Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier: a4YFs7XaZ9cFdDTtzAz+DYIKs1gTtae/waEj4F6ACm8=
Subject key identifier: F1:4F:2B:04:3C:F8:F4:28:29:7F:B7:C3:AA:63:08:AA:DA:E4:39:4A
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial: 01A0DB0483A5915B0295945BBC0B6C2FC135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number: 17A1
Signing time: Sat 26 Sep 2026 00:01:41 +0000
Manifest this update: Sat 26 Sep 2026 00:01:41 +0000
Manifest next update: Sun 27 Sep 2026 00:01:41 +0000
Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: HjU9C5ue3UhWCvF6Dul+A12QuPoZ+A4zU5ocbHbw2ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:83:a5:91:5b:02:95:94:5b:bc:0b:6c:2f:c1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
Validity
Not Before: Sep 26 00:01:41 2026 GMT
Not After : Sep 27 00:01:41 2026 GMT
Subject: CN=f14f2b043cf8f428297fb7c3aa6308aadae4394a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3f:c0:84:90:84:86:38:4f:fa:79:31:e7:a0:
dc:8a:e8:84:61:ab:2e:6d:86:18:ef:52:9e:75:dc:
c1:a9:e4:a1:7b:49:08:70:61:83:49:98:f4:c2:85:
d8:8c:81:c3:99:0a:09:88:b1:bb:01:bf:73:60:04:
8b:6e:f5:42:7a:13:c0:5d:e4:0e:39:66:32:b0:68:
d2:92:23:5d:df:12:bb:41:c0:6e:82:7b:8a:bb:67:
75:51:7d:5c:0a:c2:29:8d:48:37:f8:1d:6f:b0:f6:
9d:ad:c1:ca:0d:f6:91:12:34:da:28:93:26:20:f5:
3e:5d:fa:cc:16:26:2c:4b:e9:a7:7c:de:91:6b:6a:
3b:a7:d2:0c:11:df:9f:f8:a4:0a:a4:81:30:a8:79:
36:07:bd:ed:9c:ba:e1:77:9b:86:60:d0:b5:2e:3a:
be:5f:90:58:dd:11:f0:12:e9:e9:c2:7b:ae:a5:41:
fe:49:fc:bf:56:00:d2:73:65:89:b3:56:ea:82:16:
25:6c:4a:b7:6c:a0:eb:64:b0:47:2d:b4:14:e2:90:
8d:6d:28:45:96:15:5d:9a:6a:57:29:d5:13:84:f9:
c7:c9:d3:88:68:b9:7a:98:cc:a7:4b:7f:3d:fe:1e:
c3:01:57:dc:d9:73:66:66:96:60:75:d5:04:f3:6c:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4F:2B:04:3C:F8:F4:28:29:7F:B7:C3:AA:63:08:AA:DA:E4:39:4A
X509v3 Authority Key Identifier:
keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5c:8f:ee:40:da:93:38:6d:fb:3a:4a:a9:cf:fb:2f:f6:dd:
52:61:7b:2a:6e:3f:db:3e:be:6e:cf:49:43:d5:c0:28:7d:db:
76:80:2c:d7:5f:77:32:c7:6b:86:b0:28:cc:f3:1c:7e:8f:97:
23:89:91:c3:a9:13:00:98:a4:a7:6d:ae:00:2f:da:b9:09:96:
89:b4:fe:8e:61:f6:ca:97:e4:d1:11:a1:07:c9:85:53:72:f4:
20:c2:92:d4:cd:6c:b2:83:0d:32:06:57:be:e2:57:66:6f:ff:
d3:0f:77:ea:79:d9:a5:ca:f6:9d:31:10:28:cf:38:64:46:99:
c1:5b:37:04:fa:dd:36:5b:5a:e0:8a:6e:22:eb:1c:da:f7:88:
90:77:1d:b8:b4:ed:60:09:bb:d7:43:c7:c9:8b:fa:bc:3a:c3:
05:6b:fb:ac:58:73:e4:20:9e:6c:66:ed:21:f0:43:1b:e7:c0:
49:d8:a6:d6:9b:6a:90:17:2d:59:17:98:47:a7:71:c8:c5:fd:
52:9a:e3:ea:ec:e5:2b:2e:ac:9a:65:8e:f0:29:52:46:68:65:
0e:f8:b1:71:8d:08:fa:d9:30:8e:d2:f4:48:38:92:d0:88:af:
76:b6:7b:b8:e1:1c:b9:2a:00:be:ed:e0:da:3e:eb:58:68:1b:
31:2d:9e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:32:06 2026 by rpki-client