Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier: OEUBWT0LPYeo69FcjsSk8NFj5IcTyfDiZ5UxEuw2HsY=
Subject key identifier: AF:97:A3:C5:21:75:22:33:F9:68:FC:21:E5:17:9D:D2:30:E3:32:C7
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial: 019F92B6A05A6CA0DA7BD440B29461090F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number: 16F7
Signing time: Fri 24 Jul 2026 06:01:09 +0000
Manifest this update: Fri 24 Jul 2026 06:01:09 +0000
Manifest next update: Sat 25 Jul 2026 06:01:09 +0000
Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: P0IFemJ8vKQ89coPNMboGFlXMQ6ZxYMrmVZecof0uP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:a0:5a:6c:a0:da:7b:d4:40:b2:94:61:09:0f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
Validity
Not Before: Jul 24 06:01:09 2026 GMT
Not After : Jul 25 06:01:09 2026 GMT
Subject: CN=af97a3c521752233f968fc21e5179dd230e332c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:9a:db:fa:bd:6a:34:70:b1:f9:01:35:9e:
fc:1a:a8:72:e8:d0:7d:ee:dc:75:ee:b9:14:09:fc:
b4:41:48:27:ee:a7:b0:a9:28:f1:5f:22:ba:96:c0:
00:b0:a3:44:a7:bc:e6:9b:44:53:c8:61:f7:80:8a:
2f:8b:31:e2:9d:8c:a4:22:8b:56:4b:8b:5b:20:26:
e0:81:33:55:72:af:3f:53:d3:10:dd:4b:c2:8a:45:
e8:49:28:da:17:f8:2f:32:72:9f:35:18:a0:13:12:
d4:8e:c9:78:05:22:53:35:6b:b9:a9:75:21:69:a1:
75:56:c0:b5:3e:b3:d1:15:82:dd:8b:be:41:e8:4c:
89:4c:fe:98:38:7c:89:1f:5e:99:30:0b:8a:d8:16:
06:9f:fd:16:b4:d9:2b:71:3f:92:6b:3b:be:c1:09:
f3:89:8f:7b:be:cc:f8:c5:99:9d:6e:ef:46:96:19:
a0:b8:a5:36:02:54:96:3c:3c:76:7d:9e:60:77:f7:
19:b9:dd:64:0f:67:5a:39:7a:ef:ad:42:21:dd:61:
5e:be:10:f1:4e:22:64:3f:00:f5:37:e6:37:90:68:
da:2a:a5:02:3c:1b:7f:4a:4b:a2:11:ec:0d:82:cf:
85:7b:ff:42:a8:3f:10:03:e4:b2:09:65:39:4d:55:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:97:A3:C5:21:75:22:33:F9:68:FC:21:E5:17:9D:D2:30:E3:32:C7
X509v3 Authority Key Identifier:
keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7e:6a:9c:fb:d2:da:52:93:7a:5f:af:8b:e1:af:ce:29:31:
e0:70:13:52:0f:48:6e:50:21:06:06:3b:47:23:65:34:26:f5:
2d:32:71:8c:52:e1:83:ef:11:8d:cb:b0:ff:16:7e:1a:54:5f:
9b:f6:bd:e2:3b:ab:04:8d:0f:a7:87:c6:ff:3c:a1:15:2c:bb:
e2:e8:20:b0:21:bf:0c:87:4d:45:27:62:09:8c:d8:88:94:9f:
37:9d:df:bf:5b:1f:80:5f:c9:30:bc:96:6e:f4:23:19:58:1b:
00:11:b2:86:a3:b7:03:54:6e:dd:92:36:07:9b:dd:8e:c1:6a:
d9:35:74:d3:ae:df:4f:42:1f:c9:1b:d7:e6:ef:34:d1:fe:18:
17:5e:1b:38:d3:d3:57:f4:f1:b2:ed:11:40:90:99:14:fc:63:
90:ca:cd:e4:2d:e4:24:a5:3f:8b:4d:ec:c4:98:4b:e4:6f:a0:
57:d0:b3:a4:c6:99:0a:98:a5:c1:79:95:bc:74:83:b0:ce:58:
c4:d6:59:2d:e0:77:55:b5:15:e2:b6:74:93:d1:23:fb:28:25:
96:c1:3e:4c:cc:36:f2:28:8b:41:d2:7d:ae:d7:03:db:14:23:
ee:0e:6f:2b:17:e2:a6:0a:ab:54:e9:90:51:1c:c9:80:25:5d:
08:11:14:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:35:55 2026 by rpki-client