Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
File: 4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json)
Hash identifier: 4rFHta12hEe32DZrTrssZ97u//TQTeq3/679zXImV2w=
Subject key identifier: BC:B3:16:D5:69:F5:3F:0D:E5:3D:2F:B6:25:F6:2B:8D:DA:D9:2B:00
Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
Certificate issuer: /CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Certificate serial: 019D3909DBE19920D1746FEF6A237ED03C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
Manifest number: 05F6
Signing time: Sun 29 Mar 2026 10:00:40 +0000
Manifest this update: Sun 29 Mar 2026 10:00:40 +0000
Manifest next update: Mon 30 Mar 2026 10:00:40 +0000
Files and hashes: 1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: 7JzoOnNrQLcAsKXS4pZX1LNoS38/T8ltBYrmnOI2z50=)
2: WoJCGFQyPD7fJgWRXTNxxrmi7IA.roa (hash: rPmZbrV7SIsTdeGu/1qJQQ8AkYuLMStM58OYdp4CW6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:db:e1:99:20:d1:74:6f:ef:6a:23:7e:d0:3c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Validity
Not Before: Mar 29 10:00:40 2026 GMT
Not After : Mar 30 10:00:40 2026 GMT
Subject: CN=bcb316d569f53f0de53d2fb625f62b8ddad92b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e9:93:c6:e1:3e:e1:fc:68:63:a1:61:68:18:
2f:ee:27:fe:19:77:a4:db:3e:bd:69:6e:68:05:da:
e1:c3:dc:5f:0c:69:4c:b9:0a:52:29:7c:0a:7b:ee:
e9:31:be:27:d9:69:98:95:6e:7b:1a:df:aa:5c:d9:
2e:8d:7d:b8:f5:c0:b4:ab:9b:f0:5e:41:83:d7:f5:
8d:01:cc:a1:ca:d1:24:e8:48:e5:3b:a9:d5:0c:61:
a9:92:08:20:f6:f8:c7:30:2c:ea:96:af:6a:12:c3:
b9:87:74:64:d5:f4:28:49:18:b5:6d:f4:9d:d0:bf:
05:8a:ee:57:58:1c:14:18:d7:10:f6:74:36:31:33:
f4:33:f8:64:9d:3b:d4:95:39:da:9b:ed:87:97:e4:
51:0a:2f:3f:5a:d4:52:62:80:4b:83:6b:a9:46:c9:
b0:a7:eb:6b:38:23:ff:f9:ae:6e:29:86:24:02:50:
9a:30:e7:c4:0d:86:9f:90:1e:d6:12:15:6c:03:e3:
a7:34:25:15:bc:89:a4:44:bc:9c:51:e3:ba:83:7c:
bb:48:bf:ba:ec:79:2b:fe:9a:45:f4:22:a3:95:e2:
bd:01:c6:9a:43:dd:c3:71:f1:e2:b4:46:d8:09:8b:
d5:62:73:1e:bd:60:8a:71:c3:b1:6f:bb:fa:fb:6f:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B3:16:D5:69:F5:3F:0D:E5:3D:2F:B6:25:F6:2B:8D:DA:D9:2B:00
X509v3 Authority Key Identifier:
keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:04:f2:13:4a:c1:33:fe:b0:c6:30:8d:c1:78:11:60:ca:42:
56:63:b9:72:be:53:fc:44:93:86:b6:2d:ee:f2:d6:dc:3c:99:
1b:82:01:83:29:df:05:a3:f2:bf:49:0d:6f:94:8a:64:99:9b:
43:5f:bd:bf:64:66:f4:62:e6:68:26:51:90:e0:9f:9d:7a:b8:
5f:8c:bf:85:8f:4a:12:66:ad:52:4a:f0:13:28:8e:f5:43:17:
91:51:ee:1f:37:65:a1:1d:c3:82:e5:b5:06:c6:33:93:ad:b2:
bc:07:65:b0:68:07:8b:39:97:f6:d8:62:ab:bc:3b:c4:8a:08:
78:1b:9d:25:34:41:d7:45:5a:a5:c9:12:da:91:8c:41:3c:3f:
3c:fa:3b:8b:dd:c2:17:d9:a4:bb:d1:ac:6a:83:6f:de:3a:dc:
76:db:af:2c:b0:a8:f5:8b:ee:95:20:5e:d5:26:73:3f:3f:c3:
85:dd:7f:73:48:39:7e:ee:22:37:b6:42:9c:5f:3c:2d:f4:c6:
6a:be:7d:32:5a:78:fb:67:3f:e3:11:91:9f:fb:ee:c1:92:3e:
f7:2e:c7:ab:bf:65:be:c0:1e:7b:b6:2b:a2:44:ad:37:45:5e:
4e:c4:7e:40:a9:17:e3:08:23:d2:19:df:ca:52:e7:87:92:44:
50:7a:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:53 2026 by rpki-client