Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
File: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft (raw, json)
Hash identifier: d0dCW3wxEXX4N/ni7KqXO6lmy6K51aEZFS4na1/dYNE=
Subject key identifier: D3:29:74:24:E0:49:59:40:07:24:C7:B1:8D:D0:D1:A0:76:40:EA:85
Authority key identifier: E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
Certificate issuer: /CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Certificate serial: 019DDD319E26C4786C13B0F0AFDF5C698101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
Manifest number: B5
Signing time: Thu 30 Apr 2026 07:01:49 +0000
Manifest this update: Thu 30 Apr 2026 07:01:49 +0000
Manifest next update: Fri 01 May 2026 07:01:49 +0000
Files and hashes: 1: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl (hash: N5aCJ5zHMNOC0kTY0eLGvzMiRyasHrG05qiIHynZE+o=)
2: AFLK_8dbQHSlYChoAA91MADo2dU.asa (hash: 7cAv3e9gnI3dZUR9MQwkNpXKUI1PglLX9wimy3aeHe8=)
3: Piv3x5GjdFWYogfJry-sQL2JX-U.roa (hash: 2ZYAqvuqxNoPqFzul2MyF+P3n7KAI2Js6FxsXshtYjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:31:9e:26:c4:78:6c:13:b0:f0:af:df:5c:69:81:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Validity
Not Before: Apr 30 07:01:49 2026 GMT
Not After : May 1 07:01:49 2026 GMT
Subject: CN=d3297424e04959400724c7b18dd0d1a07640ea85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5e:0b:8b:1a:f8:45:bc:e5:bb:2e:97:bc:5d:
21:e1:95:86:b1:b2:0f:ec:6a:83:a5:19:63:70:19:
4b:a3:d3:a0:04:06:49:4c:88:5a:7f:45:cb:a6:4b:
85:00:08:7e:04:90:97:6d:c0:47:d5:9b:6e:70:98:
88:54:d6:32:b3:8b:f5:d7:f6:0c:57:86:74:42:0f:
f5:96:3f:23:ec:20:cc:ec:4c:70:95:3f:49:17:b5:
63:d4:e8:c8:65:5e:05:04:db:aa:1d:b8:54:da:78:
67:91:4f:39:f6:88:ec:aa:80:b0:86:5f:2a:62:9f:
9b:fa:12:ce:0c:05:93:38:db:f1:da:23:af:02:80:
42:fd:02:1a:31:8b:ff:2f:d5:f7:c3:7b:de:2e:ad:
4b:c6:b6:a8:aa:fa:b2:b3:3e:0f:1c:2e:37:88:b9:
71:24:16:68:8b:0f:75:ed:c3:00:16:65:fe:fd:64:
7c:78:ef:9c:09:a1:33:07:d8:6e:0c:f9:ed:f9:f9:
15:75:8d:d2:10:c2:7c:8d:63:f9:ac:19:59:6f:c1:
87:b2:86:35:68:d9:ed:81:52:fd:7f:a0:5c:25:d9:
82:53:69:ad:49:f7:91:b0:28:7a:e8:72:d4:f2:7c:
bc:7a:f8:0a:61:a3:7f:dd:ce:b2:49:59:c9:68:46:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:29:74:24:E0:49:59:40:07:24:C7:B1:8D:D0:D1:A0:76:40:EA:85
X509v3 Authority Key Identifier:
keyid:E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6e:b8:40:7f:7f:92:b9:67:33:98:3d:b5:9f:15:ba:84:21:
0e:56:70:59:06:36:41:6c:df:0d:56:9a:c6:0b:6d:cf:ef:95:
18:2b:a6:6a:c6:bd:e5:21:f6:1a:75:53:66:32:ee:e6:85:71:
cf:9a:1d:0f:0f:20:0e:37:92:39:11:1d:56:d7:0f:cf:8f:5d:
09:9b:dc:5c:01:ec:07:6f:63:61:b8:b6:52:8b:8f:3d:87:67:
1d:d1:21:af:b9:3a:3b:8c:1e:04:cb:6e:66:ef:dc:ad:c2:93:
78:d0:4b:a8:e1:74:80:92:4e:46:07:ba:f8:aa:ef:fe:3f:89:
cc:ef:23:c8:76:91:d6:ba:43:71:d6:7e:ee:bf:89:6b:f5:c8:
55:06:4a:6c:32:8d:dd:82:2b:10:52:b7:b0:79:e1:3c:a7:ab:
aa:3a:cd:7a:11:11:1e:ea:4e:56:d1:06:90:c2:0b:20:e8:87:
3c:c2:d0:52:7a:30:75:0c:a8:7a:c7:b0:f1:20:6f:b3:a2:59:
e9:c5:c5:08:d1:23:53:3a:75:d7:24:c6:28:a6:b8:9b:a6:b0:
04:d6:08:f3:8b:a8:5f:b9:6a:8e:87:24:60:9a:cd:26:5f:e2:
18:d7:2a:c7:88:5c:c5:d6:4c:bf:ad:52:2b:41:11:93:8a:7e:
fa:a6:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:49:19 2026 by rpki-client