Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
File: 4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json)
Hash identifier: Qx5pB1/dATGlmEe6HEnDza5j9F++EZcq6xrH/8nJUkg=
Subject key identifier: 41:0D:FD:38:9C:F9:41:33:AF:34:7B:66:79:FE:44:7B:AE:82:A0:C5
Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
Certificate issuer: /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Certificate serial: 019E1E6C498529EB884A78A08EE5627FFA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
Manifest number: 0722
Signing time: Tue 12 May 2026 23:01:13 +0000
Manifest this update: Tue 12 May 2026 23:01:13 +0000
Manifest next update: Wed 13 May 2026 23:01:13 +0000
Files and hashes: 1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: /Knih+FpOSCTB293hxb7y+Nq7sItUeupGE2zBKUilOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:49:85:29:eb:88:4a:78:a0:8e:e5:62:7f:fa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Validity
Not Before: May 12 23:01:13 2026 GMT
Not After : May 13 23:01:13 2026 GMT
Subject: CN=410dfd389cf94133af347b6679fe447bae82a0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:d0:3a:8f:55:a4:a2:40:a8:00:81:e4:9a:
35:58:ff:90:11:dd:0b:2a:0a:bf:4c:aa:ca:5e:f2:
78:b4:fa:90:3b:d5:f8:6a:46:b2:45:ca:04:5d:42:
11:07:bb:4a:55:47:47:fc:c8:8e:63:ee:67:63:e0:
e1:db:bb:72:19:a6:07:45:b0:f6:bf:ae:94:52:8c:
4b:ad:26:d6:97:65:75:e6:21:39:73:2f:42:c0:94:
85:6d:90:5d:61:a3:54:79:ce:b6:97:99:84:73:15:
8a:25:92:f4:2a:5e:30:64:a9:d6:a6:9a:b4:6c:3f:
38:21:62:a9:57:1f:8b:b9:63:af:a6:c5:2d:fa:b2:
d4:18:86:0a:c1:c4:6a:78:4e:1d:91:a8:68:fe:2a:
13:a6:aa:d8:6f:9f:be:8e:26:90:b3:8b:79:f4:fa:
37:cc:ed:bf:5c:5a:11:86:b9:b6:2a:76:d0:7c:14:
56:96:ea:a9:b2:b8:de:6d:df:93:01:c0:33:b4:dc:
b6:b6:88:5e:f8:f6:44:92:19:48:55:16:59:6f:c2:
aa:0a:f9:41:d1:db:8c:6d:bf:e8:c9:0d:51:c2:8c:
84:6e:ee:f9:30:71:d6:df:63:7b:66:57:b8:61:09:
26:55:37:8f:ec:c1:80:7a:f1:f9:c7:6e:84:46:6d:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0D:FD:38:9C:F9:41:33:AF:34:7B:66:79:FE:44:7B:AE:82:A0:C5
X509v3 Authority Key Identifier:
keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ef:bd:e8:c3:ee:80:88:4a:3b:a5:f0:d8:1c:d4:e0:c6:ae:
19:e1:29:7f:8a:09:00:2c:25:46:5e:97:23:6a:37:4b:08:00:
09:e1:0e:9d:c7:e2:30:82:d1:bb:4a:84:7b:7e:a5:f7:6d:44:
3a:74:94:f3:96:7a:70:c6:29:b3:c7:e0:78:ef:4a:3f:e8:20:
04:d2:39:c9:8e:68:25:15:57:a9:55:b1:ce:14:d2:ce:79:8a:
3a:3b:2b:45:95:02:4e:99:f9:53:9a:89:1e:c2:ed:1c:6f:1e:
5d:b5:c9:ac:bf:2b:d9:fa:e2:72:6f:48:56:9b:7a:d2:81:57:
21:37:bd:64:3d:af:5b:a8:1d:8c:b3:eb:da:a9:fd:ec:7d:1c:
3d:50:b1:e4:12:9d:e7:8c:b3:ee:56:ca:db:11:3d:ca:60:44:
65:cd:3b:a9:2b:e4:c0:bf:65:30:61:18:ec:a8:bb:62:20:96:
c8:6e:26:eb:94:9f:56:33:69:8e:d8:17:c5:c6:e2:da:d0:73:
8c:e9:65:35:b8:c8:ac:6e:66:e2:66:c2:04:73:76:e7:24:f4:
b2:d9:d8:df:c6:b9:a8:0f:7f:a3:4f:a1:f4:af:4f:45:02:6f:
9b:8d:e3:dc:c0:d7:ac:88:6f:98:63:a7:03:13:fe:84:35:29:
12:31:d1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:54 2026 by rpki-client