Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
File: 4PcIYcfPbv530i_HBJvpbGdopQA.mft (raw, json)
Hash identifier: NX5ksjeKqOAJtCo/IHfskyw6p2UBTprLVvZGQ0OD7rk=
Subject key identifier: 69:35:A9:FE:E4:65:D2:28:D4:25:BE:A4:6E:4A:B4:D5:67:70:36:CA
Authority key identifier: E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
Certificate issuer: /CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Certificate serial: 019FA9753C1F6961BD97962CE8FBA3F4AF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
Manifest number: 0996
Signing time: Tue 28 Jul 2026 16:01:00 +0000
Manifest this update: Tue 28 Jul 2026 16:01:00 +0000
Manifest next update: Wed 29 Jul 2026 16:01:00 +0000
Files and hashes: 1: 4PcIYcfPbv530i_HBJvpbGdopQA.crl (hash: oA0z46zX6+B5Y0A0C/kH5M4W/IwkOmrlLXXZbKXAF/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:3c:1f:69:61:bd:97:96:2c:e8:fb:a3:f4:af:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Validity
Not Before: Jul 28 16:01:00 2026 GMT
Not After : Jul 29 16:01:00 2026 GMT
Subject: CN=6935a9fee465d228d425bea46e4ab4d5677036ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:ab:14:df:97:2f:83:a6:26:a1:11:47:ec:
f1:e6:f4:fb:ef:0e:a4:82:98:89:ce:7c:aa:f1:d5:
62:9f:b5:5b:f4:56:5a:d1:84:06:44:68:31:a2:8d:
46:20:73:29:58:70:61:db:f3:07:cd:5c:e2:ec:43:
0c:f8:4b:01:bd:60:c1:df:39:52:91:fc:d5:f8:19:
66:6b:5a:f7:9f:2f:29:09:e9:dd:d1:d6:74:40:5c:
34:64:00:3f:ac:be:81:99:56:b1:db:30:2a:d5:a0:
10:b7:43:fd:f7:0d:49:83:d0:68:ab:97:4e:ec:e9:
09:e8:f2:8a:5d:f3:17:57:57:3f:54:61:8f:65:15:
67:e9:33:62:9d:06:d8:1a:ba:eb:02:01:ca:c3:98:
82:c7:73:46:e6:7b:fd:55:e6:21:7a:12:6b:74:7a:
ec:43:ea:b8:44:c7:3d:00:ee:df:db:3b:f4:99:c4:
05:85:da:46:59:49:47:f2:8e:c8:3f:4c:0f:a8:fe:
95:be:86:ba:2a:9a:3c:af:37:e2:52:e1:95:4b:85:
68:41:bf:5e:59:ed:4e:26:fa:a3:95:2c:47:82:cd:
60:75:41:76:98:a9:19:2b:79:1a:4f:16:7b:c5:e0:
91:6a:de:1d:71:7b:f4:7f:8f:2c:6d:8c:98:22:0f:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:35:A9:FE:E4:65:D2:28:D4:25:BE:A4:6E:4A:B4:D5:67:70:36:CA
X509v3 Authority Key Identifier:
keyid:E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:19:17:bf:74:bd:c0:54:da:54:14:d1:b2:07:db:45:39:f2:
00:f4:5a:55:c9:ec:b9:69:4d:38:02:7c:5d:09:f1:80:0b:ef:
01:5e:f2:e6:25:74:1f:c5:33:c5:60:33:11:07:ac:de:3c:d0:
65:62:61:3d:27:45:cd:06:20:59:27:9c:fb:31:ab:6d:9f:55:
25:53:ca:ee:99:d6:88:a7:ae:d1:b0:ac:29:de:34:01:10:51:
0c:a4:28:03:72:51:eb:41:0b:f1:91:ae:4e:a7:5d:b5:49:d5:
d5:c3:b0:7e:8e:fd:54:53:64:47:27:15:2b:20:7b:d4:87:81:
b6:3b:79:66:42:0a:64:90:7d:2c:27:2e:72:c5:44:bc:2a:a0:
74:e8:f0:e2:ab:28:20:ac:c0:2f:82:58:36:d5:fe:a3:49:9e:
2f:9a:78:7f:43:91:28:e8:f8:63:98:6d:72:56:fd:0c:1e:fc:
05:03:d9:d8:20:b1:d6:d9:64:24:33:8a:e2:61:e0:c6:17:da:
41:eb:9d:d0:10:f6:54:1d:83:eb:69:f0:a7:8e:b6:e3:ae:00:
49:53:2f:81:68:2d:67:05:96:f3:d8:78:e2:51:63:d6:a6:ba:
a3:9c:99:49:09:fc:1e:cf:a3:ed:ae:77:07:aa:7f:ad:e6:43:
c5:cf:a5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:17:04 2026 by rpki-client