Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: 5boDNvXWhxb+ZxTyrN1UujrznBKpXuCLFQ15Qpk3PZ8=
Subject key identifier: 1E:42:D6:53:80:30:89:D6:21:E6:34:D5:E7:1D:0B:0E:DE:FF:D3:7B
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 01A0016ECD3608115E23613F8555FF6B05CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 16C6
Signing time: Fri 14 Aug 2026 18:00:33 +0000
Manifest this update: Fri 14 Aug 2026 18:00:33 +0000
Manifest next update: Sat 15 Aug 2026 18:00:33 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: 9Gz5udDMmAbrISTM/Ip4MjT9RSGUbaQL73e9M2eVqXg=)
2: n7tDB9WVKLvlzbrTHI3vLNe5dIs.roa (hash: BfpWIrEApwHB8saHvg5FCOOfhPalX/1cWv3N79uY4jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:cd:36:08:11:5e:23:61:3f:85:55:ff:6b:05:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Aug 14 18:00:33 2026 GMT
Not After : Aug 15 18:00:33 2026 GMT
Subject: CN=1e42d653803089d621e634d5e71d0b0edeffd37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f8:e7:bd:08:1f:f8:1a:da:ba:db:2f:ca:d9:
02:c8:a7:e7:53:48:29:b0:60:c6:dc:66:9a:10:d8:
19:3d:b9:80:92:b3:c9:2f:58:c3:d6:e9:8e:0c:75:
dc:14:1e:fa:6d:d4:c8:30:c5:19:ed:5a:3d:68:52:
62:f0:98:8b:b6:2c:30:33:ab:37:cb:43:c1:3c:71:
cd:bb:7e:87:c0:91:b5:b9:39:61:0e:05:eb:b0:c0:
bd:48:08:eb:2e:e4:1d:48:05:20:79:7d:0e:8d:f5:
2a:d5:2d:c4:17:2c:e8:78:16:c5:7a:3f:3b:14:06:
3a:29:f1:7f:94:5a:9a:84:d4:c0:7a:e0:46:2a:63:
3b:e3:56:7e:96:d9:82:15:a2:08:94:e9:4b:79:c4:
38:e6:39:df:3c:ab:13:c1:8f:fc:8e:78:cf:ef:b1:
d2:2e:41:2a:53:0f:c4:eb:4b:03:ab:66:53:ef:16:
44:bc:2b:d5:a1:90:a1:28:ec:f4:00:ac:78:25:05:
41:49:42:2a:06:a3:79:5d:de:b1:ab:d7:7a:b1:de:
22:2f:c9:98:45:86:87:0b:b4:ab:e8:b9:ad:55:cc:
10:89:9b:6b:52:d6:23:72:85:c2:59:6a:ea:41:40:
f8:29:67:f5:50:c4:63:1d:cc:90:89:4f:be:35:f3:
82:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:42:D6:53:80:30:89:D6:21:E6:34:D5:E7:1D:0B:0E:DE:FF:D3:7B
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:cf:1f:b2:e3:bf:34:79:61:0d:6c:bf:7d:2a:45:d2:c6:ee:
1b:8b:6c:f2:a6:bd:a2:b9:01:ff:f5:aa:fe:23:15:db:84:9f:
5f:61:8b:10:e2:e3:45:34:1b:c1:ad:91:06:98:b1:c7:bf:cf:
d7:f0:d8:f2:60:f8:41:b9:34:5c:8b:dc:2b:4c:cb:fc:ea:b9:
a7:d1:74:37:86:7b:32:30:4d:01:32:06:08:a5:b5:d4:ad:fd:
da:4d:b1:b3:fb:11:a2:0f:c8:5b:d2:af:22:10:7a:4e:5d:e6:
24:a5:3f:2b:81:38:a8:62:c8:fd:13:e9:db:f6:5f:ec:48:d7:
18:84:56:cd:04:9c:8d:65:0f:62:ed:61:b1:03:7e:43:41:f0:
b9:51:e1:bc:87:b0:b4:b9:82:ca:17:1a:ec:fb:36:dd:b6:af:
cd:71:65:a4:5f:27:5f:b7:43:ab:06:a3:d8:f5:2a:29:92:e6:
fc:73:12:1a:7d:3c:e9:36:b4:28:6c:ae:5c:c6:4c:a6:28:0e:
66:70:93:48:e7:7e:51:45:e9:7c:cc:8c:c9:5d:bf:4d:5b:ca:
9b:fe:44:96:21:94:0c:2b:e3:0b:c7:c4:1c:b8:f9:db:de:0f:
85:bd:44:f5:c5:e2:9d:7d:3c:66:0a:9a:13:dd:b7:8d:13:5a:
9f:e3:1d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:54 2026 by rpki-client