Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier: 0wfu2rtaAfzeebsn/AIbgBKBVCr+KMo0jvGbwh8zl8I=
Subject key identifier: D0:8C:E9:FD:B0:30:AF:64:8E:91:68:E2:6E:BD:AA:03:15:CE:13:9E
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial: 019F90FF0699A44709227C9F7158A34AF805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 22:01:00 +0000
Manifest this update: Thu 23 Jul 2026 22:01:00 +0000
Manifest next update: Fri 24 Jul 2026 22:01:00 +0000
Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: bjc1LsojSKn7V5Qlv/A31ZUfTi4cRoVqd1+w1nBFVeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:06:99:a4:47:09:22:7c:9f:71:58:a3:4a:f8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Validity
Not Before: Jul 23 22:01:00 2026 GMT
Not After : Jul 24 22:01:00 2026 GMT
Subject: CN=d08ce9fdb030af648e9168e26ebdaa0315ce139e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f0:2d:db:c1:df:fc:71:b6:77:58:8d:6b:46:
2b:79:aa:0b:b0:e4:6b:b6:e0:b0:96:e1:03:9a:91:
a6:7a:ac:2a:76:62:09:ff:ea:27:19:0d:22:8d:77:
d5:0c:27:0e:05:79:35:dc:78:1d:ef:6f:d4:69:46:
6d:56:83:ef:3a:6f:0e:c5:e6:a9:b6:44:42:98:e0:
57:5e:e7:4a:46:21:b9:df:97:57:d7:01:61:21:cd:
bf:7e:d5:f6:e0:21:cd:39:05:fd:90:be:a7:3a:76:
74:85:fb:a4:5c:5e:ab:f7:96:82:42:04:d1:33:09:
0c:28:4a:69:8c:86:49:9e:5c:83:4c:28:4a:68:32:
b9:53:cd:13:3c:c7:48:0b:68:5b:e1:3e:13:72:4d:
7e:07:6b:9e:00:62:f0:49:4c:de:c0:b4:f4:34:e0:
9b:4d:ec:ac:ae:b3:d7:12:3a:2e:cc:81:81:b2:31:
64:d3:94:0a:bd:90:a5:17:d2:07:4b:aa:b1:8a:0a:
e2:fd:4c:43:01:e5:84:c1:a3:1a:25:71:67:54:13:
8e:9d:b1:72:75:45:af:2b:9e:7b:bf:ef:8a:d9:60:
e5:ed:d3:70:cf:19:71:86:21:2c:35:e5:4f:fd:96:
e7:bf:65:5c:86:6a:35:94:23:34:7e:72:80:bb:b5:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8C:E9:FD:B0:30:AF:64:8E:91:68:E2:6E:BD:AA:03:15:CE:13:9E
X509v3 Authority Key Identifier:
keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:85:e5:7d:e5:25:f3:f3:37:ad:26:62:66:cb:7c:0d:13:e7:
4b:d5:d3:65:67:18:d5:42:c4:1e:18:45:a3:71:de:6b:72:3c:
8a:77:70:72:e4:c4:05:29:6b:5d:dc:2f:22:fd:87:78:78:e0:
6c:28:6f:b9:f4:64:b3:b9:c5:b7:99:58:a5:4b:64:86:7a:41:
93:93:7a:35:df:6d:7a:30:e4:a2:a9:a0:5d:36:96:98:a9:ca:
8a:d2:d6:31:c6:53:7f:59:c2:47:51:96:08:79:0e:ce:57:cb:
1b:91:aa:27:50:82:a1:d1:cf:7c:a5:ee:30:66:65:9d:4f:22:
85:95:4f:76:23:d5:59:39:3d:a2:15:4c:4a:a3:44:05:db:c6:
16:4f:53:cc:58:db:94:fd:4f:ce:78:a2:31:71:63:a3:d6:5b:
b1:7e:50:0e:21:8c:fa:d7:4f:ef:86:ee:83:f4:d2:79:5e:59:
fb:17:9d:2a:c4:08:89:c6:c7:b5:1f:37:6b:2d:a0:7a:77:75:
4d:5d:b6:07:8e:26:4c:56:08:57:60:95:de:8c:51:7a:87:25:
fb:54:1b:19:8a:73:2d:5e:71:27:ed:9c:40:35:9e:32:cb:47:
6e:66:ac:01:f5:70:de:07:af:46:2b:01:92:d5:c7:c9:40:96:
c5:b4:b2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:49 2026 by rpki-client