Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
File: 898KdcnvaBuNIzZ9vo7a0FPzvZU.mft (raw, json)
Hash identifier: soLpv/Z5oXzjGCuValyZQ4b/1GCKvhQZO1c4qwKHSjY=
Subject key identifier: 49:E4:42:5B:39:8F:B7:38:8E:F8:E4:CA:54:02:E3:78:65:BE:8D:08
Authority key identifier: F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
Certificate issuer: /CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Certificate serial: 019F92ED4D166EE19EFB48E84E9155D071C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 07:00:53 +0000
Manifest this update: Fri 24 Jul 2026 07:00:53 +0000
Manifest next update: Sat 25 Jul 2026 07:00:53 +0000
Files and hashes: 1: 898KdcnvaBuNIzZ9vo7a0FPzvZU.crl (hash: oU9yTdOHvLzuS1ROoIwgJiYanQjTbLFgqFtmAcTvdq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:4d:16:6e:e1:9e:fb:48:e8:4e:91:55:d0:71:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Validity
Not Before: Jul 24 07:00:53 2026 GMT
Not After : Jul 25 07:00:53 2026 GMT
Subject: CN=49e4425b398fb7388ef8e4ca5402e37865be8d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6b:e1:0c:19:c9:c7:70:02:08:d1:c6:12:02:
7f:f3:f5:0a:7c:85:d6:46:a2:ad:a4:90:3d:e8:3d:
25:25:d2:17:5f:3b:4a:8f:c0:40:36:6b:ed:b1:58:
d8:2a:f4:4b:9d:b6:d0:2e:86:f7:64:15:62:27:57:
23:1d:ce:46:f0:55:7c:84:05:1e:02:04:54:e9:87:
85:e5:bd:ab:77:aa:d6:b9:60:58:98:94:25:db:97:
b0:b9:6f:df:0d:b7:52:c4:ea:b3:c3:b1:2d:30:24:
f5:81:7c:b9:0e:24:06:a1:d4:9c:6a:3d:66:82:4e:
d3:54:9c:87:8d:1b:78:be:8e:a2:8a:50:0c:38:ba:
e6:ba:65:57:92:f0:a9:0c:4d:5b:06:95:ed:f1:4a:
02:4c:7f:a3:b0:d1:9f:35:fd:8b:91:c0:3e:ad:29:
1b:3a:f7:a4:57:89:83:b8:4d:01:6c:e0:da:42:0b:
ac:e3:9a:04:a2:35:73:5e:3b:b0:89:36:8c:d9:9e:
73:76:7d:f5:34:24:c3:e3:76:0e:a5:8d:b2:3f:73:
f8:ac:80:49:fe:16:ff:68:c9:ee:75:c8:4e:d4:83:
f1:d4:22:48:0e:1d:51:1f:d5:1c:25:d6:37:a0:05:
37:83:ba:57:30:6d:34:de:78:5f:08:2c:c2:eb:02:
4d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E4:42:5B:39:8F:B7:38:8E:F8:E4:CA:54:02:E3:78:65:BE:8D:08
X509v3 Authority Key Identifier:
keyid:F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:13:58:62:51:86:6c:1f:63:55:dc:8b:67:3a:9e:5f:50:e3:
5d:12:5f:ed:29:64:3f:f9:24:82:89:ab:45:4e:e7:9b:73:72:
e1:28:61:87:6b:e1:81:72:91:08:29:4b:55:e1:60:08:e7:b0:
28:49:44:96:b8:10:77:29:3c:c7:31:90:46:03:cb:f7:d4:fd:
ea:ab:79:86:4a:67:0e:97:79:f0:7f:57:dc:81:92:07:80:79:
24:3a:26:1b:e3:d9:b3:40:f4:c8:19:35:bc:db:a5:a6:fd:b8:
f8:52:42:17:be:a6:81:2e:49:4a:86:37:7a:72:3a:06:7a:99:
21:19:03:1e:6b:63:4c:22:fc:2d:bc:a9:d9:f7:78:ac:01:19:
e2:61:f8:2b:11:70:fd:95:8e:eb:43:88:f7:98:94:3c:14:6f:
16:9d:2e:80:6e:55:34:19:d8:d0:81:d2:4f:b6:7f:4f:38:9f:
e5:d8:39:8a:9b:6c:f1:f4:fd:23:b9:f2:3f:dc:15:1a:74:85:
54:6b:d8:18:f1:0b:ee:a0:1a:74:51:d4:77:7f:25:81:56:69:
50:1b:45:2a:c9:a2:a1:20:15:8f:b2:36:d0:ba:19:c8:cf:17:
31:86:a1:40:eb:6c:44:29:d0:90:c9:54:29:e2:53:8f:a9:35:
e9:01:d5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:54:32 2026 by rpki-client