Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
File: 4sVVsgW63NgpS9MyW5wvvViNIZA.mft (raw, json)
Hash identifier: YQ9xxbW2bhzX6+V0/iKdN/q0vC1dgQCqzlAq427zRG0=
Subject key identifier: 28:C9:3C:D8:01:F2:B9:6E:90:CE:16:40:2A:79:AA:E9:03:23:7A:86
Authority key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
Certificate issuer: /CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Certificate serial: 019F935B965709E4131F1A2FF75AFA8517A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
Manifest number: 1956
Signing time: Fri 24 Jul 2026 09:01:20 +0000
Manifest this update: Fri 24 Jul 2026 09:01:20 +0000
Manifest next update: Sat 25 Jul 2026 09:01:20 +0000
Files and hashes: 1: 4sVVsgW63NgpS9MyW5wvvViNIZA.crl (hash: hukFO4NrlGq5ooGfPM/xzQBJQBNQMdpJx/3mxzMr6z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:96:57:09:e4:13:1f:1a:2f:f7:5a:fa:85:17:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Validity
Not Before: Jul 24 09:01:20 2026 GMT
Not After : Jul 25 09:01:20 2026 GMT
Subject: CN=28c93cd801f2b96e90ce16402a79aae903237a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3b:2b:4a:5b:1a:8f:91:d4:9d:4a:3a:d2:72:
28:86:b7:62:2c:8e:7d:61:66:44:1d:97:4e:48:ba:
74:94:36:28:e4:14:81:03:23:50:f8:8a:48:cf:ce:
9c:b0:dc:46:a1:df:7f:13:1d:72:c7:bd:e8:0d:2a:
a8:22:fb:3a:db:09:8d:d3:33:48:27:13:02:36:26:
22:bf:cb:49:51:3a:fb:08:af:01:2a:7e:63:78:b9:
d7:1d:dc:9d:33:61:51:76:e5:8e:3e:52:26:e7:ec:
63:11:23:6d:1e:8a:87:fd:d6:e7:db:5a:4c:e7:b1:
1d:49:40:51:34:07:2c:a5:b0:38:91:98:f3:70:83:
24:33:ac:87:09:52:f5:f4:97:a7:19:e7:87:db:cb:
a0:1c:3f:8e:52:e3:30:a0:29:73:04:23:7b:ea:d6:
3f:ce:4f:a6:64:c0:af:95:cb:a8:47:dc:00:38:59:
ea:62:e2:ad:1d:b0:cb:4b:24:b2:41:9d:8a:28:73:
11:13:21:4c:34:8b:1a:08:58:ef:76:27:90:8d:15:
2f:fe:1f:d9:97:8e:f4:77:77:fe:ee:46:73:b4:0a:
ff:1c:55:42:01:20:d4:82:8f:3e:00:8b:52:39:35:
01:c6:b0:12:57:82:e1:af:7d:42:88:d9:2c:70:78:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C9:3C:D8:01:F2:B9:6E:90:CE:16:40:2A:79:AA:E9:03:23:7A:86
X509v3 Authority Key Identifier:
keyid:E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a0:0e:67:42:8d:51:20:24:e4:aa:d2:35:34:6b:44:c3:58:
d4:ca:73:d6:c8:cb:5f:bb:d5:b8:05:e2:c3:57:f9:3e:b4:51:
1f:d8:c9:b4:59:c2:5e:eb:62:cf:05:bf:ac:0c:f3:e8:b8:91:
7b:f8:33:80:d1:bc:4f:72:ae:e1:d5:a0:f2:4e:01:29:a2:aa:
33:19:c9:ab:4b:9c:e3:fc:1a:6d:24:68:3c:0f:0f:dd:5b:5e:
b1:ca:54:24:d7:c6:0c:de:19:97:92:f8:ea:da:63:7d:5e:eb:
08:cc:6f:aa:1f:89:fe:41:09:3a:51:bf:1d:4b:4f:c2:ea:c4:
5b:dd:46:33:f8:8e:72:b8:cd:b3:8f:55:64:54:a0:29:9b:9c:
5e:76:f3:a3:98:80:0e:13:5f:72:bc:4a:a6:8b:a0:c1:bc:7a:
00:23:17:d7:48:d4:df:f7:10:d2:27:d1:cf:32:94:6a:c9:eb:
05:19:42:d9:c2:5b:d4:e9:f6:ad:2f:76:90:5f:6e:64:fb:9d:
65:cd:a9:d2:55:3e:76:e9:62:06:31:4a:4d:d9:22:38:a1:a5:
25:54:44:51:a6:9c:a5:6c:89:0b:d3:1d:d2:0b:dd:fd:54:64:
95:28:fa:ee:e0:df:16:89:08:d0:b0:89:9c:87:5a:c0:aa:f8:
cb:65:32:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:44:53 2026 by rpki-client