Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier: Xty66UYQJcYu/ajBmK3Zd09TPEVsiWb37e9DoP47xOc=
Subject key identifier: 92:A8:27:DD:AA:E4:09:E5:CF:3F:24:FB:5B:4A:0E:50:AF:2A:BF:E8
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial: 019E1D90A6F54F07C60D110746DC07D3CB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number: 0D33
Signing time: Tue 12 May 2026 19:01:19 +0000
Manifest this update: Tue 12 May 2026 19:01:19 +0000
Manifest next update: Wed 13 May 2026 19:01:19 +0000
Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: dr1nO3/B2lJFV+KSy9jxVbQSzPDluy2bzKOfOvLCSUU=)
2: xtYobtIx2W6_g9SOOJPQhPICYpQ.roa (hash: mB2srtxC3TvgB8CL9USorDjZQ7e+W7OquH6xXCy/qr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:a6:f5:4f:07:c6:0d:11:07:46:dc:07:d3:cb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Validity
Not Before: May 12 19:01:19 2026 GMT
Not After : May 13 19:01:19 2026 GMT
Subject: CN=92a827ddaae409e5cf3f24fb5b4a0e50af2abfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:82:89:fe:51:ef:92:0f:57:b0:bc:af:b2:79:
16:74:37:26:6c:9a:62:8c:a9:38:31:50:96:bb:00:
a6:ca:4c:f1:65:30:f2:ff:67:3d:dc:3c:b5:63:00:
65:7d:86:1b:fd:95:69:ed:72:f9:26:6a:44:87:f9:
51:46:60:5c:75:56:fa:86:da:10:3b:87:51:ae:27:
23:45:39:ac:23:ba:25:f2:87:cd:15:33:e8:62:0c:
93:32:ae:9a:a0:87:12:6d:6e:f6:78:b9:5b:75:e2:
eb:f2:e5:b4:f6:71:b0:29:e8:82:02:93:ee:d0:40:
b3:05:b9:16:20:5c:c3:a7:ff:ba:e7:f1:78:cf:94:
dd:06:92:63:97:27:2e:f1:f1:fd:a1:13:bf:5d:31:
44:3b:ae:52:c6:e0:4d:e4:bf:40:7c:ad:a9:6c:e5:
5c:c7:3b:52:a5:f8:a4:ee:1d:7c:7b:93:98:f5:5c:
4a:5b:d2:6c:68:de:84:7b:3b:8a:72:06:e2:d4:89:
74:a1:da:d5:c7:69:02:cf:15:ba:b1:9f:f2:16:f5:
c0:39:41:f6:0d:c8:b1:17:27:29:0b:d5:46:7f:cc:
54:5c:ae:e3:c9:10:b5:65:cb:58:4e:71:44:d0:bd:
d9:89:c0:48:77:3a:8b:ac:08:92:3c:f8:ff:2d:57:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A8:27:DD:AA:E4:09:E5:CF:3F:24:FB:5B:4A:0E:50:AF:2A:BF:E8
X509v3 Authority Key Identifier:
keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:eb:d7:32:6a:dd:75:3d:6f:8a:c6:f6:eb:51:5c:48:5c:d8:
30:58:9a:c4:a8:82:db:97:7c:3d:57:5c:66:37:11:a3:53:6e:
24:e3:88:b0:7d:10:c2:f6:43:6e:88:35:81:6f:ee:3d:21:fe:
aa:43:6e:ea:c6:14:9f:d7:bf:dc:eb:06:01:c3:6d:b7:e2:15:
35:35:91:20:6d:d8:75:48:fe:ca:26:35:84:93:1d:91:f5:e5:
ae:81:f1:3f:8d:1b:65:fc:2b:30:09:9c:9d:8a:ad:3f:f7:2a:
1b:fe:a2:b1:d2:76:c6:e4:a0:71:9f:66:4c:df:6d:b5:df:dc:
6c:cb:aa:35:18:90:42:d7:0c:4c:25:5f:73:77:5d:1f:24:25:
bd:13:5b:f2:68:e7:ab:45:dc:e8:6c:a4:25:27:7f:bc:14:12:
22:fb:d5:d5:82:17:87:c5:a9:75:a2:a8:ed:3b:f9:cd:c8:40:
79:43:f5:a6:ab:64:e5:df:8a:3d:fc:80:70:24:6c:b9:74:8e:
48:41:3b:61:a1:c8:c2:d6:83:d5:d8:b4:86:14:8f:9e:c1:7b:
6d:55:56:e3:0f:89:b5:f6:62:81:14:56:2a:09:7d:77:53:53:
c9:3b:52:d5:27:7c:5f:db:e2:64:c2:41:12:41:43:82:77:24:
c5:82:6b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:24:57 2026 by rpki-client