Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.mft
File: 4s-SfSexasnN2X9RygeN9H2NjpQ.mft (raw, json)
Hash identifier: z46eRvcnQEi9lbxkaHB3s5kMlH6rPigaX4mY0nTqXDU=
Subject key identifier: E7:AA:89:A7:6B:A5:27:EC:55:E4:BE:DA:C3:18:B1:86:DB:BC:A8:DD
Authority key identifier: E2:CF:92:7D:27:B1:6A:C9:CD:D9:7F:51:CA:07:8D:F4:7D:8D:8E:94
Certificate issuer: /CN=e2cf927d27b16ac9cdd97f51ca078df47d8d8e94
Certificate serial: 019F90230B45FF99D47B3874D157D3D4F274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4s-SfSexasnN2X9RygeN9H2NjpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.mft
Manifest number: AC
Signing time: Thu 23 Jul 2026 18:00:43 +0000
Manifest this update: Thu 23 Jul 2026 18:00:43 +0000
Manifest next update: Fri 24 Jul 2026 18:00:43 +0000
Files and hashes: 1: 4s-SfSexasnN2X9RygeN9H2NjpQ.crl (hash: YlkTgyNONcGwJIlLJ8PA+Gt1+EJUKavW3o1d4ycId2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4s-SfSexasnN2X9RygeN9H2NjpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:0b:45:ff:99:d4:7b:38:74:d1:57:d3:d4:f2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2cf927d27b16ac9cdd97f51ca078df47d8d8e94
Validity
Not Before: Jul 23 18:00:43 2026 GMT
Not After : Jul 24 18:00:43 2026 GMT
Subject: CN=e7aa89a76ba527ec55e4bedac318b186dbbca8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:08:85:f3:ca:06:44:a9:86:3f:07:4e:e6:
7a:fc:be:c9:93:21:85:c6:9c:63:36:ad:9d:ab:68:
65:34:26:2b:da:0d:5a:7c:a3:3e:22:ae:a9:79:97:
26:44:cf:78:76:3f:a8:a2:0f:75:4f:fa:ae:04:be:
1d:1f:01:4c:50:8e:96:39:bc:d4:62:cf:45:64:0f:
56:36:3a:56:dd:8d:d7:ad:a3:37:31:6a:d4:98:0e:
54:5b:d2:fe:0a:b6:02:b8:93:38:1a:c3:5b:3d:fb:
ba:73:8c:a8:e0:3d:aa:76:29:03:d8:12:a5:c2:41:
c4:3f:74:85:66:df:1e:2b:8a:73:b2:78:07:5b:23:
e6:2d:8c:5e:ce:c1:5c:3a:f2:6d:68:82:28:ee:3a:
56:5a:1b:02:f3:c7:8c:ff:a2:11:77:b6:db:e5:fd:
e1:92:2f:d4:35:f6:1c:7a:15:d7:14:a6:11:7b:b0:
3b:f5:04:63:f2:d2:67:0e:ac:1e:e5:5c:29:5f:be:
b6:ca:05:1f:2d:2f:a6:53:a0:c2:27:cc:d5:e9:86:
29:cc:45:fb:fd:a9:a5:fb:b4:55:51:0b:80:bb:68:
a3:47:75:f7:b2:f3:bd:65:97:85:db:70:9b:5d:26:
34:75:f4:1e:ce:c5:d8:2c:06:d4:b3:3d:ad:f8:d7:
29:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AA:89:A7:6B:A5:27:EC:55:E4:BE:DA:C3:18:B1:86:DB:BC:A8:DD
X509v3 Authority Key Identifier:
keyid:E2:CF:92:7D:27:B1:6A:C9:CD:D9:7F:51:CA:07:8D:F4:7D:8D:8E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4s-SfSexasnN2X9RygeN9H2NjpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:52:7c:e7:89:8a:cb:60:83:19:18:90:ab:69:1f:dd:19:6b:
8e:b5:de:4b:65:9e:52:bf:fe:d4:2c:65:09:7c:3c:fd:d2:04:
18:4d:5b:46:3e:af:85:34:fc:02:9f:28:78:4e:7a:63:71:ad:
2b:b6:45:a9:ea:94:2a:de:c9:d3:06:53:38:eb:08:68:3c:9d:
92:c8:b1:e7:33:31:c0:f5:0f:32:15:9c:68:bd:50:97:0a:fe:
c3:c6:2a:bf:ce:46:c0:7d:69:9d:01:38:5f:9e:84:aa:66:fb:
ff:41:91:9e:7a:7c:c4:8e:60:a6:12:9c:27:93:39:32:48:23:
b3:94:1a:58:06:5b:e4:7d:35:27:6a:d4:75:d3:35:bb:bf:c3:
cd:5c:32:e2:3c:dc:aa:7d:25:c1:4c:82:ee:a6:0a:e4:eb:f5:
7b:4e:ea:87:f5:e0:db:fa:72:2f:8f:79:fc:dd:98:ac:35:38:
92:06:1b:66:ea:13:0a:53:55:00:05:c7:c6:2a:d8:79:2f:22:
2f:a1:a8:04:78:fb:d9:a8:f0:67:6d:88:a6:42:f9:4f:ee:eb:
65:fb:10:66:09:b1:65:17:23:31:a4:48:58:49:26:22:bf:b4:
ee:ad:d6:3c:52:46:d0:8c:dc:4b:ec:7a:f5:d3:78:a8:2b:86:
5b:c2:86:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:46 2026 by rpki-client