
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: 0GhopWNkdR/P11oZY85azv7dIFJlz5NimsY3q0U8vk0=
Subject key identifier: 1B:9E:C9:6C:83:89:2D:3F:BB:74:D8:D4:99:20:F9:A1:73:49:3F:FF
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 01A10F5F092C77075EAC1E962B9CA6EAD17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 195E
Signing time: Tue 06 Oct 2026 04:00:48 +0000
Manifest this update: Tue 06 Oct 2026 04:00:48 +0000
Manifest next update: Wed 07 Oct 2026 04:00:48 +0000
Files and hashes: 1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: 69qW5V+TMwqx+BCbQMHgVoZz7PHD/F6E6ixPtyh+5rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:5f:09:2c:77:07:5e:ac:1e:96:2b:9c:a6:ea:d1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Oct 6 04:00:48 2026 GMT
Not After : Oct 7 04:00:48 2026 GMT
Subject: CN=1b9ec96c83892d3fbb74d8d49920f9a173493fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:15:d0:cc:6e:a8:0a:5b:dc:e5:63:b4:30:
2d:57:6b:aa:9a:2a:e3:9b:64:db:12:2f:38:f4:bf:
cb:3c:0c:d4:38:3f:44:13:b1:60:d6:8b:f3:c3:93:
6a:39:a4:30:ce:59:51:4b:7f:db:f8:0a:84:0a:ca:
67:43:2c:79:34:4f:77:d9:c3:89:65:45:d0:26:1e:
2c:30:b3:3c:f8:a9:2f:14:f3:2a:ff:e1:7a:b2:61:
0b:70:39:e7:1e:68:29:6a:b8:c6:f0:ac:ba:4c:c0:
59:3e:d3:20:c5:dd:d3:1e:4d:45:92:f8:1f:bb:ba:
99:a5:e6:8a:fa:9e:c0:d8:46:54:bf:00:f8:4d:ec:
7e:c8:87:8b:92:dd:12:89:7d:74:c1:5c:26:64:60:
71:4e:19:43:52:10:42:9b:aa:a4:e6:69:62:2b:8f:
71:3a:c0:95:52:73:7a:d4:92:a6:cd:14:75:7f:1f:
ea:8c:4a:26:c9:4b:37:bc:1d:bb:67:a7:4b:ce:77:
ee:6b:10:92:65:0f:23:0c:8a:af:57:4e:91:cf:72:
f1:66:85:ed:47:4a:a7:17:b6:51:41:32:7e:80:11:
13:ac:cb:77:e0:f7:b7:af:9c:c5:4c:f3:6a:a0:c6:
39:eb:9f:65:22:78:d3:82:16:31:ee:7b:b9:41:3e:
ef:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9E:C9:6C:83:89:2D:3F:BB:74:D8:D4:99:20:F9:A1:73:49:3F:FF
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cc:6a:9d:43:d7:a2:8b:1f:f3:a0:aa:b6:01:e0:5c:55:ec:
bf:ed:7f:6d:1f:70:78:cf:6f:fb:e8:3e:ee:e2:43:79:eb:a5:
ce:99:58:8c:1c:17:0a:e7:0e:8d:56:c2:6e:82:8d:02:c2:79:
85:1b:66:af:11:36:31:52:7e:ff:40:98:f8:b5:bf:88:00:15:
c7:4e:5c:87:da:82:b4:8f:29:c0:c8:43:74:b8:19:67:d1:c4:
45:7f:d0:29:95:ee:81:0f:b8:c0:ad:25:0d:3a:49:eb:70:d5:
6c:70:5d:c9:6c:2d:bc:c8:52:6f:5a:48:43:0e:18:2d:fa:72:
df:cc:6a:cb:19:49:ff:b3:56:08:19:ab:34:1d:3c:3f:00:25:
70:a3:82:4e:59:34:df:b9:99:68:50:ee:0b:db:b2:67:65:51:
d3:01:c1:dd:e8:dd:1e:9b:10:d5:d3:1f:1a:52:8d:4a:6c:42:
c1:25:d5:b2:93:87:21:d5:f1:fc:8d:51:0c:c9:59:ef:ef:8b:
cd:37:d3:fd:22:2d:a2:a9:fe:f0:69:16:19:08:79:58:d6:6a:
db:4f:53:c8:be:59:68:43:b3:3a:da:e2:e9:dc:e5:52:d4:f3:
41:9b:2d:8f:6f:70:0d:c6:13:8c:28:d6:26:81:86:2b:88:75:
b0:c0:ec:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:56:49 2026 by rpki-client