Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
File: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft (raw, json)
Hash identifier: VG/IUJ2CFKFZtUflmt0DKDiPJa+mF5IF0NZ9zNyjVPY=
Subject key identifier: 45:3F:CC:DB:45:8C:32:0B:2A:8A:E7:F6:1D:20:53:4A:4D:8B:34:C9
Authority key identifier: E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4
Certificate issuer: /CN=e0b867131100c15de890110063e638a5f02367c4
Certificate serial: 019F8FEBFDC32BFB39727293D1B18320A8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 17:00:35 +0000
Manifest this update: Thu 23 Jul 2026 17:00:35 +0000
Manifest next update: Fri 24 Jul 2026 17:00:35 +0000
Files and hashes: 1: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl (hash: Rj87bAhsqxs3Oi1ouqjE2HZBWIIPimjgKce8HrpMMF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:fd:c3:2b:fb:39:72:72:93:d1:b1:83:20:a8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b867131100c15de890110063e638a5f02367c4
Validity
Not Before: Jul 23 17:00:35 2026 GMT
Not After : Jul 24 17:00:35 2026 GMT
Subject: CN=453fccdb458c320b2a8ae7f61d20534a4d8b34c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8d:12:02:54:1b:fe:11:b9:f9:df:39:9e:7b:
a4:4a:fa:c2:e1:8e:51:49:7e:07:bf:1e:52:8e:dd:
7c:6c:92:64:fd:38:f9:95:08:12:6c:4f:58:fd:ec:
3c:f4:7a:81:c9:c2:e9:b3:9b:7d:64:51:d4:59:f2:
7f:5a:76:21:12:9b:ba:db:2e:4c:5a:3e:ac:47:51:
ea:08:5c:a8:85:53:66:bc:5e:1a:2d:e9:2a:05:38:
58:55:68:35:67:fe:3f:ce:db:df:bc:46:79:78:f5:
15:d2:64:7b:39:0d:b1:23:da:43:6f:96:86:1f:8c:
86:9c:b1:0e:22:55:7c:a6:16:9e:0b:34:45:46:e2:
a1:fc:b4:ad:e6:12:b7:c4:b6:d9:75:2b:82:66:aa:
6e:c8:3e:98:4a:65:ae:65:2f:bb:3b:72:03:77:c1:
94:ef:06:21:9c:5c:a3:b3:71:b2:bb:c8:a9:47:f9:
70:00:a7:15:34:e1:ae:ff:0e:dc:08:8d:07:13:9b:
43:d5:c9:49:c2:93:40:46:62:4f:4e:51:39:19:6c:
77:90:6e:9e:e5:38:43:21:5e:73:38:9a:c2:25:cd:
bd:f2:0e:54:b5:b1:16:12:5d:56:72:ba:6a:76:58:
64:b6:d5:cc:92:f2:2b:34:fc:89:d0:0b:04:da:a8:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3F:CC:DB:45:8C:32:0B:2A:8A:E7:F6:1D:20:53:4A:4D:8B:34:C9
X509v3 Authority Key Identifier:
keyid:E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b0:a9:07:c9:57:fb:00:b5:c6:f2:d1:39:18:c3:0d:ab:00:
4e:bf:e5:2e:17:7f:a3:ca:09:fc:9e:47:a4:d3:8f:60:40:2f:
b1:e0:27:29:9a:0f:34:7b:f6:42:f9:53:2d:82:b5:a8:ee:69:
72:52:4c:13:25:33:21:36:9f:4d:66:d8:c2:19:4d:53:5f:f6:
0e:2e:39:b4:11:e5:fd:5d:e3:15:12:f8:23:ef:53:54:97:35:
96:3b:d8:89:73:20:3b:e1:26:ad:5d:15:ad:08:d3:7a:e3:57:
70:0a:01:e2:8b:82:6f:af:fd:23:53:24:65:c6:50:d7:2a:b1:
a5:45:f5:2c:26:32:6b:c6:05:53:13:25:33:96:ec:15:a0:af:
78:71:9e:e0:73:4b:c9:a8:1a:a3:4f:aa:b9:20:bb:31:78:32:
33:f1:6b:1a:b1:49:ef:74:a9:f3:1d:62:30:37:5b:93:8c:3a:
d6:15:6b:3b:11:d6:5f:d0:9b:a2:79:df:de:e4:29:45:fb:7a:
93:b4:64:ca:24:b8:93:f9:46:ea:18:75:72:66:59:cc:bc:36:
8f:56:e6:3c:70:ee:88:85:dd:7c:26:a9:86:48:90:4b:76:6c:
d0:ce:c0:1d:34:c5:b8:ea:11:32:8f:2a:cf:fc:f2:a9:c5:6b:
4f:e9:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:58:39 2026 by rpki-client