Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
File: 4WU0PZW9Tbww89ciSVQanUfnbZE.mft (raw, json)
Hash identifier: 44adCIrD2/+FGF42/b+Yf8Wglpmshg8F7Yt95TAC0Qk=
Subject key identifier: 21:B7:81:C9:FB:42:B3:F0:7D:D8:88:FC:55:DA:EE:C1:EC:0F:FD:3E
Authority key identifier: E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
Certificate issuer: /CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Certificate serial: 019F92EDE3A054A3BA888BEDC56901EA78E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
Manifest number: 12CA
Signing time: Fri 24 Jul 2026 07:01:31 +0000
Manifest this update: Fri 24 Jul 2026 07:01:31 +0000
Manifest next update: Sat 25 Jul 2026 07:01:31 +0000
Files and hashes: 1: 4WU0PZW9Tbww89ciSVQanUfnbZE.crl (hash: Djoas4jm/9TKWwdGLJwxodbpOVMFrpRHRRwkdc8WDm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:e3:a0:54:a3:ba:88:8b:ed:c5:69:01:ea:78:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Validity
Not Before: Jul 24 07:01:31 2026 GMT
Not After : Jul 25 07:01:31 2026 GMT
Subject: CN=21b781c9fb42b3f07dd888fc55daeec1ec0ffd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:f3:39:05:43:9e:cb:99:f2:0d:6a:3c:fd:
35:97:48:04:68:e4:ec:f4:bf:fa:24:cf:73:8a:c3:
44:ea:0e:8d:af:2d:12:b8:10:00:d5:f4:c9:06:6e:
07:80:73:c3:80:1d:d4:88:f7:43:75:50:4d:a5:69:
64:02:6e:c8:71:47:b6:30:43:aa:45:74:ff:41:bb:
53:fd:75:ec:38:27:0f:d9:e9:6b:1b:cb:bc:f1:a4:
51:6f:0b:b9:77:cc:fb:94:bb:ca:68:26:97:9b:90:
8e:98:3c:48:de:27:fe:55:0d:03:a7:62:73:57:3e:
fb:3f:ac:15:c8:35:aa:74:a2:7e:12:2f:1d:3a:3a:
93:0b:b7:e2:84:a7:e8:03:e1:dd:a3:2f:f5:f6:99:
97:d2:f3:e8:3c:3e:1e:1e:36:b5:12:52:da:94:69:
ff:6c:e7:fb:ff:ff:5f:a8:0a:2b:5f:79:42:83:fa:
f2:6e:11:36:61:5d:22:96:fe:07:86:75:30:5c:56:
73:cf:eb:f3:d8:41:f9:15:e1:3c:63:df:eb:2a:c6:
45:df:34:d2:1b:89:9e:bf:f2:aa:25:3a:ec:55:f1:
08:25:01:2e:20:4f:4e:65:26:c4:1c:a2:82:7f:04:
e6:b7:e9:a8:cb:39:29:7c:32:43:1d:c2:c8:94:54:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B7:81:C9:FB:42:B3:F0:7D:D8:88:FC:55:DA:EE:C1:EC:0F:FD:3E
X509v3 Authority Key Identifier:
keyid:E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ef:de:70:1a:41:1d:9a:9e:a2:46:09:b3:cc:a3:b2:3d:77:
b1:e7:cd:0a:d4:67:35:ec:ae:29:c0:84:d4:21:ba:b9:de:1c:
ef:e5:11:c2:85:42:89:77:1e:ce:73:7a:5c:28:6b:79:14:74:
25:51:ff:2a:f7:76:20:97:a4:68:db:a4:3f:d6:e4:ae:14:47:
43:c7:2a:2c:72:73:21:9d:70:ad:5e:85:ca:13:34:bd:e6:f9:
82:c0:06:eb:69:ec:d6:0f:59:0a:7b:b5:87:58:e0:5d:4c:77:
91:f5:1f:8d:7b:2c:98:c2:66:82:b3:f8:3f:62:ef:ed:1c:b7:
69:f2:c2:07:70:07:48:82:cc:f8:7d:c8:82:3b:ea:e4:2a:86:
4f:26:eb:ef:6f:93:05:66:4c:b7:3b:97:5e:00:17:fb:ac:02:
5a:eb:07:2a:27:b1:3c:2f:8c:cf:86:e6:d7:0e:14:b1:8b:cc:
fe:bd:41:29:7a:b4:78:52:99:36:da:d5:b9:96:5c:8d:d2:a4:
1d:be:67:df:dc:71:d2:46:07:72:91:ad:23:43:97:3d:a2:98:
ed:16:58:2c:c1:bc:d0:f5:0e:06:df:e0:0c:32:86:57:9f:51:
57:1e:22:e3:4e:13:e1:71:b9:e4:75:bd:49:dd:fd:ca:5c:c1:
2f:32:54:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:52:12 2026 by rpki-client