Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
File: 861SH4OIdIPIybDG895f1e1Whck.mft (raw, json)
Hash identifier: rpBWoB0mEwAkCu8gDmvPao0rqQvJ8J0J9jwLijHuLTk=
Subject key identifier: FE:E2:AE:44:00:3A:F1:11:A7:F8:BD:E6:9B:D0:56:E1:04:23:28:06
Authority key identifier: F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
Certificate issuer: /CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Certificate serial: 019F90FE84B374DF5A0B3D92F358F967534D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
Manifest number: 0F50
Signing time: Thu 23 Jul 2026 22:00:26 +0000
Manifest this update: Thu 23 Jul 2026 22:00:26 +0000
Manifest next update: Fri 24 Jul 2026 22:00:26 +0000
Files and hashes: 1: 861SH4OIdIPIybDG895f1e1Whck.crl (hash: 8aUzygtz4AuEzKLG/LvLmple3hZt1m20anY254yus7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:84:b3:74:df:5a:0b:3d:92:f3:58:f9:67:53:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Validity
Not Before: Jul 23 22:00:26 2026 GMT
Not After : Jul 24 22:00:26 2026 GMT
Subject: CN=fee2ae44003af111a7f8bde69bd056e104232806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:f6:6e:85:7f:fd:71:46:f7:26:8a:6e:bd:
02:ec:82:36:41:f3:94:44:3d:cf:6d:d6:af:6f:66:
fa:bd:12:de:2e:94:7a:26:37:c2:02:7d:83:91:fe:
ab:cc:77:64:75:76:36:05:54:9b:35:bb:73:1c:19:
ab:75:ea:aa:4b:25:4b:41:1b:8d:a9:23:0d:09:c4:
4c:d2:ae:fb:1a:0a:fe:74:b1:4e:05:94:3c:b6:28:
2e:50:49:61:04:ca:fa:e5:39:4b:b8:38:ad:c0:f5:
9e:53:92:c8:42:30:21:a6:06:ff:eb:09:11:cf:ed:
cd:93:df:ed:1f:22:46:19:07:d3:64:1a:36:72:35:
6d:28:e2:d4:96:69:df:ec:b0:65:78:ee:c6:1a:08:
d5:c1:f4:38:3c:f1:13:66:ac:b6:43:d3:14:ee:fe:
63:f4:09:27:a0:0a:6e:d8:c8:21:a0:62:33:33:86:
a0:bb:01:46:cd:b6:27:58:45:be:18:15:bc:9f:89:
bd:05:b4:c0:db:c6:b4:68:a1:88:ef:b6:07:67:1e:
a1:7e:77:4b:f6:e9:8d:00:bf:1e:a5:8e:00:59:d4:
aa:f6:7e:e4:d6:30:3a:50:1e:cf:d6:ba:12:9e:bf:
d7:be:70:dd:18:96:f4:27:1c:6c:aa:1f:9f:bf:15:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E2:AE:44:00:3A:F1:11:A7:F8:BD:E6:9B:D0:56:E1:04:23:28:06
X509v3 Authority Key Identifier:
keyid:F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f8:89:a2:43:b0:c2:ef:d1:e0:5a:9f:4c:03:ab:67:57:3b:
bf:a6:72:d5:36:94:7b:a7:50:da:22:eb:c9:f9:26:dc:eb:26:
f7:b7:23:9b:09:d9:c3:3c:23:08:d5:a2:9c:39:86:f8:f0:72:
8f:21:0a:8f:16:c0:9e:77:92:3c:e9:88:24:25:33:d3:3d:35:
ab:be:54:97:e9:d8:4e:c9:5a:8f:35:db:7f:ec:bd:a0:82:0d:
0b:43:b4:2c:f0:72:2c:1f:3d:f4:a8:d7:20:05:7b:80:27:15:
e4:88:e1:ae:25:d0:81:57:48:63:5c:a3:65:a3:48:0f:19:52:
f9:8e:81:36:98:1e:20:0a:9c:c6:45:6d:93:f6:08:0c:2c:5e:
2d:db:46:0a:44:14:44:68:86:ac:d6:67:61:71:18:23:43:dc:
71:fb:41:b1:2f:c4:5f:0b:6c:17:95:bc:7e:9a:b6:c3:12:b3:
4b:6c:b8:14:6b:3f:22:9c:67:29:a1:81:2b:32:ff:20:9b:9d:
25:85:19:1c:0a:d0:7e:01:cb:ae:88:02:76:48:1d:67:8d:fe:
43:74:45:fd:bc:51:b8:8c:c9:ec:9b:11:31:ff:4f:87:d6:91:
cb:07:27:f1:20:64:e1:18:4b:51:63:ef:ff:5a:81:09:10:c8:
f0:0b:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:05:58 2026 by rpki-client