Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
File: 4sVVsgW63NgpS9MyW5wvvViNIZA.mft (raw, json)
Hash identifier: ax5L9gCeJ2cy9OQVVFBzmzF5csKMSBlq5npk3euXHQw=
Subject key identifier: DA:C6:8D:9B:E1:65:B7:28:25:CB:71:AA:8F:8D:89:D9:52:F3:7B:61
Authority key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
Certificate issuer: /CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Certificate serial: 019D27727B4154D12E0E4CCA16CAFA9D0DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
Manifest number: 1815
Signing time: Thu 26 Mar 2026 00:01:47 +0000
Manifest this update: Thu 26 Mar 2026 00:01:47 +0000
Manifest next update: Fri 27 Mar 2026 00:01:47 +0000
Files and hashes: 1: 4sVVsgW63NgpS9MyW5wvvViNIZA.crl (hash: e5ALX2XLTSoX59JpQbPaFtirmb+kJ41vwwiUzkiYi6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:7b:41:54:d1:2e:0e:4c:ca:16:ca:fa:9d:0d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Validity
Not Before: Mar 26 00:01:47 2026 GMT
Not After : Mar 27 00:01:47 2026 GMT
Subject: CN=dac68d9be165b72825cb71aa8f8d89d952f37b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:bd:7c:fc:94:5c:47:1a:27:13:b2:41:b2:
50:3a:70:89:09:f2:8a:60:37:31:49:86:ac:ea:15:
69:06:d0:d0:f1:10:fd:cc:9f:1a:37:ef:cf:35:e2:
92:c9:b3:2e:ad:2f:33:54:01:1d:9a:23:3d:0f:09:
5d:3c:eb:5e:ab:48:87:cb:53:18:0e:c6:cd:fd:7f:
89:67:04:ac:b4:3b:9e:3e:b8:e7:c4:6c:54:16:64:
f4:96:a4:33:af:04:4e:dd:6c:7d:bf:03:9a:24:28:
a4:ad:22:0e:7d:fc:e5:29:6a:e4:90:d0:c4:ac:df:
c7:f0:8f:1e:b8:78:a0:5c:ab:e4:6e:26:15:1a:f0:
83:73:f7:ab:2a:ab:bd:81:59:79:71:c2:79:c9:5b:
ab:e9:cc:ce:a9:1b:2c:b6:aa:f0:4e:0b:8e:87:ba:
58:5b:38:6d:cb:4f:0a:0f:79:62:37:e9:b2:e3:2e:
82:9d:09:8a:93:92:12:6b:2c:fb:df:4e:38:77:86:
38:06:05:51:ab:07:10:85:d6:b3:b2:ea:1a:69:d5:
c5:93:1f:61:cf:d4:dd:76:0e:01:59:7c:2d:b7:cb:
c7:2e:56:a6:78:62:b8:6e:58:36:95:65:da:54:34:
27:57:e8:48:2a:90:ac:47:e2:26:e0:6a:da:78:68:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C6:8D:9B:E1:65:B7:28:25:CB:71:AA:8F:8D:89:D9:52:F3:7B:61
X509v3 Authority Key Identifier:
keyid:E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:71:6a:e4:67:9d:03:21:68:2f:f8:99:a9:8c:34:2d:fa:e0:
c0:43:97:50:f3:49:d6:3b:0c:d1:92:05:a1:2e:28:cb:95:7e:
3a:03:30:2c:77:58:c0:1d:0c:38:32:96:55:1c:b3:e5:2a:60:
8f:64:d2:65:e6:df:64:2e:fb:55:69:ca:e9:df:77:75:1b:08:
3a:f6:44:59:73:45:59:6b:b9:69:b2:96:05:98:32:6b:c1:dc:
e4:98:a2:40:b6:d4:01:8e:8e:35:8a:9c:77:ab:2e:35:c2:77:
2d:c8:d9:3c:6c:ce:28:7e:e4:65:d2:4b:68:49:10:63:17:44:
6a:3f:7b:ce:bf:a9:25:3a:14:6a:cf:cd:6a:b9:bc:3a:60:68:
5d:88:f2:a1:de:f8:69:b3:22:85:ec:47:25:bb:0e:b0:80:b7:
2e:68:ed:6a:f6:15:2a:51:97:12:cb:b4:ea:d9:2e:24:34:b9:
1c:bb:49:6a:e2:dc:d7:36:0b:fe:7d:0a:df:84:f6:c6:e7:af:
17:af:69:61:7d:71:21:c6:f8:74:70:3c:99:90:93:04:e7:6f:
2c:d0:7d:db:0a:e2:92:8f:68:c5:18:f9:ee:d8:28:34:5b:e8:
04:ed:af:74:0c:ef:37:21:98:7c:73:56:ff:14:66:9c:71:a9:
c1:dd:cd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:56 2026 by rpki-client