Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
File: 4UYAGfiAaeNhThUQkhzH5E0cq-I.mft (raw, json)
Hash identifier: HGHkDGVqnz/jRhaXXIVvrycd0MTSI187FPlVWPi3hls=
Subject key identifier: 28:81:C4:63:F2:BE:C9:0D:95:74:30:14:55:41:D8:C2:C9:03:F1:EE
Authority key identifier: E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
Certificate issuer: /CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Certificate serial: 019F8FB54EE91304118797881E434C33BF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 16:00:51 +0000
Manifest this update: Thu 23 Jul 2026 16:00:51 +0000
Manifest next update: Fri 24 Jul 2026 16:00:51 +0000
Files and hashes: 1: 4UYAGfiAaeNhThUQkhzH5E0cq-I.crl (hash: EQSSZBWDhgMa04JwYN/smFZpXfNhxGkILnbdgriNZEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:4e:e9:13:04:11:87:97:88:1e:43:4c:33:bf:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Validity
Not Before: Jul 23 16:00:51 2026 GMT
Not After : Jul 24 16:00:51 2026 GMT
Subject: CN=2881c463f2bec90d957430145541d8c2c903f1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3f:a4:df:8c:9d:80:c3:90:77:c0:2e:87:06:
6d:f9:14:eb:4e:86:33:be:c4:90:44:8d:e1:65:4f:
ef:65:f4:25:91:08:ed:e5:7f:09:dd:c0:ba:4d:01:
7e:6a:25:14:68:f5:b3:a9:04:88:96:d9:d4:4e:19:
a0:c0:36:28:11:e4:84:5c:9d:de:f3:c6:3f:e2:4e:
07:c6:b9:fc:d3:5c:c1:cf:7f:17:c1:df:87:44:37:
11:58:41:a5:4a:25:94:69:89:83:fe:77:f8:2d:79:
04:7f:ca:d3:d2:52:00:7a:d6:62:5a:31:ce:80:95:
b6:46:8e:70:01:4e:6a:86:6d:fb:be:8b:f5:4d:e8:
b9:a3:9c:3a:1a:74:6f:f6:d3:16:d0:c1:04:05:df:
29:fd:1a:70:4e:c3:85:fc:4a:c0:00:4c:b3:04:c3:
61:4b:c2:f3:1f:d2:a6:1a:3c:cd:08:ca:92:b9:c0:
ea:ac:17:da:47:dc:37:b7:18:76:53:ee:5c:d2:7c:
28:ff:52:48:40:ff:2e:e1:3b:72:a4:68:24:d9:b2:
8f:e5:18:f1:d7:46:41:27:c6:24:2e:fb:e1:7f:0f:
a4:0d:31:77:4c:be:19:1f:39:ec:1c:48:83:ed:03:
4b:b7:98:03:fe:72:c1:c2:6d:40:b8:38:91:bd:cd:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:81:C4:63:F2:BE:C9:0D:95:74:30:14:55:41:D8:C2:C9:03:F1:EE
X509v3 Authority Key Identifier:
keyid:E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:49:55:28:a4:a5:23:37:cd:df:a5:38:9a:63:f0:9a:b5:5b:
1e:52:9b:88:1c:30:b7:fe:82:2a:a0:1d:c8:a1:fe:64:f2:98:
ff:85:1b:b4:18:87:06:fe:ad:7d:53:4e:53:71:46:ea:64:fc:
2d:a0:36:7f:9d:85:17:a8:b7:a1:41:e4:a9:9d:4d:db:27:da:
97:2b:6c:c6:0a:2d:9d:1e:a7:3f:d9:51:52:a9:e1:f0:7d:44:
f3:be:eb:21:23:d3:eb:2a:d3:f5:d5:dc:5f:9d:ce:b2:2d:b8:
3d:e7:d9:0e:c8:0f:83:a7:4b:47:0f:fa:0f:60:86:d9:02:fb:
74:40:14:52:58:70:ae:de:3b:f0:9f:2c:c7:43:72:d1:ce:7b:
0d:6c:7a:b4:96:ef:20:e5:16:4f:57:6d:ad:e3:bd:e5:e9:b4:
af:24:7d:b7:78:1c:8f:b5:71:78:d3:20:b4:d8:8a:9b:44:22:
05:e7:86:eb:85:ce:49:7a:fe:b3:e1:b9:2b:e1:ab:09:67:83:
0e:a0:f6:ad:08:6c:b4:14:e0:a2:d4:2c:db:9b:af:49:29:f7:
3e:b5:ac:ad:26:70:14:7a:38:32:50:94:c0:9e:c0:16:ec:6f:
63:6f:d2:0b:b4:50:16:b1:08:8b:72:97:3c:76:4e:09:fc:14:
5d:10:5b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:33:38 2026 by rpki-client