Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
File: 4TcnopRRvk3Zkitg0cWW6Aaplfs.mft (raw, json)
Hash identifier: mPPYmS/88A5ueXq0I224c2H4ojhOhvj1uR/0lnGF/G8=
Subject key identifier: 3D:18:77:D6:83:F5:92:85:BE:53:CC:D3:BD:D4:73:08:11:8C:50:EA
Authority key identifier: E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB
Certificate issuer: /CN=e13727a29451be4dd9922b60d1c596e806a995fb
Certificate serial: 019F90FE67131864DA57C93B8341B111637B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 22:00:19 +0000
Manifest this update: Thu 23 Jul 2026 22:00:19 +0000
Manifest next update: Fri 24 Jul 2026 22:00:19 +0000
Files and hashes: 1: 4TcnopRRvk3Zkitg0cWW6Aaplfs.crl (hash: MXhLe4HXuqJM2WOr8O0B63SBoQxBM49vMLeIiHmAD3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:67:13:18:64:da:57:c9:3b:83:41:b1:11:63:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13727a29451be4dd9922b60d1c596e806a995fb
Validity
Not Before: Jul 23 22:00:19 2026 GMT
Not After : Jul 24 22:00:19 2026 GMT
Subject: CN=3d1877d683f59285be53ccd3bdd47308118c50ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:3e:a7:3f:cc:89:6d:a6:5e:7f:5c:08:ed:
a7:c2:68:13:b7:5e:00:30:0b:dd:b9:29:c5:1a:fc:
11:76:18:6e:68:da:8b:53:ed:a6:2e:19:ee:38:4b:
94:d4:ea:29:b3:68:02:3b:12:43:07:6a:53:c5:74:
5a:f7:eb:c1:69:76:31:c9:5a:50:e0:39:3d:67:3b:
a7:57:a4:e8:ad:53:57:d0:de:11:46:af:8b:a8:99:
7b:0c:8a:de:5c:d4:fe:12:63:5b:07:5f:43:e4:84:
00:5e:a3:3d:0f:c9:f7:38:db:93:d1:9b:0c:54:66:
65:05:ef:f7:b8:d2:8d:09:34:37:c1:18:91:28:c6:
54:eb:5e:de:d2:e9:56:cf:ff:bf:96:9e:a7:3a:e8:
52:f1:d7:ec:87:18:f0:90:75:d3:b7:43:e9:c0:b9:
e0:fc:dd:03:0b:9f:89:57:9f:43:ef:68:01:00:4b:
74:2d:15:d7:5c:40:37:e2:e3:64:88:13:76:d7:cf:
bf:05:63:99:82:31:ee:78:47:f3:80:1f:eb:76:c1:
69:cf:1b:23:70:ab:66:7e:90:5c:f1:74:68:cc:cd:
af:f7:94:e0:3b:55:14:28:bc:95:43:c4:02:f8:7e:
5b:7e:a8:54:e3:62:73:c1:eb:21:ab:6f:2d:b1:ea:
57:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:18:77:D6:83:F5:92:85:BE:53:CC:D3:BD:D4:73:08:11:8C:50:EA
X509v3 Authority Key Identifier:
keyid:E1:37:27:A2:94:51:BE:4D:D9:92:2B:60:D1:C5:96:E8:06:A9:95:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TcnopRRvk3Zkitg0cWW6Aaplfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/de37fa-1bd2-47f5-9e2b-ac4c8f19876d/1/4TcnopRRvk3Zkitg0cWW6Aaplfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e8:7c:2a:03:50:e3:1f:b9:d6:e9:dc:99:e0:b5:df:b8:55:
b2:44:01:3e:ac:b2:63:ca:65:38:c3:a3:b7:61:ec:6c:31:43:
24:4c:45:c3:d5:1c:27:8c:e6:d4:78:b1:b4:c7:40:ba:c7:82:
f9:5e:02:d6:56:de:b4:0d:0e:ce:a9:79:40:0e:d8:9e:75:57:
4e:cf:e9:2c:a7:be:11:d3:2e:68:42:d7:12:7d:83:33:0e:e8:
5c:fa:b3:c9:4d:d6:ba:5e:8e:d0:4d:d0:96:ce:12:c5:dc:33:
34:82:46:3a:b8:70:a5:68:95:e9:c6:0f:6c:3d:52:7e:ed:fc:
a6:a3:7d:f5:ec:29:61:66:e8:ea:33:6d:b7:b2:a0:ac:66:f1:
68:d6:a0:6a:c3:cf:ef:33:f6:7e:fb:93:0e:1a:28:8c:4b:88:
d7:5a:96:5a:31:44:f1:56:38:86:61:52:05:f5:0f:36:2d:a8:
ea:02:78:ff:40:49:45:60:75:cf:4a:d0:1c:0c:4e:45:da:ea:
dc:33:f3:2e:f8:33:f8:5e:38:c6:06:ff:04:b3:54:d2:28:d9:
ce:44:80:b9:f1:3c:38:37:74:75:d7:4c:b2:0c:e0:5c:61:8d:
0d:cb:46:2f:66:64:1b:b5:b7:fa:5c:cf:91:bd:85:fe:93:19:
85:36:ff:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:03 2026 by rpki-client