Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
File: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft (raw, json)
Hash identifier: RFb4zcrveQ02XBz/RiXIisQ7R71ekVqlQ/682YKrHBw=
Subject key identifier: C1:66:6B:B4:D3:58:AA:05:FB:1B:C6:22:72:66:67:F7:39:39:73:0C
Authority key identifier: E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
Certificate issuer: /CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Certificate serial: 019F916DC74F271368330CDE6CE1679A9F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
Manifest number: 1147
Signing time: Fri 24 Jul 2026 00:01:58 +0000
Manifest this update: Fri 24 Jul 2026 00:01:58 +0000
Manifest next update: Sat 25 Jul 2026 00:01:58 +0000
Files and hashes: 1: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl (hash: jZK3fx1zp6as7P0gHcopbWzcRcqum4REcdIa13E8en4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:c7:4f:27:13:68:33:0c:de:6c:e1:67:9a:9f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Validity
Not Before: Jul 24 00:01:58 2026 GMT
Not After : Jul 25 00:01:58 2026 GMT
Subject: CN=c1666bb4d358aa05fb1bc622726667f73939730c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:2e:96:7d:eb:5f:42:52:09:e0:6b:ac:53:
69:99:fb:6a:67:47:70:e4:b6:17:1a:21:69:ad:2d:
64:9a:c9:ae:73:c7:a6:0f:b2:fe:ea:9e:ff:aa:c2:
17:c3:eb:ed:42:ee:5d:8c:1b:1d:61:14:2f:85:ed:
07:93:6f:a3:d2:c8:2b:ce:36:3b:14:16:e0:a4:0f:
62:ce:4c:a5:d3:86:1f:de:84:56:79:1e:a6:70:8a:
1a:69:9c:f9:3c:bb:76:6a:6c:0b:4d:27:1f:cf:1f:
fc:ef:57:eb:73:d7:38:4a:ea:35:54:98:b7:26:77:
00:9c:7a:5c:cc:82:45:b2:93:30:c2:fc:9e:8e:b9:
00:c9:b7:0d:2a:d9:96:4e:38:ed:b2:a1:63:37:28:
c9:9b:e0:2f:a3:01:3f:6a:07:7d:2b:3f:a2:87:08:
3c:73:03:39:a3:05:df:ff:4e:de:72:1e:a4:fa:c7:
f6:7c:d9:ee:4e:74:f8:6e:28:53:2b:98:74:ab:24:
62:1b:06:fa:80:77:46:35:c2:af:eb:60:6b:51:42:
be:35:97:1b:06:67:94:a0:98:0c:9f:ae:b5:b2:ac:
d5:9a:c6:95:11:b1:25:d8:d1:54:da:6f:36:89:20:
98:8b:c6:4e:fe:96:eb:84:e7:a1:ec:a3:40:8c:e0:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:66:6B:B4:D3:58:AA:05:FB:1B:C6:22:72:66:67:F7:39:39:73:0C
X509v3 Authority Key Identifier:
keyid:E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3b:62:40:5e:b0:98:c7:a5:8d:57:59:45:14:d2:60:a3:77:
6c:05:8d:e3:ed:ae:84:3e:94:95:db:d6:cc:28:5a:9d:f9:93:
b4:86:bd:b7:eb:86:af:51:70:c6:71:55:18:61:d6:a2:af:38:
a8:8f:1b:c9:60:f8:85:5b:c6:7f:1d:ae:f4:05:85:60:9a:ee:
97:12:7b:5a:26:c7:9c:cb:ef:32:47:ee:a7:12:c2:57:55:fe:
78:11:d3:af:f4:a8:80:10:dd:5f:4a:7b:ae:da:da:9f:81:ec:
80:fc:4a:c1:e6:03:d9:69:ba:94:dd:0c:89:b9:43:b1:7f:01:
ba:8d:1c:2b:66:a6:44:86:b7:b1:ad:ce:af:ed:00:0a:a4:78:
55:bc:c8:9f:36:2c:0f:09:e4:29:c5:04:bb:90:2f:2a:46:68:
99:4f:ed:92:05:bc:43:e1:80:cf:cc:8c:d1:72:4e:36:c7:3a:
a6:da:61:a5:87:17:e1:d8:a8:c7:2b:e9:29:ef:2c:1c:46:e2:
ab:a5:90:92:46:40:ae:fa:72:95:52:bc:27:4f:18:46:b4:74:
e8:ad:59:44:b9:c6:da:45:5e:69:ef:a3:3e:15:b0:aa:5b:51:
dd:97:a9:b2:0e:2e:f1:31:40:4d:91:eb:2e:60:9f:3d:fa:6c:
bb:39:e2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:39:03 2026 by rpki-client