Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
File: 4HDNq3OhLa82gGsOFgLI2vuQk7s.mft (raw, json)
Hash identifier: 5f7Y9HlL3ugmSKmMn16OWUDsW3nqAbAdETuRGjYgNcI=
Subject key identifier: 71:17:00:52:86:3A:02:25:DC:32:F9:F3:89:A7:A8:AE:AA:E2:BE:74
Authority key identifier: E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
Certificate issuer: /CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Certificate serial: 019FA82BC38AA7075FCCF020454EB108CC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
Manifest number: 0F1C
Signing time: Tue 28 Jul 2026 10:01:08 +0000
Manifest this update: Tue 28 Jul 2026 10:01:08 +0000
Manifest next update: Wed 29 Jul 2026 10:01:08 +0000
Files and hashes: 1: 4HDNq3OhLa82gGsOFgLI2vuQk7s.crl (hash: MpHFZRM+TAmB9COVIgSNo+6eCLfzF2T0C/FNBmITsd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:c3:8a:a7:07:5f:cc:f0:20:45:4e:b1:08:cc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Validity
Not Before: Jul 28 10:01:08 2026 GMT
Not After : Jul 29 10:01:08 2026 GMT
Subject: CN=71170052863a0225dc32f9f389a7a8aeaae2be74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:86:ed:c4:21:7a:35:f3:c5:0d:b8:c6:02:
f8:4c:1e:ff:77:1f:ee:df:37:3e:1c:66:f5:ec:95:
b7:2d:49:94:a1:3e:2d:9a:8d:25:7c:67:62:7e:9e:
1e:3e:86:a2:f5:0f:25:74:4f:1e:9e:76:7e:75:d9:
8b:6e:67:d7:67:0c:78:9e:f9:9c:2a:aa:e0:9c:ec:
0f:ee:0f:da:9f:85:bd:a6:13:c1:fb:d7:04:ab:40:
75:5d:58:27:62:f6:7b:af:96:27:a5:fe:f2:ed:7c:
38:56:3a:43:46:4f:4d:3e:0e:e6:d3:38:cc:93:3f:
0f:6b:aa:91:92:7c:c7:0a:ce:44:71:ca:63:07:b1:
07:36:65:43:27:14:13:aa:ec:ac:74:ad:be:de:77:
8c:41:f3:6e:2e:60:ec:0c:66:02:0a:9b:70:dc:df:
b8:15:ea:77:f9:d8:6e:d4:da:05:2f:a8:e5:35:2f:
64:af:f8:4f:ee:71:87:00:c4:6a:c2:33:d8:28:4d:
fb:2c:2a:57:53:70:c5:fa:8e:69:d4:1a:ca:d7:8e:
b3:6c:54:1f:be:0b:11:6a:7f:1e:09:56:d9:ad:fe:
a6:ed:99:23:55:6d:2b:55:20:ee:53:80:a8:62:20:
19:26:2e:03:a6:9e:07:d7:b1:f4:4d:ad:97:87:26:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:17:00:52:86:3A:02:25:DC:32:F9:F3:89:A7:A8:AE:AA:E2:BE:74
X509v3 Authority Key Identifier:
keyid:E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:cc:9c:ab:05:89:e0:55:6a:2e:7f:c3:34:4c:92:89:64:fe:
e5:f8:66:2e:05:89:57:4c:0b:b9:19:d8:b7:d7:8b:59:c1:11:
a3:20:d2:2e:57:2e:7d:e9:27:a4:25:c1:be:ca:b7:88:d9:46:
32:1b:7f:49:f3:95:b6:63:1a:11:f9:15:0e:20:1f:31:6e:2e:
da:b9:09:e6:84:a4:39:e9:28:78:a1:a1:83:8c:1c:fb:d8:22:
54:24:fd:25:46:f2:ee:1c:ca:51:bb:5a:ba:36:fe:36:0a:5d:
f4:58:65:7f:12:78:1f:3c:f8:92:32:92:3f:3a:df:af:d5:07:
db:99:d2:40:50:ed:b4:b5:b0:96:a7:ca:71:3e:3c:69:7a:ad:
92:f9:09:77:c3:87:e1:68:12:04:75:2f:30:78:63:0f:2c:40:
4f:2b:52:52:13:f3:b3:d7:4e:3f:bd:34:01:ff:d1:73:2b:77:
ed:cd:a6:bd:94:b6:4a:c7:bb:90:cc:dd:d5:24:f4:7f:1b:54:
dc:14:65:0c:ce:4c:b9:9b:32:92:bd:e7:64:f3:d7:4f:0b:be:
dc:e7:b5:fe:28:4a:20:f7:8d:55:f9:4a:85:1a:5a:7f:f0:10:
ad:df:5e:a7:c0:84:ed:c9:55:83:aa:32:ef:cf:ba:f3:13:fc:
70:17:da:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:29 2026 by rpki-client