Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
File: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft (raw, json)
Hash identifier: AJ5Hs+IuNUU/Hxh7hIwmvqS05GnbaQkQTJXHVIidvD4=
Subject key identifier: B3:BE:3B:51:C3:AB:C1:45:CC:9E:7C:AA:D2:23:72:30:2B:6A:5E:C5
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 019E30729203FBE3DF30A6A29F27AC5D7AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
Manifest number: 0EC4
Signing time: Sat 16 May 2026 11:01:15 +0000
Manifest this update: Sat 16 May 2026 11:01:15 +0000
Manifest next update: Sun 17 May 2026 11:01:15 +0000
Files and hashes: 1: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl (hash: cX1gDXwHpck155qGZBghcw6DMbQ8bEvMVeXd7AX3b3w=)
2: NStJJ9e183cFfxVciTY49OglbNU.roa (hash: yb2BwVREODItjweWlbnW4dYNiNyWxIQNgI0RjZN1nJI=)
3: s_-LqLAwoVzNq7MMJZajpyC4Khk.roa (hash: ClKhGIdEbTXNOQjYUKo8kUllH20eM7IYqgOaHPxfrg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:92:03:fb:e3:df:30:a6:a2:9f:27:ac:5d:7a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: May 16 11:01:15 2026 GMT
Not After : May 17 11:01:15 2026 GMT
Subject: CN=b3be3b51c3abc145cc9e7caad22372302b6a5ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:c1:28:b4:8f:4d:de:57:8e:8a:68:fb:ef:
41:96:c5:23:68:12:d6:d6:70:01:e5:5c:74:90:20:
9f:52:28:6f:d2:a4:19:4a:41:6e:49:de:42:86:7b:
25:37:9e:48:37:d3:74:46:20:0b:ab:ce:80:be:2f:
66:d9:f2:e4:80:cb:91:0d:5b:f9:fd:9f:75:9f:f5:
e3:be:be:13:23:55:46:1d:9e:55:7a:1a:b0:5d:b2:
42:f8:28:6a:5c:d9:d2:0d:78:f1:7d:86:8d:13:1e:
8c:0b:c1:f4:22:09:14:78:e7:91:4f:0e:4d:e9:04:
a5:af:82:a4:ba:d2:59:33:6b:c5:0d:13:79:cd:cc:
20:17:db:df:6c:d1:0b:37:0a:32:3c:a3:0c:23:43:
36:46:78:0c:bb:f6:6e:6d:a8:d1:d1:84:12:79:2f:
cc:df:84:79:bd:6e:1c:ab:6d:e6:b4:46:98:81:a6:
27:1c:25:89:34:f1:dd:f8:04:38:8d:99:81:af:0e:
3e:7a:c0:9a:49:f5:9e:c6:7b:ca:f1:bc:e4:66:99:
b4:75:f9:97:b1:b2:ac:57:f7:be:01:38:c2:79:c1:
95:9e:8b:6f:20:25:20:04:de:57:45:0b:da:6a:07:
b0:3a:88:c4:73:72:97:9b:b2:70:80:31:ec:04:3a:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BE:3B:51:C3:AB:C1:45:CC:9E:7C:AA:D2:23:72:30:2B:6A:5E:C5
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:37:88:83:91:79:33:8e:39:35:92:a6:5a:01:b7:80:a1:43:
d3:0f:03:2b:19:8f:53:5f:17:5a:18:cd:b3:90:93:2f:5d:75:
29:21:c8:96:df:29:4c:45:4f:31:fb:fa:e8:f9:07:e7:32:fe:
e0:6a:6d:6d:9e:5d:79:39:e8:0f:7b:c5:5d:ee:38:bf:b9:0c:
1b:f1:61:76:78:5d:e9:5c:1f:43:e4:a5:01:7a:1f:c4:19:ba:
b2:4f:f6:49:80:8e:75:1f:00:32:97:b1:cd:6d:b5:a4:6f:da:
dc:14:c3:3f:62:21:a8:c1:a7:96:e0:9d:86:9c:3a:25:a9:00:
e6:93:e5:e4:a6:bb:59:32:b5:84:d0:9a:1c:a4:b7:c3:2e:d4:
d9:01:ba:75:1b:c1:b0:bb:81:75:d3:b3:c8:53:45:88:da:48:
9b:5b:db:93:33:4d:31:b9:b7:be:d6:31:5d:ce:c6:7f:80:b3:
f2:9c:61:95:cf:6f:ae:52:a3:64:32:aa:2a:ed:78:e3:08:41:
ae:e4:f4:fe:9e:98:37:c2:4e:9e:77:09:ad:0c:5f:17:9e:bf:
e6:a5:f0:57:2a:ed:84:73:e4:de:94:50:0c:5b:d4:3c:fd:bf:
00:6c:96:b4:ce:d0:cb:27:55:30:a6:42:92:85:9a:fd:44:b0:
d3:72:74:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:08 2026 by rpki-client