Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: BaxlLrPByM+5WFU453c4XJP7uhp8l1d+X3lRGpV83G8=
Subject key identifier: 2A:EB:CC:28:2A:2F:3D:59:B4:48:C8:28:14:72:1E:F0:41:70:4B:71
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 019E2B4C66CE63720A904481402014AA0185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 190D
Signing time: Fri 15 May 2026 11:01:27 +0000
Manifest this update: Fri 15 May 2026 11:01:27 +0000
Manifest next update: Sat 16 May 2026 11:01:27 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: UXv7ua+ov+4KN94QCV6IYG3N2SHy/r44DZ+ujWXMqo0=)
2: ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa (hash: k43BMZFCEHCe5ac3+lgii08XLhekVbwoHtiG/FwXDec=)
3: cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa (hash: rYHJYIx7h+jpfMPSSONXY/ad+DKlzYjKVh77kFCnfVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:4c:66:ce:63:72:0a:90:44:81:40:20:14:aa:01:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: May 15 11:01:27 2026 GMT
Not After : May 16 11:01:27 2026 GMT
Subject: CN=2aebcc282a2f3d59b448c82814721ef041704b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4c:a5:d6:57:18:19:6f:ca:68:15:48:67:08:
57:ea:10:37:be:b5:e4:9d:ef:10:7e:ee:fb:bb:21:
67:b9:4d:3c:2d:13:07:fb:af:a5:e3:e6:23:44:78:
85:f1:d0:00:b5:93:7c:9a:ec:58:9a:7d:6f:15:5d:
47:b9:96:cd:c9:5c:3a:67:2e:e4:5c:5f:2e:b8:1e:
55:b6:b9:74:89:39:10:3b:55:bf:2f:bb:f6:35:7a:
61:9e:7a:0c:e5:a3:29:7a:62:2e:77:4f:89:f5:35:
26:58:f4:f4:5d:e3:4e:5c:9a:f3:63:59:a9:db:61:
67:37:b0:96:5d:07:98:34:c3:fc:14:8b:8b:9b:0d:
07:c3:36:7b:93:dc:a6:f0:49:aa:01:61:d2:30:93:
5d:48:69:f6:72:e6:53:3b:6b:8a:e2:c8:d4:0b:ea:
b4:72:88:db:5b:d9:f3:f2:53:f4:53:51:fd:7a:1a:
a2:d2:f3:17:44:37:eb:94:bf:7f:5f:fe:4f:2e:6a:
30:46:66:2e:b1:8c:c0:ef:1a:d5:1e:11:7b:b8:01:
13:e6:b5:8c:98:cd:ba:ef:17:eb:1c:32:33:a8:5f:
96:a0:5f:c3:e3:cc:6c:4e:3f:c5:4d:d7:ac:ab:42:
86:2d:e9:64:eb:c0:49:69:ea:47:a3:82:84:97:31:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EB:CC:28:2A:2F:3D:59:B4:48:C8:28:14:72:1E:F0:41:70:4B:71
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:26:45:9f:c3:28:dd:9b:42:b3:20:1f:fd:60:9d:c7:70:70:
5b:2b:4a:16:e7:38:57:47:d9:52:8e:55:a2:87:fa:0b:6b:b6:
31:87:f3:24:e4:42:26:24:d8:d2:e0:40:94:dd:7d:ce:ce:a0:
a2:04:bf:73:95:14:85:81:76:7b:6b:10:31:6d:0f:7b:f0:70:
98:57:71:91:74:6a:58:88:1d:3b:9f:f5:30:56:48:72:26:dd:
ae:06:a9:dd:93:a1:2a:f4:51:ad:96:a2:72:cc:19:4f:3d:32:
99:f2:eb:35:b1:03:92:46:06:15:b4:00:c5:31:8c:19:d7:3b:
1b:f4:c7:79:c5:96:9b:20:9e:cd:f6:42:98:75:65:bb:fa:8f:
d3:51:aa:87:35:10:26:fb:fa:8c:e7:d8:9b:6d:3f:57:6d:08:
ea:0f:a2:e8:e1:c0:01:22:96:73:94:a3:39:cd:28:17:11:bc:
c0:a2:59:de:ed:6f:59:e9:b6:86:df:b5:81:87:5c:ea:cb:4e:
41:f4:b0:fb:42:56:6e:71:53:05:91:e8:26:d5:01:68:2b:a6:
42:e9:aa:19:77:0f:85:f2:dc:aa:a7:87:21:8e:46:32:76:ac:
42:68:f2:98:30:da:0a:d1:b0:eb:4a:5f:cc:9d:61:24:fb:da:
de:3a:96:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:23:47 2026 by rpki-client