Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
File: 4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json)
Hash identifier: UhgoW8eIY5Oo2xRTNlEj3NnAnZ8iIqePtDg+FURVOU0=
Subject key identifier: 71:05:D4:0F:B9:BD:43:42:00:71:7B:58:0C:5E:1A:2D:DA:87:04:8F
Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
Certificate issuer: /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Certificate serial: 019F91359403321A268CB13A88E4DD74CE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
Manifest number: 07E2
Signing time: Thu 23 Jul 2026 23:00:35 +0000
Manifest this update: Thu 23 Jul 2026 23:00:35 +0000
Manifest next update: Fri 24 Jul 2026 23:00:35 +0000
Files and hashes: 1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: GesFKwpAl51y6dYrSCct2tzxq9Z/Gs311nITx+Qr3s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:94:03:32:1a:26:8c:b1:3a:88:e4:dd:74:ce:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Validity
Not Before: Jul 23 23:00:35 2026 GMT
Not After : Jul 24 23:00:35 2026 GMT
Subject: CN=7105d40fb9bd434200717b580c5e1a2dda87048f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:1b:a9:22:54:36:15:8b:2c:18:3f:6b:4d:
55:1a:6d:9b:74:66:e4:f2:24:53:42:1d:26:5a:7e:
68:39:57:82:03:07:fa:de:13:59:30:bb:43:cd:7a:
3a:89:2a:be:da:37:fb:d2:9b:a5:44:8b:0f:7d:34:
a9:4e:f1:89:6a:13:83:2b:58:62:a3:f2:39:e4:9d:
1e:2c:c4:bd:fb:ba:07:ac:74:83:50:8b:b7:c3:17:
c3:1d:b9:0f:99:74:70:26:79:0a:0a:52:bb:01:7b:
69:6b:71:8f:c1:5d:d2:e6:4e:a2:55:0d:10:35:aa:
6e:96:08:1e:67:29:33:76:05:1f:d8:64:14:93:da:
39:40:96:f5:12:05:0e:71:75:d2:87:10:f5:d7:c8:
fd:75:b7:35:5b:99:dd:3f:95:70:b3:97:9e:dc:59:
1b:8f:5b:41:54:55:ea:fd:f4:23:cd:8c:20:e5:7c:
83:4c:af:55:a4:03:66:77:b3:ef:e3:96:35:88:48:
c7:47:7e:0d:26:72:79:04:f7:f7:ef:d6:83:cd:28:
47:f5:90:c1:14:37:d3:31:4f:25:5a:ff:8f:f9:35:
3d:9a:9f:48:39:19:f6:24:0e:eb:ff:5a:b0:ab:06:
9c:f7:32:29:5e:30:3f:ac:5f:e1:ce:48:5f:d8:7b:
f3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:05:D4:0F:B9:BD:43:42:00:71:7B:58:0C:5E:1A:2D:DA:87:04:8F
X509v3 Authority Key Identifier:
keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:14:e3:0e:d5:66:20:e9:a9:a5:56:02:2c:a1:d9:12:dd:c3:
bb:e1:eb:1a:f1:36:92:f3:cb:86:a7:2e:ce:dd:1b:aa:d7:7a:
a6:f1:29:3c:59:2f:0a:01:13:75:2d:ff:a6:60:fa:06:6a:e3:
42:51:69:9d:1e:83:b1:5c:ce:fd:ee:36:01:b4:83:96:01:76:
b0:22:a9:87:e3:db:ec:7f:7e:b4:41:09:d7:fc:f5:5b:cc:a2:
82:83:c8:9a:59:61:55:6e:dd:7f:8e:2c:bf:b8:92:ca:cd:43:
67:f9:af:2d:37:13:55:7a:41:2c:91:64:de:52:ee:2e:07:56:
cb:1a:e8:83:93:59:45:f9:07:12:a5:a3:60:7d:92:73:7a:89:
55:2e:bc:d4:d8:b4:8b:b6:55:ef:9c:f3:61:7a:3d:d9:13:58:
df:0b:d7:b6:2c:0a:c4:d1:61:39:0d:70:a4:04:97:44:0b:0f:
78:39:8e:45:38:c4:7b:b8:80:27:d8:c6:e7:a2:b3:dc:cd:68:
6a:7c:7e:2f:14:40:8e:cd:f1:b1:27:6d:b3:77:2b:c4:11:f1:
66:e5:16:fc:19:75:46:01:05:c1:62:af:f7:6f:7f:1f:bb:d9:
d9:e9:bf:d2:8c:54:32:46:9c:72:a7:1a:06:c6:80:a2:d9:d8:
d1:3b:7e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:40 2026 by rpki-client