Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File: 4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier: QFdPJnhMg2fqid5oGtzZoE9d4I6L557FWhKdwEWI/eg=
Subject key identifier: 41:51:B9:09:7A:BE:16:E1:31:09:F5:1D:87:81:BC:2A:58:B0:D5:7F
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial: 019F93245F9EBE45110ABBE0E5455CBCAD79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number: 19D1
Signing time: Fri 24 Jul 2026 08:01:02 +0000
Manifest this update: Fri 24 Jul 2026 08:01:02 +0000
Manifest next update: Sat 25 Jul 2026 08:01:02 +0000
Files and hashes: 1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: oCyN2be64rkg7ule3Ff37bDKcatee5nBGrTDr21/yY4=)
2: 77se7qJXk55SeOZEcLQG-rbxsr8.roa (hash: OQDmgPfY6EApBYAHydMcNAqVcKBYMQ02TGKDG7szY/E=)
3: N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa (hash: LqroIaOJcyhk3jhpQNNYhhn2nTyn7BAqMOWhnDZAcrY=)
4: S3wAJAuRML5Do5HIcNyZi2_zrRU.roa (hash: AgpqUaFG2QBQhnJTxXP4ibifKNaKINVjwUQ+PyAUUno=)
5: mtJz-hUI0Cx0jLgkDLzYwDMbWdM.roa (hash: CKUhSDm/qBK/JCbTgbEQJEgA0HKSbKEajcNdo2qCwys=)
6: pYQ5IyUbzq5qvpxuz6__bErWTAk.roa (hash: EPZHqA+xkmohjRcec6HU5g8Eeu99YhgqZrcWYKO20oU=)
7: uZvBL7Adjps3YJPzPab2422Kfhw.roa (hash: jc1WIld0OO6y7I+8/9pDJkxR96M4dxWB/ebX7E2Vo1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:5f:9e:be:45:11:0a:bb:e0:e5:45:5c:bc:ad:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Validity
Not Before: Jul 24 08:01:02 2026 GMT
Not After : Jul 25 08:01:02 2026 GMT
Subject: CN=4151b9097abe16e13109f51d8781bc2a58b0d57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:2e:d7:d5:70:ea:05:68:ba:e4:4a:14:1f:
56:19:bd:62:a1:79:51:9e:db:07:64:a1:5c:71:d2:
f1:57:e8:e7:eb:f6:34:81:a3:d4:94:5f:f2:7a:7b:
2d:4f:45:22:aa:52:f5:94:70:65:97:a4:68:92:89:
0f:04:fb:ba:a8:ea:91:b1:ca:9f:3f:36:03:f6:7a:
40:32:3b:5a:a5:b4:c3:bd:4d:1c:27:02:fb:1a:53:
42:9a:37:25:05:e7:cc:d9:37:b8:86:28:8f:61:ed:
c7:1b:54:6b:56:07:1e:3e:84:79:06:0b:ed:50:40:
fb:73:bd:59:6e:14:6f:88:78:cf:d8:70:1a:26:ed:
a6:0a:8a:33:36:b3:e5:dc:47:38:83:f9:73:8e:e2:
72:74:86:e0:02:ca:9a:2a:7d:1c:a7:0d:4c:c4:ff:
34:f8:4d:26:51:e2:17:d3:e8:69:05:b5:5e:0f:d6:
83:fe:1a:b5:a7:65:42:da:b1:1f:ea:32:d0:87:47:
79:0f:df:5f:c0:0b:0a:18:af:d4:36:9d:29:31:49:
93:bf:93:0c:7b:cf:fe:f8:a4:e2:b3:9e:a3:92:de:
86:93:39:fd:dc:a4:fc:c1:22:68:b0:10:70:0d:21:
37:57:1b:a6:2b:d7:80:a8:d6:c5:17:18:20:be:5f:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:51:B9:09:7A:BE:16:E1:31:09:F5:1D:87:81:BC:2A:58:B0:D5:7F
X509v3 Authority Key Identifier:
keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:87:4b:fc:ce:4d:f0:52:41:6c:dc:ac:4e:8d:d8:33:93:d5:
b8:4a:f0:74:4b:8b:84:55:1e:6b:77:1e:35:7d:78:93:7f:1e:
a7:73:79:3c:70:41:45:86:6d:71:58:de:a4:bf:a0:86:4a:d3:
78:01:d9:9d:e8:fc:3f:8e:f8:f1:a6:01:17:63:40:2e:f0:8e:
2e:b8:71:f1:75:92:94:3b:34:60:a8:f3:c0:8c:de:81:47:26:
ce:5f:5d:19:03:af:a6:98:8b:03:dd:90:52:91:01:cf:0c:4b:
f6:5a:49:b9:53:b6:2b:b2:b2:33:6b:54:48:e1:01:9f:0c:f6:
3a:91:03:fc:2e:3d:b7:21:f4:c6:f1:b5:ea:90:46:c1:40:23:
89:20:fc:39:bd:57:19:bc:e3:5b:af:bd:64:c8:5d:09:34:14:
f8:cf:11:45:d8:ae:b5:5c:9a:23:cd:86:f5:1c:1e:70:ee:69:
a6:7f:b0:9d:98:2f:89:81:35:a2:58:b4:9a:a4:0f:20:5d:61:
9b:9d:7a:84:80:5c:79:c1:62:a5:18:89:f3:cb:67:a1:23:ef:
96:bb:bc:96:40:c6:b8:5b:03:94:97:4a:70:fe:7e:2e:ff:8b:
01:a7:6a:18:00:ac:f2:f3:4e:a5:7d:ee:01:31:6c:79:f5:b3:
bb:7b:71:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:57:26 2026 by rpki-client