:14:24:7b:6b:74:90:72:6e:74:aa:de:34:ea:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: May 12 19:00:42 2026 GMT
Not After : May 13 19:00:42 2026 GMT
Subject: CN=1182ca62eaf5c3de5d3a2664f0daa0f3a7252fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e3:72:a7:6b:68:60:0f:18:2c:af:ca:b5:03:
06:6b:6c:85:7c:49:ac:df:52:d6:91:46:e4:29:8b:
47:12:f8:b1:e3:74:65:c4:b1:54:9e:b9:b1:6e:f6:
28:1e:c8:14:c5:b5:bc:26:a9:67:28:5a:c4:9a:1a:
c9:39:fe:58:a9:4f:ba:d8:4e:f5:75:17:bb:6b:f8:
68:ab:1f:39:d7:c7:e2:71:bf:5f:20:dd:76:bb:d4:
2f:c1:f6:e9:6f:09:05:30:19:16:ed:b6:5a:00:75:
4e:2e:a5:24:e3:cb:fa:8f:aa:67:8f:61:01:0b:63:
33:3a:4a:79:84:66:e1:a6:10:ab:b4:96:f1:f6:36:
8a:58:92:a3:e5:71:73:ed:be:39:69:27:01:5f:7e:
b3:47:cc:2a:3b:33:81:6e:4b:33:7f:ca:60:2a:4e:
a8:89:33:7b:c5:ff:ff:18:ee:bc:e7:cc:8c:9b:b5:
dc:82:12:39:1e:8b:a0:96:12:d1:54:1c:32:3a:da:
76:3d:5d:41:ec:71:32:1c:8f:49:ba:67:dc:11:e5:
be:32:9a:82:ab:ba:b7:65:a8:b6:5a:1b:e3:fa:d2:
b0:d4:93:c7:1a:a5:7d:60:8e:e3:fc:27:79:d4:56:
5f:03:53:16:aa:8a:71:b6:32:06:ec:1e:8d:17:7c:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:82:CA:62:EA:F5:C3:DE:5D:3A:26:64:F0:DA:A0:F3:A7:25:2F:E5
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:04:a9:66:b4:82:d5:2c:7e:a6:df:db:2a:75:4d:91:5f:1e:
d9:6e:09:e2:38:60:01:d8:99:a3:92:6f:cd:5e:ca:ae:bb:e3:
0c:8b:8e:54:54:31:d5:9a:8f:3c:18:a2:00:4c:71:b7:a9:07:
9c:b5:cc:b0:9f:9a:95:8f:97:96:7a:c9:55:ef:a9:92:d6:8b:
cb:22:65:16:1a:cc:6f:ff:6d:03:67:c7:bd:56:9a:50:6a:6b:
7b:f6:94:d2:dc:d3:5a:3c:92:97:4a:ae:63:ad:53:b7:14:36:
43:04:3f:cd:de:2e:11:bc:d1:71:dd:2d:e6:7a:37:93:d8:60:
e1:2d:6b:73:50:86:e0:5f:c0:7d:05:10:1b:20:72:4b:71:9a:
fd:3d:45:99:37:84:8b:6e:20:6a:2e:b5:50:1b:bd:f2:05:a4:
25:3a:ab:23:6b:f9:e9:e5:a4:a0:cb:63:00:d8:aa:82:7e:92:
8f:b5:34:a6:5c:a2:90:ec:94:99:7d:97:07:2e:ec:a6:f7:1f:
8f:c2:0c:7b:5d:22:6f:9c:e6:37:53:54:85:13:77:f8:51:7e:
4a:56:ab:95:e4:5a:b0:54:f4:0d:7a:dd:4f:ec:9a:c8:1f:40:
6a:b3:95:46:d0:a0:2f:6c:a5:17:e4:59:62:13:17:a6:1c:24:
bb:6a:c7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:28 2026 by rpki-client