
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/4cJXoFTbh6kn9Zim-QddPYuwfqE.mft
File: 4cJXoFTbh6kn9Zim-QddPYuwfqE.mft (raw, json)
Hash identifier: fIeOfdSt8WyZSoGq4syFC9lYZoqOC5jMQJcqPhzO6l0=
Subject key identifier: D6:B8:EB:B7:E5:33:E0:B2:DA:55:99:60:84:EF:80:82:31:EC:B2:DE
Authority key identifier: E1:C2:57:A0:54:DB:87:A9:27:F5:98:A6:F9:07:5D:3D:8B:B0:7E:A1
Certificate issuer: /CN=e1c257a054db87a927f598a6f9075d3d8bb07ea1
Certificate serial: 019F8EA2D716D2223BCC52C9E19C7E1FEE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cJXoFTbh6kn9Zim-QddPYuwfqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/4cJXoFTbh6kn9Zim-QddPYuwfqE.mft
Manifest number: 3E
Signing time: Thu 23 Jul 2026 11:01:04 +0000
Manifest this update: Thu 23 Jul 2026 11:01:04 +0000
Manifest next update: Fri 24 Jul 2026 11:01:04 +0000
Files and hashes: 1: 4cJXoFTbh6kn9Zim-QddPYuwfqE.crl (hash: ExDHPCWHiDwfKanZQpE2/E2DlKwlDSRe/x0DfDngVMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/4cJXoFTbh6kn9Zim-QddPYuwfqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/4cJXoFTbh6kn9Zim-QddPYuwfqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cJXoFTbh6kn9Zim-QddPYuwfqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:d7:16:d2:22:3b:cc:52:c9:e1:9c:7e:1f:ee:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1c257a054db87a927f598a6f9075d3d8bb07ea1
Validity
Not Before: Jul 23 11:01:04 2026 GMT
Not After : Jul 24 11:01:04 2026 GMT
Subject: CN=d6b8ebb7e533e0b2da55996084ef808231ecb2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:d7:a0:ae:b1:ca:dd:dd:ef:00:e8:70:0c:
4b:8d:4e:bc:20:59:e3:ab:9e:ee:a3:7f:8a:90:42:
48:14:16:5d:54:a0:09:a4:49:31:f5:1e:ce:07:ed:
ff:df:fa:8a:97:e4:27:57:cb:2d:9d:b1:6d:36:04:
88:9c:e1:c5:89:15:7e:cd:25:ad:7f:9a:6f:e4:db:
b9:73:12:94:c7:9a:12:1c:35:5a:6e:1e:4d:d0:53:
87:92:85:bd:d2:32:99:72:66:58:53:28:a5:b9:11:
a6:ed:70:62:59:8c:fd:7c:28:1c:3e:bc:63:4e:80:
de:ae:c4:91:cc:e9:5c:62:15:ab:08:4a:d0:d3:47:
0a:a1:c6:d0:32:9c:d3:ff:26:3d:72:3e:0f:cc:52:
05:b6:cd:ce:0d:37:80:ff:1f:a7:16:73:29:35:bc:
24:68:80:cc:08:da:2f:ce:bf:3f:8e:ac:80:66:30:
47:3e:aa:e8:c6:98:66:14:26:ce:d4:48:43:82:9d:
25:83:ad:bb:68:32:79:10:c0:be:18:66:7a:71:b2:
33:24:88:3a:d3:16:64:c3:8a:44:4d:b9:79:63:a2:
a3:59:22:b0:94:50:53:be:f9:3b:a8:09:3b:0c:0d:
d2:6a:0c:78:19:60:28:b1:7a:00:83:9f:02:00:ea:
36:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B8:EB:B7:E5:33:E0:B2:DA:55:99:60:84:EF:80:82:31:EC:B2:DE
X509v3 Authority Key Identifier:
keyid:E1:C2:57:A0:54:DB:87:A9:27:F5:98:A6:F9:07:5D:3D:8B:B0:7E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cJXoFTbh6kn9Zim-QddPYuwfqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/4cJXoFTbh6kn9Zim-QddPYuwfqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/4cJXoFTbh6kn9Zim-QddPYuwfqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:50:99:57:ca:e4:f8:a5:3d:ac:18:74:31:e4:c8:b0:2e:dc:
17:a5:aa:94:d0:df:50:45:5b:1e:81:8f:95:9e:a9:8d:d6:85:
01:7b:36:04:58:fb:5c:fe:85:e9:01:ad:83:34:19:50:a8:91:
cd:f6:7a:3c:41:11:2c:35:ea:7e:ce:e7:69:29:6e:0b:59:a6:
4c:97:38:20:76:f0:d5:0b:65:c0:b5:2a:3e:aa:21:77:1c:e9:
0f:13:47:40:15:ab:cd:2c:2a:3c:aa:9c:ea:b2:d8:eb:6d:20:
ae:25:5e:f7:d4:46:bc:07:3f:f8:f1:de:0c:c8:07:91:26:65:
78:f6:b6:cf:c5:6a:88:79:9c:72:25:f8:90:50:07:e3:7f:4c:
75:a3:a0:15:fe:30:9d:20:ef:98:39:b8:92:59:17:d8:17:f4:
8a:8d:41:b2:57:97:0a:45:03:b7:a7:5f:e3:b5:6e:42:04:ac:
e8:f3:d1:b1:54:24:b9:47:7e:bb:08:7c:ae:c7:41:a5:6f:da:
d4:ee:08:fd:0e:70:13:8a:cd:57:70:07:99:84:e3:a8:b2:c3:
30:69:c0:2e:61:8b:8b:c7:1e:65:b3:0d:79:95:a0:a7:5e:a3:
24:46:f1:a8:23:3c:6f:c5:30:20:42:82:95:13:33:d9:32:79:
b2:27:20:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:29 2026 by rpki-client