Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: 4PUQOSyyh4ukw3OoTQbZnQYZmQkbmi1EdKMvRXPZRHk=
Subject key identifier: F3:C4:F3:10:9E:EF:CF:10:9D:5A:94:6C:35:62:96:DE:3B:B0:53:CE
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 019E1CB460D9B19E07EC771C31DDC798AEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 0BD1
Signing time: Tue 12 May 2026 15:00:43 +0000
Manifest this update: Tue 12 May 2026 15:00:43 +0000
Manifest next update: Wed 13 May 2026 15:00:43 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: bvn+jvR3+LmT2lKmnp5ju8ObTurcJRuNe7hTJpe93p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:60:d9:b1:9e:07:ec:77:1c:31:dd:c7:98:ae:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: May 12 15:00:43 2026 GMT
Not After : May 13 15:00:43 2026 GMT
Subject: CN=f3c4f3109eefcf109d5a946c356296de3bb053ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:78:af:3a:a7:2a:f7:ee:a2:b8:e4:24:86:
6c:08:f4:83:1b:a7:d1:28:45:e6:9e:71:7a:89:58:
a4:ae:f4:bf:5c:6b:47:b7:d3:f2:8d:0c:60:d6:02:
50:0e:7c:00:0e:73:67:bd:e1:df:15:e9:f1:41:9d:
9c:0e:45:fa:85:c9:16:f8:fc:ec:c2:4f:ec:27:c7:
7a:d7:c8:79:c7:f0:ad:c1:77:c4:77:73:c8:d2:19:
cf:91:a3:6c:74:26:f4:4d:91:32:9c:ea:29:e6:02:
5b:3e:f8:e7:0d:b0:a2:3e:69:28:c5:c6:77:d5:f6:
89:ae:ad:2f:ad:48:2f:c7:ed:30:33:5c:58:ce:10:
b1:9e:d3:be:1f:5e:db:83:ee:e6:e5:4d:2c:f4:d0:
e3:88:f6:2b:42:97:c2:d1:4a:91:30:53:fb:b3:1a:
95:61:14:ee:9a:c2:a7:54:33:8d:bf:2a:c7:03:83:
3b:a7:20:24:9a:fd:be:7e:ad:8d:df:14:15:37:e6:
93:3e:ac:2b:f0:37:3a:e8:9d:9e:df:f4:4c:63:62:
32:dc:19:71:0a:ce:a8:ca:6d:2d:14:24:13:31:0a:
25:3f:b1:b4:da:06:37:6a:6d:2b:56:80:02:2a:5f:
9c:45:6c:44:1a:11:ae:19:11:47:4b:c9:32:e4:9d:
78:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C4:F3:10:9E:EF:CF:10:9D:5A:94:6C:35:62:96:DE:3B:B0:53:CE
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:cc:4e:11:73:10:fb:7a:48:f7:e8:de:09:63:0a:ec:c6:29:
50:2a:ba:3f:27:14:fe:11:cc:c2:51:64:da:00:8e:f2:cb:e3:
b8:3b:30:a3:5a:cf:e5:e1:f8:82:0b:32:b7:c1:98:e7:94:8c:
4f:5f:a0:41:fd:b7:6d:1d:05:6f:e6:03:85:67:b2:49:1e:1f:
cb:a3:1b:c3:25:12:0d:d3:77:1d:ce:25:29:6e:b5:9b:da:27:
80:48:f2:9e:fb:17:52:22:59:e0:31:93:61:24:5d:12:cd:aa:
d1:f4:eb:9e:02:10:d8:b4:84:86:4e:da:73:03:5a:68:a4:0e:
43:65:11:85:c6:71:1f:b6:df:f6:f4:7b:8d:13:10:49:44:64:
e7:63:00:75:ea:da:9b:e6:7c:2b:97:9c:09:31:98:b5:db:7c:
96:6d:ff:a0:a7:e6:ea:b5:1b:8a:db:d6:1e:51:7b:76:40:17:
95:75:93:2c:37:e0:95:3d:7a:b1:1e:d9:6a:74:76:0b:48:1e:
7b:ed:3a:ab:63:3a:3c:44:d3:aa:b0:7c:09:a8:13:fa:de:17:
4f:cf:d7:94:02:d9:d5:3a:ad:a0:06:5f:5b:1a:d4:b8:c2:59:
68:5e:d1:b2:19:29:4e:4e:ed:ef:8d:72:bc:d7:6d:56:5e:35:
df:99:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:40 2026 by rpki-client