Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: 7+M4dwjRDgIfIyShoei7PJ+kGSve68Y/R8A2zWcDiEQ=
Subject key identifier: 89:83:03:9A:1C:96:C9:1E:C1:8C:D7:16:FB:19:70:67:E7:52:31:CE
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 019F90C7B66A89D1623638E51A1D3CC81430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 21:00:34 +0000
Manifest this update: Thu 23 Jul 2026 21:00:34 +0000
Manifest next update: Fri 24 Jul 2026 21:00:34 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: JO3pKbBE8/M0JlTe2QtETN94HBf+Xqi9zJQobFwj5ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:b6:6a:89:d1:62:36:38:e5:1a:1d:3c:c8:14:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Jul 23 21:00:34 2026 GMT
Not After : Jul 24 21:00:34 2026 GMT
Subject: CN=8983039a1c96c91ec18cd716fb197067e75231ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b6:43:99:88:1c:5e:de:b3:8d:48:0d:f6:b4:
d2:0e:90:46:07:63:c0:1a:9d:d0:4e:ec:26:22:9d:
52:08:44:09:56:c4:4b:ab:44:a2:7d:ea:7c:ac:a0:
f0:2e:78:0b:da:2f:a2:2d:31:4e:19:69:e4:40:93:
2c:30:bc:89:96:36:3b:fb:7c:5a:7a:7e:4b:dc:b5:
ed:cd:19:53:6f:6b:0a:80:74:5f:74:90:8b:03:a7:
2d:75:9a:10:5b:93:ef:a7:e0:55:22:51:36:cb:62:
1d:e8:8f:c9:d9:b8:47:60:60:16:71:51:cb:89:18:
42:38:a4:58:96:b0:b7:5f:d1:05:66:87:2c:7f:3d:
83:d3:97:50:7b:ad:ee:79:6e:0b:1a:80:37:52:a3:
8b:e1:ad:2a:17:ae:a3:23:c9:ee:af:91:91:31:c1:
a2:a4:2d:00:02:16:f7:11:37:5d:34:96:b4:48:01:
5d:db:71:4a:bd:e3:c1:7f:95:5c:9f:21:b7:55:4c:
f1:7f:ac:b8:42:68:f6:89:72:2f:37:4b:f4:1c:d2:
cb:b3:53:44:a2:f0:ac:3c:fe:b4:44:99:78:7c:11:
1a:01:8d:b3:52:e1:1a:99:e7:a3:24:24:7b:7e:53:
6a:94:69:82:93:7b:b5:02:ad:cf:68:50:0a:a6:28:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:83:03:9A:1C:96:C9:1E:C1:8C:D7:16:FB:19:70:67:E7:52:31:CE
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7c:8f:94:70:d4:f4:19:d8:e8:ab:53:9c:73:a8:60:73:1a:
67:bd:07:e4:91:f8:13:92:e6:55:b6:39:8a:b9:f3:72:58:7a:
88:58:28:52:eb:23:95:d9:6a:3a:0e:2c:03:e0:12:54:e0:70:
24:0b:49:5e:b6:b9:55:21:ed:a8:17:99:65:80:4f:b4:2c:f7:
65:32:18:5a:51:c1:76:95:15:41:12:a3:f3:e3:52:2e:72:b8:
d2:13:4b:81:e6:fb:ea:d7:87:8c:97:9d:41:ad:5b:a0:1e:f2:
21:3d:1d:4d:1e:4f:e0:bc:e0:c0:d1:b3:08:fb:96:9e:58:53:
29:79:d9:1b:3b:a1:10:8d:f5:65:aa:e8:e5:be:67:4d:e0:bc:
e5:76:0b:09:53:74:2d:9b:9b:a0:01:be:8d:51:80:c6:61:12:
18:fd:0a:2f:6a:91:7f:10:b9:26:a2:6d:b5:d4:6a:91:20:b4:
cf:18:25:fe:b2:ba:ee:b3:61:4a:ef:32:a6:d6:82:6b:29:81:
77:f5:a5:58:21:b7:5f:7a:b8:fe:d1:7c:43:2f:38:1d:35:af:
a4:32:06:80:f3:90:35:9c:c5:19:5a:6e:49:2e:67:74:2a:df:
a2:21:17:78:43:38:17:87:1a:8e:af:ad:81:46:25:60:7b:df:
2b:4f:44:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:06:37 2026 by rpki-client