Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: ssVsS2LIbpCWRVVjdV5MhCCvDLms8PidDVOp/tnxBtU=
Subject key identifier: FF:A6:94:07:69:50:A7:80:C5:48:E7:1E:A3:19:34:66:2D:6B:5E:DB
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 019FA89932E5E2ECAA1A03B03511551415EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 0C9E
Signing time: Tue 28 Jul 2026 12:00:39 +0000
Manifest this update: Tue 28 Jul 2026 12:00:39 +0000
Manifest next update: Wed 29 Jul 2026 12:00:39 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: UHxes9qf0XmCPp7JYaOYSs5ivhezRL+zjm16v555TC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:32:e5:e2:ec:aa:1a:03:b0:35:11:55:14:15:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Jul 28 12:00:39 2026 GMT
Not After : Jul 29 12:00:39 2026 GMT
Subject: CN=ffa694076950a780c548e71ea31934662d6b5edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:6b:92:7e:78:4f:1b:d2:75:99:79:8c:87:
af:d7:14:d6:0a:a2:f0:fd:25:f0:13:ff:2c:08:b8:
da:8f:0a:e5:c1:e3:d0:54:26:ee:e9:3f:ba:86:2b:
c6:94:24:77:81:77:4b:82:7f:04:86:f9:53:90:68:
03:bc:b0:62:83:1d:3c:5c:e0:f9:e8:ce:b3:1b:74:
67:38:39:cd:9f:ee:50:7e:d8:c4:35:2d:02:6b:ad:
1f:9e:de:d7:aa:0a:00:38:4e:f5:e2:94:f0:96:81:
00:fa:b9:9d:06:f8:dc:99:27:3d:a7:7c:a4:1c:ba:
14:67:e5:15:84:c1:ae:77:03:bb:19:57:96:3f:c0:
e8:98:4e:d0:7f:30:fd:59:af:6d:a5:5e:78:a7:c6:
ea:46:dc:09:dd:45:ef:12:7c:62:20:7c:bf:29:75:
28:ff:b2:f2:38:f6:49:d9:f3:48:2b:27:18:ca:d1:
3b:22:d1:07:20:fc:4d:db:27:f3:f1:e6:7b:a5:7a:
63:54:31:6d:1d:df:ab:10:fb:06:95:04:a1:13:bf:
d8:55:c0:bc:f6:f2:dd:0e:6c:2f:fb:9b:bc:c3:78:
13:66:bc:ac:bb:61:87:00:00:d7:5f:3c:d4:fc:51:
fb:69:a8:b5:62:19:9b:51:9a:a1:5b:1c:15:a4:ca:
0d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A6:94:07:69:50:A7:80:C5:48:E7:1E:A3:19:34:66:2D:6B:5E:DB
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:25:62:fd:00:b6:2e:2b:38:1a:99:7d:7a:2d:cb:3a:35:39:
b7:4f:2b:ad:b2:39:3d:a0:9f:72:67:9b:32:94:b9:40:7d:95:
1d:c2:e7:b6:4f:4d:b4:14:92:0e:81:9e:c5:0f:3d:73:e6:0c:
62:88:f4:f0:34:7b:5f:14:28:94:e5:ad:2f:9d:97:18:be:02:
e6:11:67:b4:0c:67:03:d8:89:34:ab:3b:e5:07:81:95:91:c9:
9c:b6:62:2a:b4:1c:e2:d5:a3:d6:84:bd:7e:0c:f5:d6:05:52:
11:50:9c:df:34:5c:46:a3:a7:b0:79:9d:9d:b1:3e:bf:b4:16:
7b:1f:97:50:6a:07:80:37:91:a2:3b:17:ac:cf:b3:f7:6f:56:
1b:b7:4f:d9:8b:8c:07:93:c5:1a:23:39:fd:83:d2:91:81:45:
c7:fe:4f:b3:4c:65:1f:60:a9:2a:fa:5d:bf:b5:48:0f:b3:0b:
b4:7b:bd:29:19:f5:21:86:2c:a3:75:c6:bf:15:eb:d7:30:e5:
f5:95:89:bf:5a:8b:72:68:4e:b9:7a:9b:da:0b:df:e7:e3:24:
e3:fa:bd:01:ae:72:92:6d:5a:24:d6:71:19:3e:8a:28:10:74:
cb:ac:fa:4b:50:6b:c2:1a:07:bb:37:01:4b:b4:60:ed:13:ad:
93:ff:ad:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:41 2026 by rpki-client