Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier: ovaR/iWAyWRmt9ZBr43zgsP6eDRyQRBx2FMgdCECgL0=
Subject key identifier: 7F:23:FB:A3:7E:F4:67:B7:7A:FC:8C:A1:75:DA:C8:EC:69:8C:68:D9
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial: 019E20915A1DB949596517577A94C4A0833C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number: 0FEC
Signing time: Wed 13 May 2026 09:00:57 +0000
Manifest this update: Wed 13 May 2026 09:00:57 +0000
Manifest next update: Thu 14 May 2026 09:00:57 +0000
Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: LgMzIpp4cTxJG2nkWxYymudPWzZeXwrnflTkSVSRck0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:5a:1d:b9:49:59:65:17:57:7a:94:c4:a0:83:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Validity
Not Before: May 13 09:00:57 2026 GMT
Not After : May 14 09:00:57 2026 GMT
Subject: CN=7f23fba37ef467b77afc8ca175dac8ec698c68d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:bc:6f:b5:36:f9:e7:db:14:b9:75:b4:b5:e1:
0f:bf:a4:79:7f:c1:39:4b:b0:73:c0:54:ca:32:ef:
16:eb:d5:dc:a0:f2:74:d2:35:8f:71:79:62:a2:56:
ae:b0:37:ed:cf:9c:e8:69:b9:b1:88:d6:8d:1b:9d:
73:b9:3a:65:e4:f4:c9:6f:c7:a1:f0:02:41:65:a2:
f3:d9:35:e5:66:11:53:89:9c:79:11:8c:63:fc:34:
bf:94:72:45:a1:26:9e:6e:e2:1c:98:35:d3:6c:43:
ad:c1:3d:c6:25:c6:c6:b8:a4:3b:b2:99:a6:22:73:
77:6d:3c:bb:8b:65:49:e1:a0:6b:5d:b8:33:c0:56:
69:70:9c:86:a8:aa:e7:35:e2:7b:73:0b:48:1b:6e:
8b:9b:18:5c:4f:d0:39:65:9f:3d:23:b6:b7:d6:90:
54:77:0f:66:58:f7:5c:c9:fb:83:5e:e9:ab:7e:16:
21:d6:b1:62:c0:55:02:32:6f:f3:72:c9:ba:23:bc:
11:fb:e7:39:f8:0b:a4:bd:90:df:ab:b9:fe:87:f8:
e2:1d:7a:19:a0:63:c7:61:22:95:fd:4b:b6:7b:db:
3c:63:80:48:bc:cf:13:fd:08:7f:7b:11:83:68:ad:
5a:fb:fb:9c:c5:ce:69:ec:85:8c:4d:97:10:9a:27:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:23:FB:A3:7E:F4:67:B7:7A:FC:8C:A1:75:DA:C8:EC:69:8C:68:D9
X509v3 Authority Key Identifier:
keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ca:fe:1c:ee:3b:c2:90:02:9f:26:63:09:7f:e4:05:40:cd:
bf:b1:d8:f9:a3:48:c5:34:15:0a:15:a3:94:e4:d6:bf:2f:8e:
40:60:10:c2:13:48:3f:6a:5f:aa:31:fc:d4:9a:70:36:69:19:
37:b6:95:1e:c8:e2:de:6f:5a:43:8a:30:5c:f8:18:82:51:e2:
06:c1:88:d8:79:43:a2:aa:39:67:ce:50:a0:f0:5a:75:78:aa:
44:4d:78:a7:24:41:25:1f:72:72:b3:5a:9e:a6:59:b2:4c:e2:
29:fe:a6:9b:c6:39:01:e8:e6:de:1a:c2:48:5a:34:b3:63:b1:
aa:40:24:6e:8d:6f:92:47:b4:cc:29:bf:99:91:ff:d4:f0:cc:
75:34:3b:76:ee:d8:fb:29:4a:66:53:24:a0:52:ea:ba:1d:eb:
22:63:6b:5c:14:8d:09:c7:34:6c:8a:28:63:eb:10:30:03:e0:
ec:9c:ab:a3:80:c2:09:4e:1c:e6:b0:9e:05:e2:10:3b:45:3b:
f1:df:bd:ff:f4:a3:49:72:4a:fa:6d:54:8d:92:71:15:bd:3a:
e5:c7:09:b2:9a:ed:b9:5b:80:d5:ff:38:79:87:9f:e5:96:bf:
ee:f2:5a:80:c0:db:33:bf:06:d0:c6:10:72:fe:f5:bb:f8:ad:
95:65:04:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:55 2026 by rpki-client