Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.mft
File: 4s-SfSexasnN2X9RygeN9H2NjpQ.mft (raw, json)
Hash identifier: H12CQTc4fjAswDhaFyCeOa4DGT9hrEP8yVVQP4l5M7w=
Subject key identifier: 7C:6F:77:60:BF:AF:AF:A0:E5:41:3B:C1:A5:B3:D2:66:EB:19:D8:46
Authority key identifier: E2:CF:92:7D:27:B1:6A:C9:CD:D9:7F:51:CA:07:8D:F4:7D:8D:8E:94
Certificate issuer: /CN=e2cf927d27b16ac9cdd97f51ca078df47d8d8e94
Certificate serial: 01A0D0B6E1F32E6874F572EC4A0D704A0D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4s-SfSexasnN2X9RygeN9H2NjpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.mft
Manifest number: 0152
Signing time: Thu 24 Sep 2026 00:00:41 +0000
Manifest this update: Thu 24 Sep 2026 00:00:41 +0000
Manifest next update: Fri 25 Sep 2026 00:00:41 +0000
Files and hashes: 1: 4s-SfSexasnN2X9RygeN9H2NjpQ.crl (hash: LusckeaSCOD6sh7wqPz48gVH3UJa4Y2yJTCFtHL+aD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4s-SfSexasnN2X9RygeN9H2NjpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:e1:f3:2e:68:74:f5:72:ec:4a:0d:70:4a:0d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2cf927d27b16ac9cdd97f51ca078df47d8d8e94
Validity
Not Before: Sep 24 00:00:41 2026 GMT
Not After : Sep 25 00:00:41 2026 GMT
Subject: CN=7c6f7760bfafafa0e5413bc1a5b3d266eb19d846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:94:4d:80:00:be:84:f5:03:69:4f:65:26:
3d:2b:08:57:4b:31:df:f8:62:4c:fc:55:ed:35:dc:
09:29:e4:b0:46:aa:fc:13:12:97:c1:18:7c:94:6e:
85:5a:1b:c2:14:6e:eb:c9:b5:48:cf:e6:29:f0:3a:
8e:40:ce:4a:a9:60:5c:dd:87:e8:94:d7:2f:7b:1b:
6a:88:6a:f8:59:07:c9:36:79:a6:e9:24:68:31:7b:
c3:b3:b9:ef:b4:86:b3:6c:8e:02:88:a4:10:5d:27:
36:a3:26:55:58:3f:5e:5e:47:89:05:66:05:ef:3c:
e6:f1:78:dc:cf:f9:c6:fd:1c:85:be:5e:5c:26:da:
cf:5a:d6:03:d8:f5:cc:00:98:c0:80:5c:5c:d6:10:
ff:a3:77:34:ef:88:38:cb:dd:2d:7f:39:3c:a2:12:
40:e2:a7:0e:1e:87:66:2e:47:f9:06:b7:65:dd:6b:
06:7a:a6:72:91:8d:88:ce:47:4a:ca:16:94:c1:22:
6e:8c:f3:82:b8:3d:56:e3:60:86:a4:80:de:ed:16:
c7:af:68:dc:e0:dc:a4:bc:0c:f3:f6:a3:69:46:fe:
d8:c0:bf:1b:ad:d1:52:6d:56:24:2a:3b:f8:50:5f:
70:78:dd:ed:d3:42:c2:28:51:69:78:5b:8e:97:15:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6F:77:60:BF:AF:AF:A0:E5:41:3B:C1:A5:B3:D2:66:EB:19:D8:46
X509v3 Authority Key Identifier:
keyid:E2:CF:92:7D:27:B1:6A:C9:CD:D9:7F:51:CA:07:8D:F4:7D:8D:8E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4s-SfSexasnN2X9RygeN9H2NjpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a613c5-e599-429c-b850-032c27bc97b8/1/4s-SfSexasnN2X9RygeN9H2NjpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:90:24:0a:39:fb:ba:c3:3b:60:05:5d:af:5f:5b:c2:2d:95:
