Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
File: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft (raw, json)
Hash identifier: FDzd6CiqqM/aI6vdJwdPrWm3TH+/+RlLDZ6v4woJgYY=
Subject key identifier: 72:E7:F6:C5:76:97:CC:A9:D4:FE:85:C1:80:52:3E:C6:37:32:AA:27
Authority key identifier: E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
Certificate issuer: /CN=e33779b8388d001fdcbddc48ace227f009850660
Certificate serial: 019F90FF541A997F4B48803A8390D261452A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
Manifest number: 19C1
Signing time: Thu 23 Jul 2026 22:01:20 +0000
Manifest this update: Thu 23 Jul 2026 22:01:20 +0000
Manifest next update: Fri 24 Jul 2026 22:01:20 +0000
Files and hashes: 1: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl (hash: RnpRVZswymB/LOVLauS0hIVJcPQH011ko/u+3Fi93Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:54:1a:99:7f:4b:48:80:3a:83:90:d2:61:45:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33779b8388d001fdcbddc48ace227f009850660
Validity
Not Before: Jul 23 22:01:20 2026 GMT
Not After : Jul 24 22:01:20 2026 GMT
Subject: CN=72e7f6c57697cca9d4fe85c180523ec63732aa27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:17:f9:04:33:b6:f6:16:c9:83:d0:e1:28:
fd:7f:c5:31:dc:98:e3:98:76:c6:af:60:8d:c9:ff:
54:82:44:f9:00:7f:85:a8:40:2b:0e:cd:e8:a5:ab:
07:a1:6f:ec:cd:1e:7a:ac:61:8d:cd:29:0d:09:a2:
1d:65:ae:06:a4:57:09:8a:5b:aa:b3:d8:f8:84:18:
4e:2c:ce:91:0e:74:b9:c8:33:6a:ed:d4:7e:b6:b5:
38:0f:73:e9:5e:f8:29:8f:4d:b8:a9:5f:46:ef:29:
42:83:33:0a:e2:e2:c7:45:a7:96:13:64:71:bd:a4:
4c:6a:f7:35:81:63:b4:62:ab:52:b1:22:9a:3c:08:
58:51:06:f5:e2:79:93:6f:e4:77:b3:bb:55:db:bd:
01:0c:7b:9c:15:25:fd:dd:37:89:bb:f7:51:28:c7:
86:73:65:ce:be:4e:6c:5f:1c:05:b6:d1:58:2f:cc:
cd:90:a4:12:65:e3:12:04:77:2f:5f:95:41:b2:51:
60:e9:28:d6:f9:f9:6f:55:b9:fd:4f:05:05:42:ef:
51:64:94:f6:86:3e:e4:0e:20:46:6e:7b:56:69:4a:
31:e7:df:b1:af:d1:24:06:39:a7:83:4d:95:59:90:
a8:72:cd:d6:40:65:89:8e:74:d9:37:4e:94:d7:db:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E7:F6:C5:76:97:CC:A9:D4:FE:85:C1:80:52:3E:C6:37:32:AA:27
X509v3 Authority Key Identifier:
keyid:E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3d:62:af:44:fb:e4:88:8d:69:2d:2a:01:63:49:e9:5e:7b:
29:6a:04:1f:13:b4:8d:2b:09:70:18:b1:d8:e7:eb:cf:13:5a:
2b:b4:88:14:61:f8:8e:b8:a3:7f:39:c4:2b:17:4b:8a:2b:ff:
ba:d4:96:0d:27:54:79:ac:cf:84:37:32:50:3c:8b:13:a9:5c:
5d:0d:cc:f6:48:91:ca:c1:2f:f6:6c:1b:b6:66:81:0b:63:8c:
49:15:60:34:70:d3:c2:ed:d8:2c:28:66:8a:a3:e4:e6:f2:0a:
87:74:42:1e:28:44:92:95:ed:08:9c:74:94:05:8c:6b:89:0b:
e3:46:51:a7:d5:18:68:ae:19:0e:1b:26:fd:4a:5b:39:a3:76:
28:41:56:8c:01:8f:6c:2f:3c:22:85:9c:b8:8a:a0:29:71:0e:
4d:2a:d8:fa:88:82:dc:07:55:4c:69:3d:b9:41:93:fe:5b:a3:
6e:c2:fd:fd:e4:c2:25:3b:61:67:0c:a9:a2:8a:8f:59:eb:10:
e2:c5:e3:0e:dc:32:a0:3d:a0:7c:ac:d4:f7:34:c5:c6:9c:74:
1b:bd:ae:49:8d:15:21:e1:45:ed:56:1d:b7:d5:3d:b6:c0:7b:
0d:8c:b2:f2:c9:a0:8b:44:89:3b:83:60:52:ec:39:f1:8a:f3:
e4:c5:f7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:05:10 2026 by rpki-client