Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: y2+UrvWi03HEmwClRrsd4BK0Ozte/GALiJziSCsHJFk=
Subject key identifier: 14:4C:EC:30:FD:64:E3:BA:20:32:B9:C5:68:CB:A0:E2:DC:88:EE:A5
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 019E1C0FFF51AA0935E558B48D2C0771AA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 1901
Signing time: Tue 12 May 2026 12:01:10 +0000
Manifest this update: Tue 12 May 2026 12:01:10 +0000
Manifest next update: Wed 13 May 2026 12:01:10 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: NcRnLGLZxhZDTHIIaXsPIDNl2tLuV2Io/uFpCxkq3mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:ff:51:aa:09:35:e5:58:b4:8d:2c:07:71:aa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: May 12 12:01:10 2026 GMT
Not After : May 13 12:01:10 2026 GMT
Subject: CN=144cec30fd64e3ba2032b9c568cba0e2dc88eea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:bc:99:3a:31:a3:68:51:9d:8c:8e:b9:27:
7a:a5:42:cd:f5:e9:78:d6:6e:42:8b:99:49:e9:c6:
3f:ee:4a:8b:af:1b:e0:ec:5c:f9:32:5b:af:83:cd:
73:f3:90:62:d1:7f:35:e2:25:40:a5:62:c8:79:f0:
48:70:7f:04:62:f0:16:9e:1b:7b:be:8b:d9:b9:bc:
69:e4:c6:f5:20:9b:b6:fa:78:34:30:14:ae:04:25:
56:94:6b:4f:58:31:30:f7:75:ed:e5:0d:fd:74:44:
4b:98:1c:e2:7a:f5:83:d4:fb:a6:9d:ea:85:4e:3a:
5c:ed:da:75:5d:fb:ba:76:27:df:5e:99:c3:1b:94:
43:18:c2:9a:a6:8b:5e:69:4c:35:67:8d:99:69:9b:
ff:b6:a2:78:09:6f:a0:ea:9c:bc:1e:b7:63:b2:6c:
57:88:78:30:41:e8:89:fc:a4:37:27:cb:dd:a9:cd:
dc:41:fc:7a:ea:bb:70:bd:93:92:9b:a6:57:d0:c3:
9b:8a:e4:8f:1e:6b:8f:a6:aa:4e:7e:4b:27:dc:43:
33:e8:27:e3:50:82:d4:22:46:66:a8:d7:9e:6c:b0:
f1:72:c2:84:8e:a8:ee:44:4a:b5:71:1b:60:3d:14:
93:c9:cb:66:27:2d:c6:4f:a4:a4:87:01:39:1a:61:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4C:EC:30:FD:64:E3:BA:20:32:B9:C5:68:CB:A0:E2:DC:88:EE:A5
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6e:2c:f7:69:d9:c5:8b:71:b1:4b:e0:ef:88:b4:0a:a6:4f:
43:c7:d2:dd:3c:22:13:5f:1f:e9:a3:71:90:e1:12:0c:00:72:
69:43:07:7c:13:d2:92:dd:e5:f9:09:5b:3f:17:f1:40:4e:ea:
09:90:21:81:5c:59:46:03:24:66:1f:0e:04:e8:64:07:f1:0c:
02:26:7a:f2:d1:f4:ff:89:d0:41:76:be:98:ef:29:e0:21:cb:
6f:67:d7:bc:f7:f2:8b:9c:be:a2:6d:34:df:d7:df:bb:66:75:
9e:c9:bf:08:47:ad:ab:da:a1:10:20:45:28:03:81:fc:76:bd:
1d:35:cb:cb:62:b2:58:e3:b7:c8:e2:0e:39:47:b5:b2:63:f6:
5e:25:86:d7:d4:55:9c:2c:e2:9c:1a:d7:2f:28:78:01:d8:c0:
1d:e6:47:33:ee:d9:20:85:45:be:dd:dd:78:a7:9e:e1:ce:86:
e1:ea:e2:3d:6e:95:fd:b1:15:3c:5d:c3:41:69:fd:8d:f9:77:
58:82:c0:e3:99:d6:db:1f:22:a0:71:44:a3:b0:db:0e:6f:a8:
3f:55:15:e0:6d:10:12:de:f8:9a:7e:76:d0:01:56:7d:b8:e8:
9f:e7:1b:01:2d:27:bd:a7:e8:ca:52:be:24:6f:d1:85:70:ad:
90:2c:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:55:43 2026 by rpki-client