Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier: 7LgHCC3SBB/+7glLeO7M/pGqN46mRjGjxkvRJASLk3Q=
Subject key identifier: 41:81:4E:C3:A5:E7:59:C1:42:61:29:BC:60:97:E2:F9:EB:A9:68:B0
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer: /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial: 019E1C469FF059124E87B412573C11A1ED24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 13:00:50 +0000
Manifest this update: Tue 12 May 2026 13:00:50 +0000
Manifest next update: Wed 13 May 2026 13:00:50 +0000
Files and hashes: 1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: WFb7psf8gm16IeZlfQssTMy3EYTumQq3Wtf+TV8ixV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:9f:f0:59:12:4e:87:b4:12:57:3c:11:a1:ed:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Validity
Not Before: May 12 13:00:50 2026 GMT
Not After : May 13 13:00:50 2026 GMT
Subject: CN=41814ec3a5e759c1426129bc6097e2f9eba968b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:04:20:82:c8:36:76:da:6e:2e:61:6a:72:
ce:88:ca:b8:19:da:28:72:75:04:04:c3:32:6e:e4:
a8:26:10:e5:93:99:88:5e:26:80:6e:71:82:8d:34:
f3:90:8f:33:7e:b4:ed:d5:ee:1a:fd:72:17:97:4a:
83:5b:73:62:da:cf:77:84:c7:52:06:28:1d:d0:3c:
f2:0e:8d:db:22:c3:22:58:52:28:a7:5d:8a:93:fc:
85:a9:b4:34:69:17:dc:08:75:1c:86:69:59:8d:72:
68:62:9f:9e:db:cc:85:20:f0:69:82:23:58:e8:58:
86:ce:57:29:08:a7:e2:7a:9c:d9:4e:6f:10:f1:e1:
fe:8c:09:52:5d:9c:b9:cc:03:ca:fb:77:97:86:8e:
e0:93:04:13:93:cd:35:bf:46:fb:d7:c6:51:6c:66:
98:4a:8c:95:55:ad:1e:cc:c6:58:ae:c6:c1:a1:bd:
2e:a0:14:bf:58:4d:be:15:70:69:5f:41:74:59:4c:
73:49:6c:39:b8:d2:8a:75:b9:10:a8:70:8c:03:c5:
41:c8:b1:6f:71:0b:62:26:c8:f1:53:f7:74:4f:86:
16:f2:cd:35:2a:b7:78:4a:04:89:8c:fe:68:f6:2b:
62:1d:da:35:b4:36:23:c0:ef:44:19:8b:79:df:70:
36:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:81:4E:C3:A5:E7:59:C1:42:61:29:BC:60:97:E2:F9:EB:A9:68:B0
X509v3 Authority Key Identifier:
keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ac:63:c6:39:07:a0:9b:da:36:73:d0:13:cb:59:1e:3b:63:
80:a0:57:2d:8f:95:3a:d2:9d:a3:10:f2:a4:f9:1d:57:4e:e2:
65:eb:44:21:10:3c:48:c1:56:9e:14:1d:89:94:65:47:38:ef:
b7:ab:3e:50:08:1f:94:90:72:4e:ad:65:20:05:5b:04:41:3f:
54:0c:83:e4:b3:93:6c:68:59:f2:40:4f:63:32:07:e7:9c:62:
f7:4c:ca:da:f8:be:92:ac:2e:ff:97:d8:8a:36:ca:f4:fd:54:
92:0d:cc:cf:9d:78:aa:18:82:58:2b:c7:04:d0:bd:16:65:58:
76:1c:ba:72:d1:fe:c0:3b:c5:23:36:ce:03:3a:3f:40:df:00:
0e:ca:13:76:ad:d2:ee:83:eb:3d:46:8f:85:36:ea:a5:d5:a2:
7f:a0:e4:50:a4:99:cb:e7:50:dc:a5:2e:9c:ae:83:11:3f:89:
e1:0f:1a:0c:ab:70:74:f0:7b:8b:e3:6a:65:44:68:ce:b8:c9:
0a:b1:6b:ae:9e:50:6f:2c:1c:9f:7e:19:89:73:56:9a:72:3e:
79:5b:0d:29:83:6a:5e:9d:75:22:cc:6a:29:52:0b:74:6c:64:
00:e0:05:4c:bf:cb:16:06:a3:43:4d:fc:96:3c:42:ed:01:8c:
44:b8:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:51 2026 by rpki-client