Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
File: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json)
Hash identifier: qQkgLmzRplh2u1oAk9uy+B3nHsLfJ3nTjLIhMDFGigk=
Subject key identifier: 5F:F4:F1:4C:CF:8A:0F:63:38:CA:58:F5:63:23:75:1D:0B:C2:10:55
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Certificate issuer: /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial: 019D270419CE96D94BDF431F0B102B4D0890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:13 +0000
Manifest this update: Wed 25 Mar 2026 22:01:13 +0000
Manifest next update: Thu 26 Mar 2026 22:01:13 +0000
Files and hashes: 1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: VS23onKZhmdTXnVkA1SxbAzm27/Ly6Bj8p2IEMu4qhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:19:ce:96:d9:4b:df:43:1f:0b:10:2b:4d:08:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Validity
Not Before: Mar 25 22:01:13 2026 GMT
Not After : Mar 26 22:01:13 2026 GMT
Subject: CN=5ff4f14ccf8a0f6338ca58f56323751d0bc21055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:32:ab:f0:e8:dc:8c:a0:e4:e6:f9:66:37:
3c:07:a1:42:7b:00:1c:db:ab:e3:3f:f7:fb:47:a8:
2c:45:cc:71:4d:72:4a:bb:24:7a:54:ab:79:90:0d:
dd:67:d8:be:af:4b:48:44:37:32:f8:8a:ff:e1:0c:
ac:c3:cf:39:9c:3d:a7:8f:cb:23:05:a6:8a:14:3e:
60:31:a5:17:1d:41:c2:5a:0c:c9:a8:e1:ae:4c:4b:
3e:a0:69:d9:cd:3e:ed:6f:f3:28:c1:5d:35:39:3b:
81:db:f1:4c:01:2e:86:a9:97:03:31:a8:a3:54:ed:
ea:80:dc:2d:3c:c6:9b:b1:ab:69:d7:46:e8:a8:5c:
7a:39:e9:df:7b:a4:0f:3a:1a:b3:c5:a2:6e:a1:da:
b3:6f:89:d9:58:32:e1:49:16:32:d8:4c:40:5d:2b:
8b:f5:8e:c1:64:b2:8b:1f:cb:75:70:7a:97:a6:fc:
0c:59:73:8f:13:ee:68:a6:57:05:ca:8c:c5:73:e1:
c5:4f:6b:e3:b0:02:99:f1:a4:ee:bd:ab:96:fc:58:
eb:bd:04:b8:78:99:9e:57:78:5e:2d:8f:b7:83:1e:
56:1d:19:35:28:e4:12:a0:20:50:dc:0e:ea:bf:00:
97:5a:00:bd:6c:f6:c3:fb:d7:50:71:1e:7a:dd:e6:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F4:F1:4C:CF:8A:0F:63:38:CA:58:F5:63:23:75:1D:0B:C2:10:55
X509v3 Authority Key Identifier:
keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c1:c1:fe:96:1c:bd:ad:cc:e3:65:a1:8d:42:4c:ff:26:cc:
2d:df:24:ab:8c:16:87:b4:f9:0c:4e:3b:47:3b:44:80:f5:31:
6e:3b:7f:7c:0b:28:95:2c:2e:c6:60:5a:04:ad:6f:7e:ff:49:
61:ff:b8:cc:6b:d0:4a:35:e8:ff:0b:9b:49:be:43:a6:9b:83:
bd:25:19:fe:b9:09:22:bd:db:9d:ca:8f:2b:94:87:36:09:4c:
01:3e:d2:a3:98:d3:e2:48:28:56:c1:b5:3f:07:68:a0:41:53:
54:e6:c8:10:bb:4e:af:14:5c:82:30:02:6d:6b:02:04:12:c1:
98:d4:15:83:3b:97:ff:8e:69:3f:4a:09:d1:5a:fc:90:1f:21:
ed:c9:b9:ed:9f:68:6e:1b:74:5b:5e:85:72:14:35:11:c1:f4:
09:34:65:8a:65:1f:1c:97:b7:4d:c2:8a:90:5d:47:82:c7:52:
11:00:24:c1:6d:12:6f:e6:7a:57:3c:b8:14:cb:09:85:2b:d6:
66:1c:74:1b:98:34:f9:4f:2a:8c:27:4c:ee:30:dd:40:ec:68:
31:57:c1:93:f7:d9:99:5e:e3:aa:42:e2:1d:8e:2f:a4:f3:85:
26:ba:48:5f:3a:1e:76:b2:71:68:95:eb:5f:45:14:89:60:30:
b4:68:f8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:29 2026 by rpki-client