Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
File: 4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json)
Hash identifier: 1xvoOnJnT/ym7tUtqcK/FWLwxEqU4m1/3SiNBv6RIr8=
Subject key identifier: AE:23:00:23:0F:85:F9:57:C9:56:DB:A2:59:47:2D:FF:0F:54:21:02
Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
Certificate issuer: /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Certificate serial: 019D2583A0717822B1A8A1D505013E59D6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
Manifest number: 04E0
Signing time: Wed 25 Mar 2026 15:01:16 +0000
Manifest this update: Wed 25 Mar 2026 15:01:16 +0000
Manifest next update: Thu 26 Mar 2026 15:01:16 +0000
Files and hashes: 1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: tRk0cUENvgdJ0nWoehZGO34cV2a7UIdG4Jm7B0R5Ojs=)
2: O4YiRIWBlabnpHM7xKFcaOrOaKI.roa (hash: ayodsdmBoAdUSEjYUyXeYrwcQDz8Nad0uAG3lrZysIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:a0:71:78:22:b1:a8:a1:d5:05:01:3e:59:d6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Validity
Not Before: Mar 25 15:01:16 2026 GMT
Not After : Mar 26 15:01:16 2026 GMT
Subject: CN=ae2300230f85f957c956dba259472dff0f542102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:76:5f:ac:d6:cd:04:ec:d8:1d:75:02:7f:d0:
31:c3:84:ea:58:21:b1:84:f3:80:b5:74:b9:49:21:
fd:9b:fe:8a:a4:f8:2a:f1:fa:69:40:68:4a:49:9c:
19:d8:20:d4:46:2d:d3:6c:77:f6:48:a3:c1:29:e6:
36:ca:43:23:e6:ba:2d:92:be:46:91:58:8d:79:5e:
ec:97:36:7e:29:be:0d:82:a9:9d:ca:b1:14:80:31:
75:fe:2a:74:2c:d6:1c:7f:9a:64:f3:05:69:94:1a:
ba:79:c2:f5:77:8f:b5:ba:85:76:c7:21:0e:d3:ca:
9a:91:3e:9d:45:77:ad:a9:d8:8a:97:2d:4b:41:0c:
2f:56:f8:93:f0:9e:54:6e:4a:b2:05:2f:0e:94:47:
9f:5f:6c:2a:2c:ef:f7:c3:5e:4e:6c:89:b0:87:7a:
40:20:9e:8b:61:fc:11:f3:ad:dd:ca:3d:7c:22:cb:
cc:a1:5b:2b:2d:a3:d1:6a:1e:6d:12:32:65:18:a0:
07:d3:3f:47:b5:61:f3:c4:40:96:dc:b7:fc:35:89:
e8:47:e1:3f:f2:49:fa:40:09:1e:da:b9:f0:1e:75:
22:79:ad:23:80:48:b2:5a:be:ce:32:04:27:89:84:
f1:21:9b:24:5a:09:54:1b:c5:55:3c:ef:a2:ed:f7:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:23:00:23:0F:85:F9:57:C9:56:DB:A2:59:47:2D:FF:0F:54:21:02
X509v3 Authority Key Identifier:
keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8d:87:0f:83:9a:a0:64:3a:b9:34:7a:7c:ae:e1:ef:26:4f:
25:25:e4:c6:57:f4:c0:85:87:51:7e:92:83:c0:2b:b6:b5:8a:
58:17:17:6b:2d:ed:6a:d7:83:f7:79:5d:14:b7:0b:e3:32:82:
20:82:9a:eb:18:d6:87:22:5f:7e:1d:58:90:08:7d:6c:6c:2f:
16:e1:7e:b6:71:a4:46:2f:f4:f2:d8:a4:84:c9:4e:fa:62:a2:
0a:95:39:42:9e:b8:85:90:96:e7:2e:a4:8f:c8:d0:e6:34:4d:
8c:50:8b:38:3f:ee:9e:82:e9:a0:39:b5:d4:df:1a:a5:dc:18:
ce:c7:a4:fd:c6:39:ee:09:ed:03:2b:f5:11:16:cf:12:2c:19:
09:ef:2c:f3:93:7d:8e:fa:ee:13:17:36:cc:f1:b8:ef:37:62:
3a:ee:6b:06:6d:0b:e5:a6:71:68:79:62:44:5b:84:23:47:3a:
35:59:83:3d:77:fe:ad:ae:72:14:48:76:c5:10:1e:ff:29:af:
4a:5d:60:45:80:82:6a:d9:49:00:07:e3:e0:30:85:71:26:a2:
70:63:35:12:e1:e4:58:9b:29:c4:a5:c1:87:37:6d:b3:61:ef:
4d:1f:b0:40:12:5f:89:b2:f8:21:9e:28:9d:ad:34:b5:02:d1:
6a:7e:07:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:38 2026 by rpki-client