Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
File: 4CzXYQ92Hg7SUq57ufMPHisXtec.mft (raw, json)
Hash identifier: 155+TQ7/HVX6mHDlN3UhC6IFUcw7aOKkT1IrScfCetY=
Subject key identifier: 37:53:2E:BA:9D:B9:96:C6:4F:F6:8B:FA:61:E1:03:56:C9:42:F6:01
Authority key identifier: E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
Certificate issuer: /CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Certificate serial: 019E3004BD545B63B9F4714954DE7A5BF25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
Manifest number: 15A0
Signing time: Sat 16 May 2026 09:01:17 +0000
Manifest this update: Sat 16 May 2026 09:01:17 +0000
Manifest next update: Sun 17 May 2026 09:01:17 +0000
Files and hashes: 1: 4CzXYQ92Hg7SUq57ufMPHisXtec.crl (hash: b/3QcD1tRBwJZWjCb8gEMbe9SEpdFyD8lq1SM9v6CDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:bd:54:5b:63:b9:f4:71:49:54:de:7a:5b:f2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Validity
Not Before: May 16 09:01:17 2026 GMT
Not After : May 17 09:01:17 2026 GMT
Subject: CN=37532eba9db996c64ff68bfa61e10356c942f601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:dc:4e:21:15:4f:c7:07:f3:b3:6a:8b:46:
08:75:d3:54:f5:f6:61:63:a9:a8:f0:7a:54:ee:ae:
64:a0:2a:43:95:c0:60:8f:92:32:7d:2a:4e:f3:e6:
25:15:ba:ce:f3:2b:95:6e:5e:4d:dc:c1:bd:fc:3a:
22:fe:cb:13:ff:14:9c:2b:4e:03:84:aa:97:3c:35:
bf:e0:23:5b:00:18:d3:f7:41:0d:50:8f:84:bc:96:
86:07:d7:9d:20:04:da:4b:fc:d3:16:b4:af:26:da:
99:e9:64:64:f0:22:5b:94:eb:19:21:26:00:d8:54:
74:cd:5a:d3:83:53:84:72:31:5b:03:cf:26:06:6f:
f5:86:86:58:b9:3a:61:32:bc:f3:16:fc:c2:13:2f:
6b:6d:2e:ee:4d:22:fa:7d:24:59:06:bc:8c:98:52:
5b:63:b4:5c:e3:4d:b7:ac:8d:cc:59:38:c1:21:70:
64:70:b3:b3:0f:b8:f0:35:62:11:bb:d6:60:5b:9d:
d7:8e:00:ba:ed:46:f5:09:49:7b:2c:82:fd:df:1e:
0c:0d:7a:4f:f6:3b:31:fb:7b:70:38:98:8f:75:24:
3c:c1:b8:6d:f0:3e:8d:4d:ef:e7:dc:06:61:d4:c7:
19:29:36:b4:80:ff:6b:a5:8c:00:f1:1e:11:9e:10:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:53:2E:BA:9D:B9:96:C6:4F:F6:8B:FA:61:E1:03:56:C9:42:F6:01
X509v3 Authority Key Identifier:
keyid:E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7c:95:ad:f2:9e:a5:8d:0e:52:fb:f3:16:d3:57:9a:fb:73:
49:ee:2d:81:e0:af:31:26:21:4a:c4:bb:03:eb:bd:a1:db:66:
8d:0e:1f:0a:44:04:2e:9a:32:91:f1:49:c3:37:ba:59:72:6a:
a6:4d:6a:7e:46:90:2e:09:99:77:01:cd:6f:7f:c5:5d:71:3d:
9a:f3:57:d3:e6:68:4e:c8:d7:fc:7b:50:79:1b:fb:33:ae:98:
b8:ab:70:78:3e:6c:1d:cb:74:0b:0e:00:ac:6f:07:32:81:3b:
01:5a:4d:81:b3:6b:8e:0a:30:67:db:87:27:99:a4:1c:66:51:
4e:08:d2:0f:83:e7:9e:61:47:f7:0a:9c:7b:e1:a3:09:ac:a0:
3b:34:ee:c7:2a:5e:8c:a3:da:91:b0:dd:9d:74:c2:cc:83:30:
de:89:26:7d:6a:47:ac:07:28:43:95:b4:36:bc:54:71:73:82:
8a:4d:e9:be:52:1c:86:a0:9e:97:36:87:e6:87:99:5e:9d:29:
56:1e:af:3a:eb:c9:a5:6b:c2:eb:5e:ba:ed:46:63:a8:23:a0:
de:5c:44:98:87:1c:36:31:2e:a5:5b:80:85:c0:c0:63:83:f9:
f3:95:83:9d:54:5f:27:98:cc:7b:de:e9:4c:19:e9:7f:02:c3:
d8:85:ba:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:18 2026 by rpki-client