Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: 3ujI1pgMUmxysGnR60HTFiCXSDaPGmnfxxfFho0Vb5I=
Subject key identifier: 09:F1:67:A1:44:10:15:8B:7F:70:32:AA:0F:89:82:B6:8C:B2:DD:EF
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 01A0DA96C477445E5F1F33239EEF46B49F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 19D7
Signing time: Fri 25 Sep 2026 22:01:48 +0000
Manifest this update: Fri 25 Sep 2026 22:01:48 +0000
Manifest next update: Sat 26 Sep 2026 22:01:48 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: QzxosHFCyB2GST5PXohMXdamghY40u0V91DrkYritWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:c4:77:44:5e:5f:1f:33:23:9e:ef:46:b4:9f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Sep 25 22:01:48 2026 GMT
Not After : Sep 26 22:01:48 2026 GMT
Subject: CN=09f167a14410158b7f7032aa0f8982b68cb2ddef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:c7:53:b2:c2:d6:91:d4:ce:ba:e4:97:2f:
ad:37:ee:71:d7:85:68:96:61:96:d9:cf:cf:2b:a0:
ac:35:0e:72:6a:1d:95:8c:28:03:94:c5:cd:b2:29:
ed:9e:cf:54:7b:1d:45:81:4b:6d:df:1b:cd:3d:86:
43:3b:57:dc:69:d4:e7:06:8a:39:ba:4d:70:9b:25:
a1:98:0d:23:12:66:bd:8b:fc:05:82:dd:df:7e:77:
71:7c:b4:89:9b:78:00:dd:7a:ee:55:8f:3a:4f:25:
5a:27:eb:bb:14:8c:62:84:09:4f:b0:00:42:4f:c4:
90:e8:41:65:a6:fa:86:21:7d:06:2f:63:3e:7b:ac:
06:8e:b0:9f:43:ae:cb:bd:13:7b:72:0c:1b:36:68:
2c:be:5b:d8:3e:6f:f1:20:1d:21:32:2b:48:45:7d:
4e:43:fb:b4:9b:f3:bd:e4:42:7a:78:bb:9e:a8:25:
b0:03:bb:3a:37:2c:06:47:ba:c9:24:54:d5:81:7d:
7e:4b:6f:bd:86:fc:d7:db:08:c5:b3:01:4a:28:0a:
7f:f2:3a:cf:76:d7:e9:bd:94:72:8a:ac:c1:52:90:
77:65:e2:06:ed:09:49:09:2f:c4:71:df:d1:bc:19:
8c:7f:d1:78:30:e4:74:47:b0:0f:be:19:52:b5:bb:
e0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F1:67:A1:44:10:15:8B:7F:70:32:AA:0F:89:82:B6:8C:B2:DD:EF
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9b:23:ae:45:bf:ba:2e:92:6c:90:e4:83:71:e8:d5:96:18:
a3:1d:e7:fb:5e:2c:4a:99:7f:48:8d:a3:23:80:d8:a8:b6:5d:
1d:18:3f:ad:e0:9e:8a:97:72:d6:d3:10:76:b4:72:d5:e7:21:
c2:ec:cb:1a:bd:b0:5e:1d:6e:8c:24:a3:2c:43:26:73:e4:5c:
f0:67:1d:6b:07:61:a9:58:99:1d:7d:4a:a8:f0:b7:e6:60:f1:
4b:85:2b:f9:a3:bd:9c:c4:1d:61:a1:5c:a0:0e:82:c2:6f:9c:
61:e3:df:59:bd:f5:9c:ae:f2:9b:c4:35:3b:e8:c0:9d:d7:1d:
2e:03:d6:90:26:48:62:8b:2c:1f:20:26:f7:02:98:70:0a:71:
93:59:84:ee:10:e0:84:2c:23:aa:87:99:62:c4:02:e6:24:c4:
ec:12:34:85:a9:ed:67:86:31:73:6b:08:1b:da:b5:da:c5:c8:
57:ef:a6:03:3d:79:bb:51:2a:37:93:f8:63:bd:05:b0:85:62:
f8:e0:1a:0c:5d:03:26:f3:f3:85:86:e1:ef:48:4e:6a:56:27:
44:4c:58:32:56:6e:b7:9e:b6:2c:e2:a6:6e:c1:93:5d:d5:3f:
3d:57:c0:c7:86:12:1b:72:e1:fc:f2:1d:f8:62:4a:d2:11:94:
a7:b0:6c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:43:24 2026 by rpki-client