Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: GvVcS3F41ZvrlWoSPA+HNofLh3wjRoZoHMeO673tc/M=
Subject key identifier: C1:32:56:C8:EC:95:0A:57:A2:49:F9:B7:B4:87:A6:99:D3:C2:EB:26
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 019E30047E6230FD4E3D4367915A50E3C190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 15D5
Signing time: Sat 16 May 2026 09:01:01 +0000
Manifest this update: Sat 16 May 2026 09:01:01 +0000
Manifest next update: Sun 17 May 2026 09:01:01 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: c1zPk1OvsRFWqGKKHI6H21wdt6bv0WYZDtb2YFrjwUs=)
2: n7tDB9WVKLvlzbrTHI3vLNe5dIs.roa (hash: BfpWIrEApwHB8saHvg5FCOOfhPalX/1cWv3N79uY4jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:7e:62:30:fd:4e:3d:43:67:91:5a:50:e3:c1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: May 16 09:01:01 2026 GMT
Not After : May 17 09:01:01 2026 GMT
Subject: CN=c13256c8ec950a57a249f9b7b487a699d3c2eb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:21:37:6c:98:11:d6:00:cb:47:a5:22:e6:
03:f7:02:6a:1a:dd:de:42:96:2c:d0:39:88:42:45:
a7:4b:1a:84:b8:65:be:13:a3:19:11:64:00:ac:db:
01:1e:24:12:43:1b:9c:3e:d8:39:bb:7d:32:b0:ee:
c2:a1:a2:ff:89:ee:60:d5:75:97:c2:ed:c2:f3:52:
8a:45:4c:b3:06:01:cd:64:15:8a:77:02:a1:bf:59:
00:cd:2e:69:da:c1:10:d5:ce:69:1e:01:5f:a0:4a:
62:f5:32:1f:d0:41:33:4f:20:f2:89:af:60:a3:3c:
02:56:bb:a7:5a:56:84:ac:91:ee:98:e7:91:68:ed:
f2:b0:3e:2d:7b:9c:af:cd:27:94:33:64:93:f6:69:
b6:69:1b:d2:49:d1:ab:17:41:88:f0:7a:07:73:f1:
2e:eb:2f:01:63:57:27:0a:65:d5:3d:42:05:75:26:
f8:f4:06:8b:16:0b:24:ab:1f:e2:2c:1b:22:bb:4c:
bf:4c:85:17:eb:9f:42:7e:17:d1:69:20:cf:bb:10:
a2:36:d9:5b:98:6b:d3:10:d1:88:0a:67:a8:92:ce:
6a:bf:74:c6:c5:c2:ca:b3:ce:90:d8:9e:b3:bb:a0:
ba:e2:57:8f:86:5c:2d:a7:a5:17:ca:57:96:92:fb:
3b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:56:C8:EC:95:0A:57:A2:49:F9:B7:B4:87:A6:99:D3:C2:EB:26
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:38:b7:ae:55:b3:8c:ee:67:a7:58:e6:b4:f4:6f:58:28:e7:
19:4e:23:24:5a:ec:f4:c9:6a:86:2d:32:ad:24:70:cb:68:c3:
db:c3:c4:13:58:f1:1a:62:40:0f:f7:e0:2b:8d:56:56:a7:e6:
a5:6b:62:37:3c:29:b2:4a:84:2e:74:5b:5a:94:19:5f:e3:83:
f3:7b:48:6a:8f:d4:72:da:dd:c6:e9:8e:1d:0f:b6:f7:01:47:
5b:07:15:d5:6c:49:a4:75:04:d1:15:38:1f:44:3c:e9:d6:12:
ac:d8:ac:77:f7:98:7a:a8:ef:b0:e6:55:ff:22:a4:5e:38:78:
88:71:37:dd:45:7d:10:b9:8d:34:b1:10:a9:f2:0d:52:11:1c:
b9:e8:d3:58:1c:b0:32:57:7f:1e:41:6e:dc:5a:00:8d:df:f8:
49:21:54:0e:bc:3d:fe:aa:d1:78:fc:38:af:42:81:1e:98:5b:
aa:b7:92:cf:87:3e:41:27:08:40:77:8b:19:48:f9:71:17:33:
41:a7:ad:96:d8:39:fc:7d:58:9e:b6:c6:3d:61:b9:b2:55:40:
7b:04:70:05:04:d8:bc:9a:8e:fb:be:08:5d:b2:c6:3b:49:e7:
0e:cc:f8:60:41:e7:67:19:67:6a:0b:5a:09:26:01:73:78:2d:
f8:ad:17:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:39 2026 by rpki-client