Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/beafc6-4c34-472b-babc-3823ba3bfe95/1/4XT0OQq8HaHnnptg9Tk5w2SN3qo.mft
File: 4XT0OQq8HaHnnptg9Tk5w2SN3qo.mft (raw, json)
Hash identifier: X6np8pEVAKcwsBdWuNKQ2D1Jix6rZP0q384qDXEG6Vo=
Subject key identifier: 4E:08:7B:22:A0:4E:E5:29:C8:8A:3E:3B:11:C5:95:B5:90:AC:C5:CB
Authority key identifier: E1:74:F4:39:0A:BC:1D:A1:E7:9E:9B:60:F5:39:39:C3:64:8D:DE:AA
Certificate issuer: /CN=e174f4390abc1da1e79e9b60f53939c3648ddeaa
Certificate serial: 019F8F7E610A380CC428EFB46B49EEAFFB2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XT0OQq8HaHnnptg9Tk5w2SN3qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/beafc6-4c34-472b-babc-3823ba3bfe95/1/4XT0OQq8HaHnnptg9Tk5w2SN3qo.mft
Manifest number: 54
Signing time: Thu 23 Jul 2026 15:00:51 +0000
Manifest this update: Thu 23 Jul 2026 15:00:51 +0000
Manifest next update: Fri 24 Jul 2026 15:00:51 +0000
Files and hashes: 1: 4XT0OQq8HaHnnptg9Tk5w2SN3qo.crl (hash: yGHBdqRBs46Gmm9WVUwz8nPw1Ek1hqkUYvNyoe3HogI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/beafc6-4c34-472b-babc-3823ba3bfe95/1/4XT0OQq8HaHnnptg9Tk5w2SN3qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/beafc6-4c34-472b-babc-3823ba3bfe95/1/4XT0OQq8HaHnnptg9Tk5w2SN3qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XT0OQq8HaHnnptg9Tk5w2SN3qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:61:0a:38:0c:c4:28:ef:b4:6b:49:ee:af:fb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e174f4390abc1da1e79e9b60f53939c3648ddeaa
Validity
Not Before: Jul 23 15:00:51 2026 GMT
Not After : Jul 24 15:00:51 2026 GMT
Subject: CN=4e087b22a04ee529c88a3e3b11c595b590acc5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:be:2e:04:57:37:ab:89:43:bd:1e:16:ff:
34:6a:9b:1b:0a:38:6b:44:b1:fb:2f:2d:31:8d:d1:
1a:3f:11:c7:fe:31:6b:cd:e1:f8:da:0e:dc:3f:3b:
7f:02:c2:60:38:e1:b3:3a:f9:5c:55:45:25:9a:4b:
c6:8c:d7:2b:83:0e:ca:83:98:7d:4c:5e:55:7d:07:
8e:e7:92:2c:21:f6:bb:fe:07:d6:18:16:e8:1a:29:
94:95:f9:b9:48:e9:6b:a5:f9:77:23:6d:95:4f:9d:
1a:60:2b:92:cc:66:63:60:13:45:3a:5a:b9:5d:5d:
3b:4a:92:b7:fd:8f:b2:3a:da:45:42:f6:04:4c:d7:
6a:a4:e6:1f:e4:34:63:98:56:4d:66:5c:84:78:45:
d0:92:9b:1c:f2:3d:fb:8f:8d:da:c2:4d:be:8b:6e:
72:a0:59:ef:f3:74:08:1e:b0:ce:41:e0:1f:5f:c2:
f4:77:da:1c:2d:46:2a:33:b2:9f:de:38:f8:41:c7:
d8:51:38:8b:94:3e:95:af:e5:dc:0d:d8:6c:02:72:
9a:ca:0a:aa:b6:fd:7a:1f:fa:cf:bc:ac:0a:1b:68:
57:3c:54:0d:29:0b:2c:94:af:2a:2d:81:bb:63:de:
58:f7:b8:8d:51:fa:3f:c6:be:4b:7e:6b:4e:fd:94:
f3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:08:7B:22:A0:4E:E5:29:C8:8A:3E:3B:11:C5:95:B5:90:AC:C5:CB
X509v3 Authority Key Identifier:
keyid:E1:74:F4:39:0A:BC:1D:A1:E7:9E:9B:60:F5:39:39:C3:64:8D:DE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XT0OQq8HaHnnptg9Tk5w2SN3qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/beafc6-4c34-472b-babc-3823ba3bfe95/1/4XT0OQq8HaHnnptg9Tk5w2SN3qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/beafc6-4c34-472b-babc-3823ba3bfe95/1/4XT0OQq8HaHnnptg9Tk5w2SN3qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:aa:ae:5d:8e:9c:ef:9f:99:81:ed:e7:a7:84:93:a5:e6:d9:
7b:16:a5:76:89:80:7f:93:05:8f:3f:24:0d:77:a5:fb:d2:b8:
31:45:a6:50:43:7c:73:59:d2:b2:50:1d:54:67:27:77:de:6c:
03:25:b9:20:78:ae:dc:d9:42:a2:6a:20:fa:8c:79:10:17:45:
bc:4f:4e:dc:31:a8:c7:42:dd:72:d4:5e:00:7a:9d:cf:5e:46:
19:c0:fb:06:99:54:f1:4a:d4:6c:81:3b:76:50:d1:ce:d2:57:
c2:f7:00:3c:47:23:92:95:6b:cb:bf:20:b4:d2:c9:eb:11:68:
dd:34:96:36:4f:a8:fe:0e:97:2f:a1:9c:63:0d:e6:bc:5f:bd:
67:35:c8:cc:f1:6f:99:e4:09:9a:2a:16:31:d5:b9:1a:ed:2a:
58:a6:a7:b2:dd:92:10:f6:7b:f8:0b:33:e3:0e:94:72:e9:28:
fe:20:0b:5e:0d:c9:34:c4:93:ea:15:d2:65:cf:17:28:3b:f2:
51:88:77:2d:9c:97:e9:64:59:a5:63:36:f7:17:1f:aa:ec:ce:
3b:78:1c:14:70:0c:41:f3:03:ee:2c:68:a0:ee:9a:ee:f2:e3:
3b:07:58:fb:f8:be:93:1e:ae:93:d7:a6:8e:ce:9b:bb:cc:fd:
d0:25:d5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:47 2026 by rpki-client