Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
File: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json)
Hash identifier: 7vFExPtHHCLKCqk6YJt7XgMqpR8L/mThtDX6YJuK5ms=
Subject key identifier: 7A:81:E5:DE:D3:E3:7A:98:1B:B3:3D:70:3C:82:13:D5:8F:73:38:92
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Certificate issuer: /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial: 019F92EDC9CC4812E5A83760962E45594483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 07:01:24 +0000
Manifest this update: Fri 24 Jul 2026 07:01:24 +0000
Manifest next update: Sat 25 Jul 2026 07:01:24 +0000
Files and hashes: 1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: TJ388SlsM6kF2C3xy7Gt7MPXOe+3MEEXpS5f8yUWfeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:c9:cc:48:12:e5:a8:37:60:96:2e:45:59:44:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Validity
Not Before: Jul 24 07:01:24 2026 GMT
Not After : Jul 25 07:01:24 2026 GMT
Subject: CN=7a81e5ded3e37a981bb33d703c8213d58f733892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:4d:e3:1e:a9:f0:e0:ce:74:77:10:b0:1c:
d5:08:6b:41:e6:85:5a:dc:c4:a4:c4:66:e3:55:89:
5c:eb:7b:9c:ad:2b:18:c1:c7:8e:a3:e7:a9:81:3c:
91:51:1f:ef:95:7b:10:1a:0c:77:0a:72:66:d6:24:
4b:d1:13:b5:51:f5:94:2c:bb:64:d8:b9:23:05:38:
71:bd:97:17:22:9a:48:eb:d3:5e:14:fd:4e:8a:a8:
34:69:86:12:c5:2b:f3:fc:3d:5f:4c:48:2f:a4:b5:
1a:4d:62:89:c4:e3:f7:50:eb:18:89:53:74:cf:36:
f6:e4:d2:74:6b:bd:c3:24:29:71:d2:98:37:73:45:
ca:3d:c3:a0:61:1c:cf:b7:25:05:62:c7:ec:24:1b:
a6:ff:5e:08:89:e7:6c:a3:e7:66:25:09:ca:73:96:
64:ba:e1:b3:ca:95:65:59:ea:75:b8:72:43:a0:29:
9a:f9:bf:a5:1c:4b:4f:6b:37:39:00:3a:4b:79:ea:
c0:52:59:92:d7:22:f1:4b:c2:a8:63:cf:90:fd:cc:
1a:9e:64:af:10:f7:29:d2:ca:db:97:44:26:68:30:
5d:6e:e2:89:26:2f:ce:75:a2:c5:8a:c1:ee:32:aa:
8f:85:98:a7:a5:59:ae:02:d4:b7:92:38:8e:6d:48:
f2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:81:E5:DE:D3:E3:7A:98:1B:B3:3D:70:3C:82:13:D5:8F:73:38:92
X509v3 Authority Key Identifier:
keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:89:0f:f5:86:7f:f4:4c:42:31:a5:b0:de:89:79:0f:bb:9a:
7d:4e:2e:6d:92:8d:23:a5:91:93:75:5d:8e:0e:d9:4a:90:05:
ec:ef:a2:ea:16:1a:81:3f:6d:8d:e3:80:1a:44:02:a9:d1:76:
62:cb:f6:82:f6:c7:ed:13:1b:d8:72:c8:ba:ef:70:3d:92:e8:
89:be:7a:86:0c:ed:cd:a3:46:02:58:16:3f:a3:c2:14:73:3b:
68:f4:17:74:63:54:a6:82:d3:13:63:c3:83:65:aa:bb:fe:25:
fa:f3:c1:91:a0:86:26:70:9f:78:ed:94:e1:77:75:38:e1:52:
ac:32:b9:2e:fa:fa:1f:97:64:1f:01:1d:a9:93:de:73:a1:92:
62:2e:e7:2f:19:43:c0:2e:f7:91:a7:07:fa:c0:4e:50:37:ab:
dc:ec:81:35:40:c3:d6:4b:0d:65:50:58:83:0c:9a:2b:df:eb:
15:70:a1:d8:22:cc:f3:b7:55:c6:bd:df:de:5d:3f:28:88:01:
c3:f9:24:58:c6:34:6e:7b:1c:5f:c5:47:86:cc:67:1b:8d:bf:
18:0a:70:65:20:77:d6:97:1e:31:50:ef:07:15:09:2a:9d:05:
07:5d:8e:12:d2:f6:ed:da:65:f2:cc:22:8b:5c:5c:a5:52:37:
ac:2a:bf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:34:25 2026 by rpki-client