Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: k9a7UEzYczXCiRMl/JVPc/h+FcI3bSqbq3qSIKrfxB8=
Subject key identifier: 56:70:11:4E:19:BA:6E:3B:27:32:35:11:CB:2C:2F:06:DB:1E:0B:39
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 019F8F7E428EEB1F0813172BB3226CAD42AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 0C91
Signing time: Thu 23 Jul 2026 15:00:44 +0000
Manifest this update: Thu 23 Jul 2026 15:00:44 +0000
Manifest next update: Fri 24 Jul 2026 15:00:44 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: NuLAQiKlbV8Y110G+ZpjrQ6NW4a0U8Z7EO4l67RhJiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:42:8e:eb:1f:08:13:17:2b:b3:22:6c:ad:42:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Jul 23 15:00:44 2026 GMT
Not After : Jul 24 15:00:44 2026 GMT
Subject: CN=5670114e19ba6e3b27323511cb2c2f06db1e0b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:25:a4:72:99:10:33:73:43:d1:15:93:38:
68:9e:94:2d:52:05:02:5c:dc:06:83:19:bd:ef:11:
ef:95:6e:61:de:14:0b:10:e5:42:cc:a7:ea:a9:fb:
93:ea:c8:7b:b1:dd:49:f7:4b:54:00:b7:b5:d9:6d:
c0:3e:25:ba:76:95:4e:54:de:2a:48:c6:0e:9c:76:
fc:ab:e9:69:eb:ac:d3:36:bc:64:03:45:ee:e8:42:
4c:eb:91:8c:76:05:ea:25:96:ee:9f:58:63:f5:73:
07:a2:6c:78:35:5a:81:0f:f7:07:bb:8f:25:42:95:
72:05:a7:f5:95:3f:d5:04:63:f1:6a:99:72:c4:8c:
09:8e:ff:15:b0:93:12:07:05:5a:8b:ea:50:48:33:
21:f4:e1:6d:35:ae:16:90:e5:f4:d6:f0:1d:d8:b5:
b1:c0:f2:65:00:2b:13:78:67:60:76:dc:2c:f7:76:
de:74:3b:7e:09:13:c9:2f:f9:a6:76:42:88:4c:aa:
f4:c8:fc:1d:51:b4:ad:cc:59:2e:7d:70:8f:87:a3:
f4:29:27:2e:de:a7:a5:8d:12:bf:61:af:15:3a:89:
94:62:d4:da:e2:82:77:91:ec:e7:47:29:08:27:69:
af:68:8f:90:98:bb:f1:27:55:dc:13:64:5e:e6:57:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:70:11:4E:19:BA:6E:3B:27:32:35:11:CB:2C:2F:06:DB:1E:0B:39
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6d:6c:22:2a:da:db:a4:b5:3b:34:bd:4b:42:d7:6a:ee:26:
f8:12:e2:9b:9c:7d:76:ca:89:df:de:9b:22:cf:d9:fd:fe:88:
b7:2a:22:a1:64:7e:ca:c7:cd:8c:29:d9:42:68:aa:27:8f:bb:
22:96:1c:4f:75:2e:ce:e8:39:0b:df:45:76:ad:c6:64:f9:b1:
eb:76:9a:17:66:2c:02:86:2b:61:6a:aa:ff:3d:b7:bf:cc:58:
28:f2:7d:14:83:ce:fc:37:3e:d8:db:e2:a9:7e:23:fc:8f:4f:
7b:f4:00:56:93:a6:fa:b4:f3:19:21:a1:10:57:84:d8:c2:ba:
68:86:07:4c:45:a3:cb:2f:c4:f7:fb:a2:59:43:90:53:84:dc:
31:13:80:a0:97:a2:ea:13:c6:20:96:ba:d9:55:90:18:da:87:
92:6c:65:02:16:26:9b:fc:09:b4:9e:70:07:92:3a:9a:e2:01:
f3:50:66:88:7d:7d:b4:63:9e:ec:22:28:e6:38:9c:ec:c3:22:
9a:55:18:9c:e3:de:09:95:04:29:16:6d:e5:f0:ea:51:8f:3b:
11:f9:99:49:27:49:75:fd:a5:b1:f8:7d:d3:b9:e6:68:7f:cf:
d8:4d:27:c0:cd:f1:33:00:c5:9f:8f:59:22:f1:b4:91:12:1f:
6a:67:f8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:14 2026 by rpki-client