98:0d:59:ee:98:7a:d1:4f:85:e5:f1:38:91:8d:79:45:90:81:
26:d8:a2:e4:eb:ce:d5:5a:40:fb:f9:65:7e:11:df:ff:75:ab:
09:7d:8e:fd:03:80:9e:53:20:02:b6:a1:5a:32:28:ad:b0:a4:
6d:f7:fd:89:80:b6:2b:b5:20:f7:3e:46:58:0d:cb:21:1f:4f:
d8:44:28:65:2d:09:11:9e:b9:61:ab:68:cb:78:ee:18:f6:5a:
16:cb:be:ac:30:ce:7a:28:6f:fc:e5:e7:86:52:da:eb:c2:81:
e0:1e:9a:e2:c9:89:10:48:be:1f:c5:54:8c:71:d7:61:e2:05:
bc:e9:bf:9a:36:e0:b6:1f:4a:5e:39:75:fb:03:b9:6b:33:3a:
4b:5f:ea:f3:a2:1f:19:73:ee:d9:26:0c:14:3b:cb:ae:5b:8b:
98:14:90:de:d9:ab:12:f7:dd:3d:8e:38:82:16:32:ae:e0:b7:
ee:1b:78:69:a9:4e:7f:3a:7d:6f:a6:8c:ec:b7:e5:f1:cc:3d:
c3:76:72:ee:d8:16:cf:ce:b3:7e:62:f9:02:28:42:2e:af:8c:
99:ed:39:65:96:22:37:53:53:6f:7e:b3:a5:ed:ee:aa:0d:d8:
0a:aa:76:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQtuHzLmh09XLsSg1wSg0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyY2Y5MjdkMjdiMTZhYzljZGQ5N2Y1MWNhMDc4ZGY0N2Q4
ZDhlOTQwHhcNMjYwOTI0MDAwMDQxWhcNMjYwOTI1MDAwMDQxWjAzMTEwLwYDVQQD
Eyg3YzZmNzc2MGJmYWZhZmEwZTU0MTNiYzFhNWIzZDI2NmViMTlkODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PqUTYAAvoT1A2lPZSY9KwhXSzHf
+GJM/FXtNdwJKeSwRqr8ExKXwRh8lG6FWhvCFG7rybVIz+Yp8DqOQM5KqWBc3Yfo
lNcvextqiGr4WQfJNnmm6SRoMXvDs7nvtIazbI4CiKQQXSc2oyZVWD9eXkeJBWYF
7zzm8Xjcz/nG/RyFvl5cJtrPWtYD2PXMAJjAgFxc1hD/o3c074g4y90tfzk8ohJA
4qcOHodmLkf5Brdl3WsGeqZykY2IzkdKyhaUwSJujPOCuD1W42CGpIDe7RbHr2jc
4NykvAzz9qNpRv7YwL8brdFSbVYkKjv4UF9weN3t00LCKFFpeFuOlxV5DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxvd2C/r6+g5UE7waWz0mbrGdhGMB8GA1UdIwQY
MBaAFOLPkn0nsWrJzdl/UcoHjfR9jY6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHMtU2ZTZXhhc25OMlg5UnlnZU45SDJOanBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNjEzYzUtZTU5OS00MjljLWI4NTAt
MDMyYzI3YmM5N2I4LzEvNHMtU2ZTZXhhc25OMlg5UnlnZU45SDJOanBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9hNjEzYzUtZTU5OS00MjljLWI4NTAtMDMyYzI3YmM5N2I4
LzEvNHMtU2ZTZXhhc25OMlg5UnlnZU45SDJOanBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpAkCjn7
usM7YAVdr19bwi2VmA1Z7ph60U+F5fE4kY15RZCBJtii5OvO1VpA+/llfhHf/3Wr
CX2O/QOAnlMgArahWjIorbCkbff9iYC2K7Ug9z5GWA3LIR9P2EQoZS0JEZ65Yato
y3juGPZaFsu+rDDOeihv/OXnhlLa68KB4B6a4smJEEi+H8VUjHHXYeIFvOm/mjbg
th9KXjl1+wO5azM6S1/q86IfGXPu2SYMFDvLrluLmBSQ3tmrEvfdPY44ghYyruC3
7ht4aalOfzp9b6aM7Lfl8cw9w3Zy7tgWz86zfmL5AihCLq+Mme05ZZYiN1NTb36z
pe3uqg3YCqp25Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:08:26 2026 by rpki-client