Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
File: 4BpLB7xMpvoFciL96uhg9kRAR-A.mft (raw, json)
Hash identifier: 9dz0CBLyDWRoZFC3W8B78JIjd7UMDkk88ngWF8BFNX8=
Subject key identifier: 06:7C:E6:6B:5C:9A:E6:6D:88:7C:28:C6:01:FB:BA:E1:F4:17:F6:63
Authority key identifier: E0:1A:4B:07:BC:4C:A6:FA:05:72:22:FD:EA:E8:60:F6:44:40:47:E0
Certificate issuer: /CN=e01a4b07bc4ca6fa057222fdeae860f6444047e0
Certificate serial: 019F9090F3413FA0E2CABA142F078679D423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BpLB7xMpvoFciL96uhg9kRAR-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
Manifest number: 0797
Signing time: Thu 23 Jul 2026 20:00:46 +0000
Manifest this update: Thu 23 Jul 2026 20:00:46 +0000
Manifest next update: Fri 24 Jul 2026 20:00:46 +0000
Files and hashes: 1: 4BpLB7xMpvoFciL96uhg9kRAR-A.crl (hash: fu0qaa5cqqp62gpN2Dl9PJ42LFGrWXIaeU36uxk3b7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BpLB7xMpvoFciL96uhg9kRAR-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:f3:41:3f:a0:e2:ca:ba:14:2f:07:86:79:d4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01a4b07bc4ca6fa057222fdeae860f6444047e0
Validity
Not Before: Jul 23 20:00:46 2026 GMT
Not After : Jul 24 20:00:46 2026 GMT
Subject: CN=067ce66b5c9ae66d887c28c601fbbae1f417f663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:f9:d4:5b:9a:06:73:9c:94:f9:1c:8f:f6:
ab:83:57:f6:7d:d2:32:b0:66:e2:f9:51:bb:a2:ee:
e4:38:15:41:6d:b1:57:99:3a:f5:37:40:c0:8a:61:
f6:22:69:8f:17:bf:68:7e:63:00:31:f1:69:f3:bb:
7c:ff:9f:da:88:a2:20:42:a2:8c:05:cc:cb:1a:79:
a7:70:f1:f9:af:ed:13:13:c4:fd:61:c3:5c:c6:d1:
48:d9:ac:3f:b8:1a:2b:6f:fb:02:11:2a:59:d6:78:
6e:d1:0f:52:a8:38:af:8c:bc:da:c8:49:b3:03:9f:
8c:bd:b8:d7:16:9c:cd:76:d8:bd:b4:fd:d7:06:fc:
92:10:7a:1d:b8:96:bd:0c:ae:0d:12:8a:f5:69:cb:
bf:b4:ec:8f:df:d8:72:dc:93:31:d7:2a:3c:26:2a:
67:23:0e:eb:f8:9a:d4:37:72:8a:47:de:04:30:57:
87:ad:2a:2c:56:3c:75:64:fd:8b:ac:5a:f7:dd:64:
b7:80:a9:20:84:9c:e9:d2:72:24:a9:a3:e7:e6:b9:
70:96:ad:58:09:b3:13:02:e9:f9:d8:08:99:91:ce:
da:3f:d0:7e:bd:e0:3a:b7:c9:7e:05:3a:17:d8:8f:
e8:24:ad:3a:18:40:17:8f:66:a3:5e:98:e0:e2:68:
14:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7C:E6:6B:5C:9A:E6:6D:88:7C:28:C6:01:FB:BA:E1:F4:17:F6:63
X509v3 Authority Key Identifier:
keyid:E0:1A:4B:07:BC:4C:A6:FA:05:72:22:FD:EA:E8:60:F6:44:40:47:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BpLB7xMpvoFciL96uhg9kRAR-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:be:67:9c:6c:6f:97:f5:c0:cb:84:a0:5b:53:04:ce:87:78:
7e:58:54:90:01:a9:95:c3:e0:26:1e:13:98:ab:c7:df:46:5b:
b0:5c:c8:16:5e:26:6d:47:2a:29:21:12:9c:74:3e:a4:59:c8:
7a:e9:eb:39:23:d5:10:fc:78:2d:9a:61:c9:76:7d:04:c3:4b:
ce:c8:7b:f0:a0:59:94:3d:e6:61:5e:d0:a5:66:d8:79:6d:7a:
1d:c8:1d:80:c2:99:73:44:d3:a4:45:5d:49:ba:f1:51:72:ed:
b4:8a:b1:fd:0e:73:eb:0c:ad:05:a0:84:fa:02:dc:a1:d2:d2:
23:45:d3:b0:bd:22:11:ea:dc:bd:e4:54:5c:0d:ed:e6:36:07:
e4:05:ba:aa:3d:c4:cd:90:ef:bb:d3:4b:7e:84:36:52:b6:69:
5c:24:39:42:2b:ef:b2:23:b1:85:73:16:21:28:c1:96:ec:ad:
0c:ef:78:8a:89:45:85:a0:30:cc:39:46:96:b8:ac:c3:34:79:
6e:72:35:20:4d:7b:ea:77:da:bd:a7:31:52:76:a4:cc:20:fa:
16:c1:b0:00:33:96:23:54:8f:23:55:3d:2d:aa:3c:c3:16:3e:
ff:00:42:9e:cc:3d:f4:83:a3:5b:e1:dd:6c:94:54:a5:cf:57:
b0:e5:fd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:44:27 2026 by rpki-client