Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
File: 4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft (raw, json)
Hash identifier: IpQlGlLGs06Pqi93Xsu7jUJ4gHWx8Ky6xTD/1thNZ5Y=
Subject key identifier: 9B:31:5F:A4:40:08:C5:AF:66:B1:D3:98:CD:23:4A:9E:6A:F4:50:3A
Authority key identifier: E0:C4:3C:A4:C4:9C:F6:52:D6:0C:CD:F3:66:E6:01:15:0D:0F:00:B9
Certificate issuer: /CN=e0c43ca4c49cf652d60ccdf366e601150d0f00b9
Certificate serial: 019F90912ED9FE55EE4A32FD451C750271C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
Manifest number: 089F
Signing time: Thu 23 Jul 2026 20:01:01 +0000
Manifest this update: Thu 23 Jul 2026 20:01:01 +0000
Manifest next update: Fri 24 Jul 2026 20:01:01 +0000
Files and hashes: 1: 4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl (hash: bL6MwjIFDuOz/cqWRN6vOkEOiM9P/qcprV2OF2T7yqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:2e:d9:fe:55:ee:4a:32:fd:45:1c:75:02:71:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c43ca4c49cf652d60ccdf366e601150d0f00b9
Validity
Not Before: Jul 23 20:01:01 2026 GMT
Not After : Jul 24 20:01:01 2026 GMT
Subject: CN=9b315fa44008c5af66b1d398cd234a9e6af4503a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:47:aa:13:cd:2e:e8:37:36:52:c9:c3:78:
8d:c0:88:65:23:08:20:86:00:a1:e6:2c:ab:8b:41:
ee:03:69:4c:1f:bf:3a:16:7a:06:95:2b:d8:13:bc:
fb:f6:8a:e4:57:80:4d:46:3f:66:2b:b5:95:2e:d8:
e7:71:1c:14:6e:6c:85:20:f0:9c:cc:f2:21:f4:53:
85:fa:8e:96:2e:5b:3e:bb:2c:c6:05:9d:5d:67:6c:
ac:ab:6c:85:af:d5:65:bf:91:e9:ec:f0:21:39:d1:
1a:db:6e:51:0e:f5:c6:eb:cd:71:44:a7:ac:72:3d:
a7:f3:e1:c3:ad:8e:7e:53:d8:51:e7:a1:3c:02:8e:
bf:48:03:33:66:32:10:aa:c2:fb:05:b9:9d:3a:2d:
bf:66:83:86:f1:a7:4d:1b:44:3a:59:5f:8f:d7:70:
98:d0:89:84:6d:1d:e5:c4:e7:9c:6c:66:31:dc:b6:
05:4e:a4:e0:05:3a:3a:24:9f:d8:36:a0:f7:7c:71:
12:33:7a:5c:29:a9:0e:46:1c:43:c3:40:22:ff:e7:
30:2f:19:cd:01:2a:d1:4f:93:ab:3c:f6:1a:bd:12:
76:33:d4:3e:b7:bb:95:b2:e5:b5:54:30:ba:f4:f3:
e0:b6:4d:f0:64:4e:78:a5:f6:1d:cd:49:9c:f2:4d:
8f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:31:5F:A4:40:08:C5:AF:66:B1:D3:98:CD:23:4A:9E:6A:F4:50:3A
X509v3 Authority Key Identifier:
keyid:E0:C4:3C:A4:C4:9C:F6:52:D6:0C:CD:F3:66:E6:01:15:0D:0F:00:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3b:23:35:76:a2:6b:69:2c:f3:0b:8b:8e:fa:1b:b8:c7:42:
db:2d:ec:c4:55:0b:0f:94:fa:8b:2d:0a:ce:87:5f:c0:74:22:
88:86:fd:2d:e0:64:34:62:f7:6c:d0:df:c8:05:a6:5d:9c:c4:
89:b5:e4:49:5e:82:7a:f4:04:7e:92:96:14:83:a5:ac:b4:14:
b2:ed:ad:bf:64:f8:d3:7e:aa:23:1c:f5:90:71:e4:44:9c:b9:
7a:a3:65:00:d6:2d:9c:27:22:f0:4b:fc:e5:2e:fd:03:13:bd:
d0:4d:ba:df:e5:c9:8e:d0:e0:ce:cb:37:ed:ef:4e:84:40:8d:
b4:76:39:5c:9f:06:c3:37:3b:e8:1d:22:9b:ea:52:d2:bc:e7:
3b:9e:a4:53:65:e6:df:e4:9f:85:dc:38:dd:3c:e9:3c:81:09:
47:92:8f:58:9b:f4:8d:99:54:57:a8:85:ec:f1:23:29:ec:a3:
20:51:fa:33:cb:8e:a0:cf:5c:9c:65:6f:84:1f:6d:fe:c6:8d:
bb:93:b0:5e:47:2a:f9:e5:fd:1f:84:8c:90:d5:65:49:1a:80:
29:c4:2e:7a:83:be:ef:18:be:03:f6:2e:58:00:4b:80:5d:5a:
b3:d8:54:91:df:f2:3e:d1:e0:d9:27:53:c8:63:af:27:ea:09:
6b:2a:4c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:20:27 2026 by rpki-client