Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f7987b-dec8-473e-9aee-fa9707163592/1/4wJ74mXbaaT32KtXHGXYnvzq9_4.mft
File: 4wJ74mXbaaT32KtXHGXYnvzq9_4.mft (raw, json)
Hash identifier: vAzPL1gp5qvWp/TMw/y9p2rbV8NWbSgaew2qsds5WN4=
Subject key identifier: 03:90:77:C3:15:66:4A:EE:8C:5C:2E:16:06:6F:4C:FF:C1:62:8A:2D
Authority key identifier: E3:02:7B:E2:65:DB:69:A4:F7:D8:AB:57:1C:65:D8:9E:FC:EA:F7:FE
Certificate issuer: /CN=e3027be265db69a4f7d8ab571c65d89efceaf7fe
Certificate serial: 019F92B65EA400E9B08C02A114373FC2029A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wJ74mXbaaT32KtXHGXYnvzq9_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f7987b-dec8-473e-9aee-fa9707163592/1/4wJ74mXbaaT32KtXHGXYnvzq9_4.mft
Manifest number: D3
Signing time: Fri 24 Jul 2026 06:00:52 +0000
Manifest this update: Fri 24 Jul 2026 06:00:52 +0000
Manifest next update: Sat 25 Jul 2026 06:00:52 +0000
Files and hashes: 1: 4wJ74mXbaaT32KtXHGXYnvzq9_4.crl (hash: xijO+0OOAIVev4ZFvMMpLI351YxkD0IdwMCnKk6m+bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f7987b-dec8-473e-9aee-fa9707163592/1/4wJ74mXbaaT32KtXHGXYnvzq9_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f7987b-dec8-473e-9aee-fa9707163592/1/4wJ74mXbaaT32KtXHGXYnvzq9_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wJ74mXbaaT32KtXHGXYnvzq9_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:5e:a4:00:e9:b0:8c:02:a1:14:37:3f:c2:02:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3027be265db69a4f7d8ab571c65d89efceaf7fe
Validity
Not Before: Jul 24 06:00:52 2026 GMT
Not After : Jul 25 06:00:52 2026 GMT
Subject: CN=039077c315664aee8c5c2e16066f4cffc1628a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:b9:a5:10:d1:f2:56:5e:c4:3a:37:31:8a:
bd:a3:e7:0d:a7:2d:b4:14:09:6c:4a:0b:73:3c:e4:
a7:86:7c:44:4e:e9:9c:2a:58:6d:db:a2:93:4d:6b:
e2:ec:e3:e8:2d:ed:0c:46:37:ed:9d:e8:c1:3e:17:
99:07:b4:2c:9d:31:77:c4:0b:86:15:01:c2:58:ec:
0b:bf:00:03:73:1b:ee:25:8a:50:84:bb:78:45:df:
c7:77:2c:3b:e8:61:06:0f:71:61:49:fa:46:03:32:
50:0e:53:7b:1f:b0:5f:11:3b:68:61:4c:d8:af:01:
76:80:dd:d0:f4:87:94:3c:60:fe:28:2c:7b:e9:32:
de:45:06:10:0e:5b:21:f2:9b:8f:46:8b:75:37:a9:
e3:cf:e8:5a:6f:24:64:8b:c2:ba:d6:a0:30:81:7a:
32:40:1b:84:56:98:81:95:d2:6c:5d:6a:b1:c1:32:
ab:d7:7e:6c:9d:d5:19:f2:3a:3c:00:da:dd:7a:62:
c5:91:79:2c:c0:00:29:65:b5:de:24:61:2a:bc:b2:
1d:27:a5:4d:25:9f:e7:54:5f:d3:70:6a:4d:48:55:
d7:52:c9:f5:d1:d0:57:a3:fa:aa:49:47:bb:c0:6e:
13:ca:66:94:ba:b5:e1:ca:76:ef:cb:e0:92:42:94:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:90:77:C3:15:66:4A:EE:8C:5C:2E:16:06:6F:4C:FF:C1:62:8A:2D
X509v3 Authority Key Identifier:
keyid:E3:02:7B:E2:65:DB:69:A4:F7:D8:AB:57:1C:65:D8:9E:FC:EA:F7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wJ74mXbaaT32KtXHGXYnvzq9_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f7987b-dec8-473e-9aee-fa9707163592/1/4wJ74mXbaaT32KtXHGXYnvzq9_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f7987b-dec8-473e-9aee-fa9707163592/1/4wJ74mXbaaT32KtXHGXYnvzq9_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1b:6c:50:e3:55:2d:eb:1b:58:36:d8:74:0d:4a:f9:a6:7d:
03:e9:b3:9b:e6:ba:a9:4c:89:e5:79:75:15:c4:54:9d:1f:f9:
88:ac:4a:c9:80:08:e1:53:ef:3c:63:18:c5:34:63:55:d8:4c:
ae:85:eb:0d:2d:ab:ca:11:cd:f8:da:7b:88:17:33:ed:c9:ad:
0d:21:44:75:6a:b4:41:18:6e:ab:da:49:ad:5d:61:74:db:d2:
8c:2f:fd:d2:a7:65:27:b1:2d:7c:86:1f:0a:69:27:af:4f:ed:
66:b5:57:6d:98:b6:5f:15:49:cc:71:27:98:3b:54:f6:21:fe:
10:3f:4a:de:fc:2b:cd:f2:5b:9f:4b:21:39:48:49:b2:6b:8b:
e1:8a:36:4c:5b:30:d1:c0:bc:de:ea:ba:19:70:f4:b9:d7:da:
77:fa:76:3f:b8:40:0d:24:19:81:57:cb:b9:25:e3:22:33:0c:
f6:dd:16:2e:cb:86:32:c8:4f:8f:83:b4:c6:ee:d9:62:16:0c:
d0:dc:bc:3f:35:e5:af:b9:58:08:2b:3a:f3:a9:58:5a:d4:43:
23:84:ce:3a:f6:42:fd:92:1d:5e:8a:14:c6:48:87:59:e8:23:
56:e4:86:4e:d7:b2:7d:2e:89:3b:43:33:b1:f6:b2:c1:e5:ae:
f9:a4:26:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:53:13 2026 by rpki-client