Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File: 4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier: 6lKbsYQGMJ2yZ754elTvxiywmd6JDGSTkw46m/0aqIU=
Subject key identifier: 2E:D5:A0:2C:23:A8:0D:24:F0:90:95:69:71:14:5E:99:07:50:E0:F6
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial: 019DCFAC2A995160211FF1A7173FA5505303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number: 1406
Signing time: Mon 27 Apr 2026 16:00:59 +0000
Manifest this update: Mon 27 Apr 2026 16:00:59 +0000
Manifest next update: Tue 28 Apr 2026 16:00:59 +0000
Files and hashes: 1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: uvEMIZ4c6mWHODmtMk80hwcV/LsrxBZcoE0outqzitA=)
2: 4xl3tok9SorpWFsyI4hTWRVgL8I.roa (hash: D/WQvDz0YD7aThz9pG4ZIXECMXp1ea6y/G/Bk0u0Mqg=)
3: vzJwebJ7E7PLEVf89eADV1dlWKk.roa (hash: Yr+W4PaEcUNg/gK3cVZEvL18EsHfc2QVQ1cTqMJ7HMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:2a:99:51:60:21:1f:f1:a7:17:3f:a5:50:53:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Validity
Not Before: Apr 27 16:00:59 2026 GMT
Not After : Apr 28 16:00:59 2026 GMT
Subject: CN=2ed5a02c23a80d24f090956971145e990750e0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:8f:5f:2d:f5:03:72:a2:a8:4f:fc:6e:c4:
41:33:bb:6b:f7:cd:f9:f4:68:b1:70:de:17:c0:0e:
b7:17:e0:e7:27:24:98:61:bd:11:6c:19:41:84:4f:
59:0b:ee:2c:fe:cc:fe:e6:a6:67:7c:6e:f7:4a:8c:
a8:a9:6e:01:0c:49:db:6b:32:f7:26:1c:82:0f:9f:
ec:5d:73:a1:4e:18:1c:17:5c:8a:bd:f6:f6:61:32:
41:2a:77:d2:ab:20:af:84:8c:17:72:5a:80:1f:99:
3f:cc:10:34:dc:9c:55:71:97:41:0a:64:26:ed:b3:
3a:84:d7:63:47:23:ed:9e:cb:46:bf:42:a1:5f:2a:
f4:4b:99:12:31:86:6e:15:69:f8:a9:c0:4a:cf:19:
53:33:c8:9b:2b:b3:ad:2e:01:68:a5:b7:6d:2c:97:
c9:50:f8:54:78:51:69:df:5f:04:92:3d:c9:38:69:
08:86:0b:89:4a:f6:f6:e7:bb:01:89:c6:46:a6:20:
38:71:72:d1:d3:5e:7e:f8:49:43:80:f1:d0:bd:6b:
e2:43:ac:28:a6:2c:66:85:3d:cc:88:0e:56:f7:13:
9c:2f:09:a3:3c:0c:eb:87:98:84:ad:76:df:b5:9b:
db:35:1d:0c:76:8d:67:99:c5:75:c3:92:1c:03:d3:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D5:A0:2C:23:A8:0D:24:F0:90:95:69:71:14:5E:99:07:50:E0:F6
X509v3 Authority Key Identifier:
keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c3:29:c9:4c:f2:4d:ea:d9:23:6b:17:dc:af:60:e7:5d:5a:
38:3b:78:5b:47:4e:ba:0f:0a:bb:2c:56:af:3f:f9:f4:63:b4:
7a:9e:ea:78:73:17:1c:32:9b:25:00:4e:87:bd:93:c1:99:7a:
51:f0:60:42:49:82:c2:8f:a8:6f:88:ff:c6:9d:37:ed:4d:22:
11:5f:b4:bb:1a:6b:0b:ee:80:c0:f4:c8:e9:c3:d0:ed:1b:1a:
39:97:e1:a8:bd:27:05:ea:59:bf:39:02:b2:c7:ca:44:9b:4f:
da:8e:88:e0:d3:45:f8:ed:ee:d6:32:fa:33:50:09:fa:86:ad:
99:a3:79:5e:8b:35:d4:fd:b8:84:94:d3:a5:f3:aa:2c:8c:07:
60:b5:4d:c3:f1:40:42:4d:94:b5:86:77:fb:43:4d:07:65:13:
20:30:45:a9:d4:8a:fd:f6:86:fe:84:07:05:97:f3:30:1a:0e:
d5:b7:eb:42:ec:9c:ab:da:a0:d2:6d:0d:fc:3e:93:a5:e1:75:
c2:a4:34:06:56:de:ed:70:c0:26:3b:d7:33:0c:58:56:51:0e:
14:c2:e9:d6:f1:c3:80:30:5c:fb:60:f3:7e:9c:12:bc:e4:a6:
d4:be:10:71:bf:91:bf:80:63:47:d9:89:9a:95:47:e3:e6:c9:
b3:13:08:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:02:34 2026 by rpki-client