Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
File: 4iUB2aQBcJg48z0a4nm85xALPM8.mft (raw, json)
Hash identifier: oTUeJevwZBvUFz8vEJ1GJKnFGrgfLz1bzRxID/26os4=
Subject key identifier: 64:01:42:47:16:C1:4C:07:85:10:4B:01:2D:4C:42:85:7B:A8:38:F6
Authority key identifier: E2:25:01:D9:A4:01:70:98:38:F3:3D:1A:E2:79:BC:E7:10:0B:3C:CF
Certificate issuer: /CN=e22501d9a401709838f33d1ae279bce7100b3ccf
Certificate serial: 019F90FF1706603E27E97932ECA0E7F3D432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
Manifest number: 143D
Signing time: Thu 23 Jul 2026 22:01:04 +0000
Manifest this update: Thu 23 Jul 2026 22:01:04 +0000
Manifest next update: Fri 24 Jul 2026 22:01:04 +0000
Files and hashes: 1: 4iUB2aQBcJg48z0a4nm85xALPM8.crl (hash: JrmTT9bOKZaQfK3V6me3fK5/DWEnmlj4eREMQwr7Kbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:17:06:60:3e:27:e9:79:32:ec:a0:e7:f3:d4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22501d9a401709838f33d1ae279bce7100b3ccf
Validity
Not Before: Jul 23 22:01:04 2026 GMT
Not After : Jul 24 22:01:04 2026 GMT
Subject: CN=6401424716c14c0785104b012d4c42857ba838f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:81:61:e8:f4:cc:96:6d:04:4d:21:8e:be:
9d:cd:2b:3a:55:fe:2f:63:37:15:ca:c2:80:87:28:
e5:22:88:0a:8b:a5:c6:93:ab:93:a1:1f:ec:3b:76:
f9:9b:bd:f0:31:12:66:77:e9:67:10:54:c7:a9:8c:
10:c4:3e:3b:e5:35:cd:b8:0a:68:8a:8f:1e:70:45:
21:25:cf:9b:81:c8:d1:2a:40:d9:aa:1c:14:8d:4d:
43:eb:cb:78:f9:0f:10:df:df:62:26:d1:7b:ab:58:
a9:9f:9a:57:9f:a6:72:99:30:61:d5:b5:8a:09:c6:
1d:97:dc:44:e3:bb:e0:93:ca:b9:48:e6:b1:83:4a:
2c:dd:a9:a7:b0:57:2c:f1:8b:66:94:8c:2a:70:75:
e9:b9:99:b6:4d:d8:f3:6b:da:7b:54:d9:a5:29:f3:
06:8e:1d:8b:eb:dc:c2:c9:59:21:1d:1a:1f:70:a5:
a3:45:fc:8f:39:28:30:52:09:72:d4:14:18:f4:be:
7e:04:61:c5:f4:1f:b8:b4:59:3b:b6:e0:e3:41:d0:
f6:90:07:3d:1d:f6:df:04:ac:0f:ee:78:03:ff:e7:
10:d5:e8:ec:b8:a5:99:78:8a:aa:98:e8:43:b1:86:
fa:86:34:c6:e1:17:88:6c:0c:b2:75:87:db:cf:15:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:01:42:47:16:C1:4C:07:85:10:4B:01:2D:4C:42:85:7B:A8:38:F6
X509v3 Authority Key Identifier:
keyid:E2:25:01:D9:A4:01:70:98:38:F3:3D:1A:E2:79:BC:E7:10:0B:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:54:a6:33:22:a9:d4:c2:1a:64:a6:3f:47:cf:e7:d7:bf:58:
1f:2e:03:6f:39:34:ef:7c:b4:6e:ad:1a:29:b6:84:e0:a5:43:
2c:55:f9:19:11:bf:40:54:a6:1f:2c:d0:f4:1b:55:a1:7b:61:
9a:83:b6:74:28:b8:b8:24:6f:f4:8c:75:13:8f:b2:a4:1d:5d:
64:56:90:1d:e8:d7:97:16:ce:4a:42:99:24:95:8d:e2:a3:86:
72:3a:9c:42:53:b0:82:19:4d:6c:c5:b9:ef:66:8f:a3:11:fd:
43:f3:f4:a0:ca:2f:7b:95:75:cc:f2:54:5c:2e:0a:50:75:32:
96:e8:08:1e:f1:b0:a4:c7:b1:46:a1:19:25:83:56:1d:ec:fb:
40:21:60:5a:d6:c8:98:8a:8c:dc:99:00:ab:9c:67:ec:d5:62:
fc:ae:39:b9:8d:4e:94:d5:1f:41:91:be:a7:ef:84:cc:4c:ae:
3e:96:24:db:a4:bb:43:86:c5:b6:99:dd:af:a9:a6:a9:f6:ee:
78:2f:13:dd:74:12:32:2d:fe:2c:87:fd:dc:2b:db:d5:8e:98:
b4:83:14:72:07:bf:93:c2:29:a5:41:e0:55:7a:b0:b4:a9:3b:
ca:b7:cc:2f:48:9c:41:58:0d:63:35:0b:4f:34:62:5b:dc:45:
82:e6:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:41 2026 by rpki-client