Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File: 4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier: /3TuNu8Ub6WJA5/WXV3qn/mlZqwNTKNKPSrmTvE9xZY=
Subject key identifier: B8:1D:EB:0A:35:5D:E8:6D:06:C1:2D:C3:BD:0D:B4:87:87:59:F8:EA
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial: 019E1CEB89E101E5F4E2DABF54F679C90FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number: 142E
Signing time: Tue 12 May 2026 16:00:58 +0000
Manifest this update: Tue 12 May 2026 16:00:58 +0000
Manifest next update: Wed 13 May 2026 16:00:58 +0000
Files and hashes: 1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: 83jatebTYgdnByr3k/8fYRCwCV1OKLRuXK2CP57wekA=)
2: 4xl3tok9SorpWFsyI4hTWRVgL8I.roa (hash: D/WQvDz0YD7aThz9pG4ZIXECMXp1ea6y/G/Bk0u0Mqg=)
3: vzJwebJ7E7PLEVf89eADV1dlWKk.roa (hash: Yr+W4PaEcUNg/gK3cVZEvL18EsHfc2QVQ1cTqMJ7HMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:89:e1:01:e5:f4:e2:da:bf:54:f6:79:c9:0f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Validity
Not Before: May 12 16:00:58 2026 GMT
Not After : May 13 16:00:58 2026 GMT
Subject: CN=b81deb0a355de86d06c12dc3bd0db4878759f8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:c1:5c:02:82:bd:b7:72:1d:31:44:36:c6:
98:03:c1:42:c6:48:97:05:ba:06:62:c2:b9:5a:87:
1a:7e:a5:0c:f6:79:f9:78:80:52:f4:fe:93:4b:38:
7c:6a:6d:5a:06:e3:2c:85:82:de:85:6e:45:69:ee:
ec:01:6e:17:a2:8f:bb:6d:fa:f1:a4:a2:b5:7d:d9:
65:fe:86:20:f4:77:d0:ba:5e:12:e0:b0:ec:21:3d:
70:95:d4:95:4a:4b:a8:f6:01:a6:5c:e1:9f:bb:8c:
69:e4:db:78:a1:db:cf:c6:0a:41:eb:e8:aa:44:04:
32:6f:91:b0:04:dc:b5:6e:5b:d2:b4:99:53:50:5f:
8f:b4:7f:1d:5f:f4:54:64:e3:a8:8d:66:18:8f:63:
68:b9:ab:ea:e6:83:3a:e7:9a:c6:b4:74:55:be:cd:
27:86:c4:73:13:7c:34:50:68:44:73:e7:f4:2d:df:
aa:70:8c:f2:ef:cf:9c:c2:21:23:17:57:95:22:29:
7a:7d:df:71:ed:2a:95:ca:c2:34:61:d1:b4:bf:10:
55:68:22:52:de:dc:54:14:a1:7c:b2:4c:c3:c0:a9:
29:ee:c8:e0:1c:0a:b4:b9:9d:b7:28:53:dc:c2:53:
61:19:15:8c:50:e1:e4:0b:94:de:a0:d8:58:2f:7c:
51:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1D:EB:0A:35:5D:E8:6D:06:C1:2D:C3:BD:0D:B4:87:87:59:F8:EA
X509v3 Authority Key Identifier:
keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f4:95:d0:4d:96:d4:0d:fb:4f:e2:c3:1b:c2:d1:19:b5:3e:
7a:be:9b:6f:83:2c:38:2f:0c:cf:63:3b:a4:16:37:2c:9b:4d:
1a:a1:e9:87:09:92:84:d7:0c:65:2f:97:3d:23:63:7f:69:0f:
5d:83:b1:23:b0:58:0b:7b:cc:07:d9:18:f2:9a:61:61:96:32:
eb:35:c8:99:b7:e6:1f:f9:f0:2c:41:79:4b:25:62:84:80:be:
26:4c:20:ae:1a:fa:a9:14:23:d5:7e:23:98:0a:ff:24:8c:2e:
42:6a:7d:45:0f:72:d5:28:18:56:f7:70:4b:a1:dd:52:fc:d9:
ee:dd:96:ac:86:64:a9:a5:9a:e7:86:8b:99:78:fc:8b:c2:ce:
77:36:17:99:65:52:82:d6:98:8f:bc:4d:31:05:00:89:24:ab:
0b:2d:7b:56:fb:61:8e:8f:28:b9:a9:bb:73:64:17:53:af:5c:
5f:5d:74:6d:8b:66:c5:62:37:d7:ed:34:d8:ec:91:63:63:39:
f7:ff:90:59:74:d2:9e:1c:14:41:91:b6:f2:99:bc:2e:7b:dc:
ad:f4:da:b0:89:a8:85:51:41:05:43:b8:5f:c1:b0:81:17:7e:
b2:fc:6e:de:8e:fc:5a:9e:ca:53:1f:d7:be:5f:6f:5f:88:09:
69:93:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:57 2026 by rpki-client