Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
File: 4HDNq3OhLa82gGsOFgLI2vuQk7s.mft (raw, json)
Hash identifier: SgEiipH0HbhPXm8ZCYnpzwcQEyTq9ySHBTUVqWiremk=
Subject key identifier: 8B:0C:55:FF:91:CB:1A:0E:4F:A3:94:3A:5F:22:2C:7E:16:84:70:64
Authority key identifier: E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
Certificate issuer: /CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Certificate serial: 019F90FE6FB58149480D63A46C00396E7228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
Manifest number: 0F10
Signing time: Thu 23 Jul 2026 22:00:21 +0000
Manifest this update: Thu 23 Jul 2026 22:00:21 +0000
Manifest next update: Fri 24 Jul 2026 22:00:21 +0000
Files and hashes: 1: 4HDNq3OhLa82gGsOFgLI2vuQk7s.crl (hash: OmTsXkQx4g2vbMYFIhM6TOEDbc4qndoqo2E2F4stRNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:6f:b5:81:49:48:0d:63:a4:6c:00:39:6e:72:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Validity
Not Before: Jul 23 22:00:21 2026 GMT
Not After : Jul 24 22:00:21 2026 GMT
Subject: CN=8b0c55ff91cb1a0e4fa3943a5f222c7e16847064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:98:75:41:a9:27:86:46:ae:66:46:b4:45:
45:4b:00:05:8a:d1:8c:d1:ff:5d:10:86:03:5c:da:
ec:a7:eb:90:ea:a4:eb:cf:fa:04:2a:ad:24:15:39:
f8:7e:86:8a:3f:85:18:56:97:bc:3f:7e:23:c1:a1:
12:d5:4c:b7:0d:50:51:b7:80:ef:47:ab:7a:05:af:
9d:12:28:0e:0b:94:fb:c1:5b:22:50:48:06:e6:ee:
1d:8b:f0:c7:4a:dd:e1:3a:02:03:87:4e:b2:a8:15:
a6:33:6d:5b:e6:df:4b:62:a6:e7:a5:2e:37:34:c7:
05:fa:28:dd:c8:38:1f:07:c8:0b:2e:be:a9:70:cd:
96:ea:38:14:07:b6:6f:f2:b7:59:5a:47:a3:3d:6b:
9d:26:59:f0:0b:93:8b:19:df:5c:e8:27:41:26:54:
da:09:7a:f8:d4:2e:c2:31:b5:15:c8:f5:a5:d1:44:
c3:df:e7:b3:65:94:36:fe:1e:c8:40:9c:42:95:22:
55:00:2d:5b:f3:c2:f1:a1:de:e2:c8:f1:76:c0:2c:
9a:96:de:e6:ae:23:62:e7:3b:e7:a7:0a:42:be:68:
3f:14:89:d6:2b:73:41:83:53:32:7d:f2:5e:46:23:
b7:4d:f2:44:54:0a:6d:f7:ad:4c:5a:4a:77:cf:a8:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0C:55:FF:91:CB:1A:0E:4F:A3:94:3A:5F:22:2C:7E:16:84:70:64
X509v3 Authority Key Identifier:
keyid:E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:38:bb:a4:7e:dd:59:47:73:4b:2c:d6:79:cc:76:f0:4e:26:
4d:bd:c3:74:0e:08:0c:2c:1e:f0:a0:a7:fe:eb:07:e9:97:0a:
38:fd:b7:f4:04:47:d1:4a:d7:1c:11:3a:29:05:a4:f0:bd:58:
84:55:0c:3f:da:e1:96:de:a0:a7:ff:95:71:1e:a8:b3:91:b1:
c0:34:d8:76:b6:58:4c:5a:c8:de:73:a7:d3:29:f9:24:de:a2:
3f:1e:56:30:6c:93:81:48:5a:bb:bf:40:19:41:a7:ce:d3:14:
28:dd:02:17:89:12:88:99:fd:57:e2:53:c5:1d:e1:2c:e1:8d:
fd:7f:d9:35:93:65:1c:3a:d9:a8:a2:c9:39:19:4d:db:85:f6:
5c:d7:33:27:ea:42:50:56:f4:d7:ac:ab:8c:d7:75:a6:e9:2a:
46:c8:19:e9:11:d8:fb:59:6e:a9:18:6b:6c:05:ec:63:12:ff:
44:a8:0e:67:6c:c6:48:47:91:cc:71:b5:0a:2d:81:6a:20:07:
7a:e0:99:84:b1:d5:b6:84:e5:61:96:7d:c9:37:ad:1e:de:86:
3d:30:8d:50:ee:d6:c9:86:d3:69:4d:1a:64:4f:19:a2:29:e3:
ea:f3:c5:f3:ce:6e:42:12:36:c9:5d:1d:92:7d:53:9f:8d:88:
34:52:d7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:37 2026 by rpki-client