Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
File: 4tccU1qnoKzpP62r22WD-ISmxiY.mft (raw, json)
Hash identifier: OnJ6UP/oS399yi8gZh6s5jGq6mCE6AzU3PmtrdiijYI=
Subject key identifier: BD:7B:A9:AA:E1:5C:9A:1D:78:5B:05:4D:84:FE:3B:08:AC:09:C9:C5
Authority key identifier: E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
Certificate issuer: /CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Certificate serial: 019F90FF34D84EFC85B79390C32CE6E15CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
Manifest number: 0A9F
Signing time: Thu 23 Jul 2026 22:01:12 +0000
Manifest this update: Thu 23 Jul 2026 22:01:12 +0000
Manifest next update: Fri 24 Jul 2026 22:01:12 +0000
Files and hashes: 1: 4tccU1qnoKzpP62r22WD-ISmxiY.crl (hash: G5ZZ5u9qcjkLp8T3Pocg0BaWku8mP5NennBIDJoSyqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:34:d8:4e:fc:85:b7:93:90:c3:2c:e6:e1:5c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Validity
Not Before: Jul 23 22:01:12 2026 GMT
Not After : Jul 24 22:01:12 2026 GMT
Subject: CN=bd7ba9aae15c9a1d785b054d84fe3b08ac09c9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:86:4c:05:5b:f9:88:eb:b2:31:59:a4:57:
e3:bc:05:bb:c1:3f:e8:9d:32:42:4a:21:5d:7a:ce:
39:90:21:ae:75:0b:3c:9d:d5:44:b1:3c:75:75:e7:
39:a6:3c:57:5a:3b:8f:0a:d0:43:be:d0:d3:70:cf:
a1:f3:2b:f3:e9:cc:81:5d:14:fe:7b:b6:11:27:d1:
7b:2b:c4:f5:c5:0f:02:09:35:f6:6e:8f:14:f6:d5:
f3:0e:15:b9:4f:ca:ae:7c:dc:b6:3f:b6:ae:2d:41:
82:55:84:91:04:8d:db:77:f8:21:90:06:0b:f8:8d:
90:57:8e:c6:d3:24:6a:55:be:c9:e0:6f:05:7c:41:
98:9d:d6:39:00:1c:5f:e5:18:f7:01:93:ba:ed:2e:
39:0b:19:01:ce:c2:29:5d:97:cc:26:b7:d4:ed:7c:
40:36:30:be:e0:88:db:7d:d2:d4:7d:eb:4a:42:03:
f3:11:c7:10:37:13:d1:33:4b:9a:a1:1d:45:06:37:
00:df:a7:fa:77:6a:5f:71:e8:18:d7:03:1a:5b:38:
a5:b1:e3:73:e5:d2:50:7b:e8:ca:aa:82:e9:99:49:
5a:4a:fd:ea:ac:61:de:2f:ac:d5:d5:90:a1:40:96:
db:8b:9a:10:e0:73:c5:7d:6d:58:50:0a:c3:13:ef:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7B:A9:AA:E1:5C:9A:1D:78:5B:05:4D:84:FE:3B:08:AC:09:C9:C5
X509v3 Authority Key Identifier:
keyid:E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fd:2a:dc:63:be:cd:6f:84:18:4b:86:1a:79:22:ac:15:85:
43:de:f1:81:02:49:7c:ca:3f:6f:12:fd:d7:19:29:f2:9f:f9:
bb:75:87:a5:b9:fc:24:a1:d4:01:ba:89:fd:cc:f6:76:de:4e:
fd:f9:d6:56:ec:34:6a:aa:34:ba:70:30:78:6d:d3:1d:e4:f3:
77:9b:93:d7:f3:29:00:3a:a8:2a:cf:5f:4d:1b:4f:59:95:4c:
83:1d:0f:98:a9:be:96:37:98:15:ba:d9:81:21:48:56:d5:6d:
46:57:8f:34:17:71:27:b2:0c:b5:8a:20:bf:d7:0d:e7:09:cd:
7e:8e:d5:0c:ed:be:76:6c:69:fb:3f:5b:92:e1:46:e4:e6:88:
5c:a1:f3:d9:fa:7b:d1:31:f1:84:b5:ab:35:56:8a:ac:76:f3:
72:44:58:e2:91:f4:01:72:51:26:47:09:e4:ad:4b:97:df:e7:
4f:0b:b6:cf:e9:37:7c:3c:1c:db:ca:95:ad:40:12:1d:98:ee:
e2:2f:da:02:cd:69:ce:66:38:5e:3c:7c:3d:5b:d9:94:8e:41:
73:ac:14:3c:6e:47:b2:dc:d3:95:01:ca:49:04:7b:b5:cc:45:
ee:51:1a:0c:e9:3a:64:8d:58:88:69:bd:cc:e4:ba:96:ba:72:
c3:dd:50:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:23:27 2026 by rpki-client