Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier: 4H54M2v9e75XO+e/a8XOgEAeFeXkzqUws36JjoM0IgY=
Subject key identifier: 7D:15:EE:CC:17:7F:9F:EE:2B:DB:00:70:1F:F5:3A:9A:D4:08:1B:96
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial: 019D2704422899B095D0795C8A39B9AD1FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:23 +0000
Manifest this update: Wed 25 Mar 2026 22:01:23 +0000
Manifest next update: Thu 26 Mar 2026 22:01:23 +0000
Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: PoSOr/EJYIKRC+j8rYy+zFXr44dd06YuHCueYUaoXTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:42:28:99:b0:95:d0:79:5c:8a:39:b9:ad:1f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Validity
Not Before: Mar 25 22:01:23 2026 GMT
Not After : Mar 26 22:01:23 2026 GMT
Subject: CN=7d15eecc177f9fee2bdb00701ff53a9ad4081b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:98:77:59:4e:af:38:18:86:f4:32:a6:33:0a:
35:e0:74:11:7b:96:38:8c:65:da:68:75:c1:db:ef:
8b:1f:90:5c:46:5e:b4:1d:96:e3:e3:9b:29:7f:79:
6f:54:aa:82:b4:fd:c2:55:2d:09:66:0d:16:3f:e8:
0b:b7:f3:1c:71:57:10:e1:67:f8:d0:95:f4:06:d3:
c7:1c:fb:53:37:d1:6b:3f:47:f3:b5:56:de:66:af:
a3:ca:dc:b2:ee:50:ca:72:e1:09:0a:13:f3:71:cb:
92:fd:27:12:82:7f:c8:e8:d6:a9:43:bf:6e:31:a8:
6a:2b:46:30:fc:6e:f3:78:d4:01:78:db:82:f8:4a:
fa:08:5a:3f:34:53:dc:45:40:5c:0c:4b:eb:5b:40:
eb:99:70:45:93:11:26:66:4a:b7:41:3a:86:e1:0e:
a3:c2:0c:c7:ca:bd:f6:a0:6e:8b:5b:56:7d:b4:11:
c5:b8:81:59:1a:d4:21:bd:13:58:54:c3:fa:2b:28:
4f:1b:f3:5d:f8:48:72:59:88:18:dc:33:51:61:56:
18:b6:75:9c:6d:4d:8c:e6:d2:f2:f5:5e:5f:bf:50:
37:8d:16:e4:75:79:c0:f2:09:5c:65:c6:6d:75:9e:
c3:1e:59:3d:68:a1:9d:40:2f:9b:aa:30:c9:6d:20:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:15:EE:CC:17:7F:9F:EE:2B:DB:00:70:1F:F5:3A:9A:D4:08:1B:96
X509v3 Authority Key Identifier:
keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:39:ad:b9:d2:3d:6e:0d:7a:c4:21:73:e0:a9:f5:e6:51:f2:
9e:79:dc:b9:35:5f:7c:02:8f:47:4f:43:76:f4:f7:31:ef:77:
f7:84:be:30:cd:36:ea:f1:8a:9e:b4:8a:e9:b2:9b:72:ed:0b:
c7:64:03:cf:13:63:94:13:d2:be:81:64:e7:f5:4f:c9:3e:8f:
22:0f:06:11:67:3c:c8:bf:79:25:70:82:95:57:18:03:68:76:
65:c2:d7:ce:8d:2a:13:4e:40:11:ba:09:0e:9b:6d:4c:6f:15:
49:ba:ba:f2:cd:4d:d8:09:39:68:a2:b8:ea:7f:c8:47:c1:19:
61:d4:35:12:24:7e:5b:b9:4a:49:f9:4b:83:03:48:f4:72:2a:
7e:76:ae:bd:fd:6b:f8:f6:06:f4:59:c4:ea:d1:54:ca:af:32:
ef:51:7a:2e:94:29:36:d6:38:fc:b6:21:d8:ae:37:d7:10:d0:
f6:a4:1e:f6:a6:d4:77:8a:e8:38:40:39:cc:7a:12:48:ba:30:
c7:28:59:ac:e7:8b:63:98:fb:f8:c6:65:6d:db:cd:bb:24:e9:
5f:86:69:50:0d:54:9d:2a:ca:74:db:d6:f0:c0:50:19:fd:fa:
20:e2:49:c6:00:f5:ff:aa:78:e2:4a:ab:87:59:62:4f:52:c3:
25:dc:fb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:42 2026 by rpki-client