Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
File: if4_e4M8MGAut5hY5-r67VVPTFs.mft (raw, json)
Hash identifier: mbaFOXPb1v0o02Q63gAS7EJGTaDqxYyQRwSS6nh5Ceo=
Subject key identifier: C9:C7:B9:76:C8:CC:7D:9A:84:43:A6:5F:1B:85:BF:F0:D8:4B:35:82
Authority key identifier: 89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
Certificate issuer: /CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Certificate serial: 019D9962F2484BE3E356D7958E56885D48A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
Manifest number: 0B1D
Signing time: Fri 17 Apr 2026 03:01:31 +0000
Manifest this update: Fri 17 Apr 2026 03:01:31 +0000
Manifest next update: Sat 18 Apr 2026 03:01:31 +0000
Files and hashes: 1: if4_e4M8MGAut5hY5-r67VVPTFs.crl (hash: ca0BZvzyL67AzvPuAKrnhMFMqyj25b/Ngi8p+4RHlP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:f2:48:4b:e3:e3:56:d7:95:8e:56:88:5d:48:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Validity
Not Before: Apr 17 03:01:31 2026 GMT
Not After : Apr 18 03:01:31 2026 GMT
Subject: CN=c9c7b976c8cc7d9a8443a65f1b85bff0d84b3582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:34:b9:01:dd:d4:10:e6:58:27:95:98:0d:
f1:2e:cd:7e:4a:f4:9d:0b:f9:54:77:1d:20:d5:37:
8b:c1:27:11:db:40:3b:b4:2f:6c:9e:0d:b5:45:8a:
78:cd:57:e9:0e:e6:56:f9:e8:32:6b:77:54:52:5e:
63:a4:77:b3:8c:67:ed:7a:fe:33:64:2e:06:97:5c:
9a:2a:5d:18:4b:fb:d0:38:fe:3f:71:85:b4:c1:93:
82:e2:f6:9a:10:22:d1:db:22:64:ec:c1:ff:f9:8e:
1d:79:63:eb:70:fe:9a:14:a4:b6:1a:c6:4d:be:2b:
60:d2:33:e0:e1:c5:5e:f4:18:1e:7b:e8:e1:0f:05:
d7:29:0d:47:ab:6e:6e:59:28:3a:eb:28:12:bf:ef:
4c:a6:a3:0c:e0:d2:bb:0d:44:33:e3:d3:fd:be:a5:
84:69:85:47:6f:03:fc:1b:4d:06:a8:cc:c4:93:8a:
4f:47:ff:0a:a7:7c:31:ca:cd:0e:a3:6b:8d:56:b3:
0e:2e:5e:ec:78:2a:cf:8a:06:23:9b:85:28:b2:52:
5f:10:39:10:5c:47:1e:92:81:a7:70:b2:3a:d0:a6:
3f:cb:49:37:12:21:16:60:40:26:51:01:97:e7:9e:
92:b1:05:62:21:ad:10:e6:ca:c3:81:e3:25:0d:a3:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C7:B9:76:C8:CC:7D:9A:84:43:A6:5F:1B:85:BF:F0:D8:4B:35:82
X509v3 Authority Key Identifier:
keyid:89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5c:ae:a9:be:cc:94:62:96:b5:45:f9:0a:74:01:b7:25:81:
6e:3e:74:87:db:23:42:6a:e3:ea:95:bc:3a:f5:1f:0a:36:b6:
ce:3f:71:1d:41:b5:f9:3b:6f:56:ef:7d:6f:51:36:c1:89:20:
0e:c6:13:25:99:f3:40:4a:2a:65:77:0a:26:bd:7e:5d:8f:c8:
81:7b:df:52:e5:69:51:01:c2:e5:01:bd:05:91:c3:6b:7e:e0:
08:80:0a:c3:10:e4:95:37:96:64:10:23:76:16:ce:7c:c4:b0:
d9:b8:ce:3d:ba:c6:fe:06:cc:0d:58:9a:06:e9:a7:f0:bb:93:
95:f1:b6:20:22:1f:8d:35:60:93:ba:b9:1d:a1:09:19:10:ad:
ce:30:e9:ba:d4:00:5c:a6:d0:09:a9:d9:ff:55:09:cf:a0:d8:
63:06:16:e7:17:c4:2d:71:61:63:b4:c3:bd:b7:3d:db:f3:23:
b9:fa:42:f0:c3:5a:d1:db:4c:c4:5c:45:4c:27:43:36:ab:71:
50:51:43:90:0f:7e:67:67:ad:f1:1a:84:5c:df:14:70:12:bb:
19:07:1f:86:66:99:1d:8b:a3:bb:1d:45:d3:be:7e:b6:d4:bc:
08:3d:7d:e0:27:80:68:35:d1:2b:b5:b9:62:37:bd:a2:8f:b0:
8c:e4:dc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:31 2026 by rpki-client