Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
File: elJNrL4CqVkxyh1u4ps8iVek7L4.mft (raw, json)
Hash identifier: qfNgAN58w6Y+Q3t/dbB5faZCFTri+pHygHb6YbU2x3k=
Subject key identifier: 4F:8A:4C:08:D2:3C:65:6C:81:92:3A:2D:4F:CC:2D:FB:16:DC:58:35
Authority key identifier: 7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
Certificate issuer: /CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Certificate serial: 019D2704DF38DE3434DD3E63D11F511570FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
Manifest number: 0695
Signing time: Wed 25 Mar 2026 22:02:03 +0000
Manifest this update: Wed 25 Mar 2026 22:02:03 +0000
Manifest next update: Thu 26 Mar 2026 22:02:03 +0000
Files and hashes: 1: elJNrL4CqVkxyh1u4ps8iVek7L4.crl (hash: 0NeGLEwDWxxMRhWk98ZS6Qy3JS8QS85YwY8YGZuevlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:df:38:de:34:34:dd:3e:63:d1:1f:51:15:70:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Validity
Not Before: Mar 25 22:02:03 2026 GMT
Not After : Mar 26 22:02:03 2026 GMT
Subject: CN=4f8a4c08d23c656c81923a2d4fcc2dfb16dc5835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:f7:ba:6a:8a:ab:40:66:a5:11:dd:6d:b5:
6d:7b:ab:9b:08:7f:dc:c7:c9:9d:67:16:7c:c7:db:
f8:5a:7b:c9:53:ce:59:75:32:b5:fa:4e:13:34:d6:
51:3d:11:9e:40:93:c8:ca:8b:6c:7e:8e:f0:70:04:
db:84:f4:ee:2c:55:da:f2:42:cd:dd:f7:ba:a2:25:
a1:d0:bc:a0:a3:14:2f:64:a4:e1:25:84:67:19:ee:
54:a4:30:25:2e:ab:16:4c:26:ec:71:19:d1:ed:b9:
ea:03:4c:49:57:a9:2f:df:83:01:4c:1c:13:62:5f:
c2:fb:46:c0:48:21:65:2e:79:21:db:47:bf:62:f0:
19:2c:29:bf:89:ee:83:7f:ce:de:d4:fb:51:02:31:
da:f7:8c:ec:3f:9a:dd:03:31:fe:be:35:ad:36:b8:
20:95:28:01:d5:79:69:0d:18:cc:60:48:0b:14:55:
8a:6b:d9:e1:6f:fe:5a:0b:bc:ff:16:4b:00:17:5b:
93:4d:f1:a7:b8:27:5a:69:88:f8:c8:10:f0:8d:31:
da:2e:d5:74:68:73:39:45:a1:4d:9f:01:94:72:e8:
3e:cd:a4:2e:cd:26:e6:22:d4:f4:d6:7e:27:49:7b:
ee:cb:b4:10:31:00:a1:6b:80:66:93:1c:3a:0e:c0:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8A:4C:08:D2:3C:65:6C:81:92:3A:2D:4F:CC:2D:FB:16:DC:58:35
X509v3 Authority Key Identifier:
keyid:7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:89:c7:a6:37:6e:c0:4a:f7:eb:66:a3:eb:27:0c:24:96:02:
0d:ad:26:a7:e4:6a:ad:c2:cb:c0:c5:b4:77:89:02:ee:20:fe:
df:75:6d:46:d3:73:a1:dc:d3:3c:ed:66:07:62:a9:16:e3:23:
6a:1e:37:8b:12:da:a9:67:fd:cc:36:b8:b8:13:af:99:e9:04:
7c:ec:e0:5f:d7:a0:b0:31:96:19:1b:db:83:3a:2e:6a:15:3d:
21:a0:77:db:76:22:39:79:4d:a2:b0:db:60:f2:fb:d2:2c:36:
a1:8f:46:65:13:ce:f3:15:1a:c5:1c:a8:ef:cc:9e:8d:f1:60:
e4:cf:05:a4:4f:43:e2:7b:bc:ab:7b:f2:5a:d3:ab:6d:8d:4a:
db:d5:6b:c6:06:fd:a4:bf:9a:96:ef:c1:18:0d:06:cc:c5:7b:
4f:05:6b:94:f7:0c:23:31:1c:b0:0b:eb:39:e2:ae:12:3d:79:
33:74:44:0a:37:05:2e:38:3d:48:95:87:0e:7d:b5:a7:d3:b1:
c5:d9:40:d0:88:f5:e8:7e:80:fc:6e:15:9d:2c:a8:0f:d5:75:
39:55:c7:a9:b8:76:de:c5:17:7d:f3:c9:43:90:7a:e3:46:26:
fb:d4:6a:36:1d:a6:53:42:33:fd:1f:53:08:99:70:ee:bd:6c:
76:88:d4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:04 2026 by rpki-client