Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: 6dUkmotDPFiC2IUS92ZoapURgSOxSumCmwgzlGBrh94=
Subject key identifier: 36:CE:8D:0C:72:EB:18:89:85:C8:FE:C5:7D:51:A0:F0:AE:B0:DD:95
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 019D284E63AF287A4C2B7BDD7A369514D50B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 17ED
Signing time: Thu 26 Mar 2026 04:01:59 +0000
Manifest this update: Thu 26 Mar 2026 04:01:59 +0000
Manifest next update: Fri 27 Mar 2026 04:01:59 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: KlUa2Qjdh3GMdlN37KZu+6qa3ltJysQJPgbKK23mH8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:63:af:28:7a:4c:2b:7b:dd:7a:36:95:14:d5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Mar 26 04:01:59 2026 GMT
Not After : Mar 27 04:01:59 2026 GMT
Subject: CN=36ce8d0c72eb188985c8fec57d51a0f0aeb0dd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:5d:bb:7f:b1:b5:96:d8:0c:a4:06:54:9b:
22:84:17:fe:9f:55:83:b5:b2:e7:32:55:1f:ca:8e:
22:24:15:68:d9:bd:ce:05:9d:6c:d0:2e:af:75:02:
16:3e:a2:34:60:c9:5a:d0:d0:e4:89:44:d9:6f:fe:
a1:d7:65:56:3a:0b:b3:ba:63:14:d1:a5:54:31:40:
d2:53:36:b1:9f:a3:75:f3:7b:62:06:d3:05:e2:97:
d0:f3:c2:c8:59:58:bb:fa:4b:30:99:3f:17:4f:26:
25:a6:05:31:70:10:95:9c:14:11:b9:59:ba:63:cb:
a1:f9:3e:b2:01:84:31:58:1a:53:15:92:5f:82:ad:
b2:8a:6d:50:66:55:bf:f3:89:63:f8:3e:7c:3e:6b:
42:ec:ca:fc:27:b8:83:f7:a5:c3:36:66:e9:9a:72:
56:c1:bb:52:27:cb:25:4a:b9:2c:40:92:3d:c0:f3:
4e:bf:21:28:8d:bd:d1:7e:9d:0c:6e:8c:ba:ef:d8:
c5:f2:c1:0e:ba:f8:5e:76:f0:3a:15:c0:20:71:2f:
27:1c:fb:1e:36:59:d7:4c:ad:53:61:4d:65:91:5b:
6d:cb:7c:a1:4b:48:70:43:ac:56:d8:4f:31:01:c7:
0d:fa:b9:ca:0e:8d:f9:5a:52:d5:61:0b:e1:5b:bb:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CE:8D:0C:72:EB:18:89:85:C8:FE:C5:7D:51:A0:F0:AE:B0:DD:95
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:cd:3c:a4:96:5d:88:41:ef:14:ab:e1:2c:30:bc:5d:ce:d8:
c8:51:69:23:42:62:c2:e1:f5:7b:ca:d5:83:2a:d3:2b:24:1e:
a3:9d:0f:68:a6:0a:e5:19:84:a5:b0:9d:e9:b1:82:5c:be:c4:
d2:3d:cf:5b:10:88:5b:d6:a8:8f:cf:63:56:e8:a7:99:36:42:
48:c6:76:ec:ae:c4:32:42:c9:f9:84:c1:10:e9:d0:5d:31:ca:
70:23:aa:25:90:a4:e9:d9:0f:de:17:5f:98:43:de:29:1c:7d:
17:59:8c:bf:75:28:d0:78:eb:34:c6:3b:8f:44:27:c3:00:77:
7c:36:46:f7:92:3c:36:5d:24:a6:39:44:68:6a:97:6d:93:57:
44:a5:00:58:64:70:f7:64:56:ab:ef:89:a7:d4:eb:0c:d3:f8:
1b:6b:17:2b:3a:1b:79:dc:8a:4f:5f:b6:92:90:b2:29:c3:70:
41:56:88:58:d1:d0:de:4d:a4:ea:4f:cb:cd:ec:86:6d:5f:a1:
ca:88:4a:9e:be:52:39:df:1d:d5:94:2b:12:9c:6e:bc:d1:9a:
ef:fc:58:7c:62:18:46:75:ce:72:c9:77:c5:af:f7:b5:14:73:
4c:d5:dc:96:7d:a8:85:c2:bd:96:28:fe:0d:09:fa:78:84:fe:
05:cc:cb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:02 2026 by rpki-client