Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
File: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json)
Hash identifier: YX5AjSHDjbBMRBuEMM8vx7U0t/J6qp/Er6sKxO10rUA=
Subject key identifier: B2:7B:48:CE:C7:B5:AA:23:E7:A6:ED:AA:B8:AB:3D:AE:0E:7D:A0:94
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Certificate issuer: /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial: 019EC25C3DC7A6A40FFF93903CD5B18BBBD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 19:01:25 +0000
Manifest this update: Sat 13 Jun 2026 19:01:25 +0000
Manifest next update: Sun 14 Jun 2026 19:01:25 +0000
Files and hashes: 1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: 3e7Wrql0JhSsDrIOJrbcZ/4olJBDRgkjf5YQ1n84n0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:3d:c7:a6:a4:0f:ff:93:90:3c:d5:b1:8b:bb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Validity
Not Before: Jun 13 19:01:25 2026 GMT
Not After : Jun 14 19:01:25 2026 GMT
Subject: CN=b27b48cec7b5aa23e7a6edaab8ab3dae0e7da094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:6a:ca:4a:cf:0d:be:24:e0:e7:78:fd:c3:
3e:b3:64:b8:86:bb:97:61:a5:8f:2a:73:b7:8e:81:
4b:f5:86:4b:4e:41:9c:59:9c:43:d1:95:61:94:61:
c5:6d:b9:fd:6b:31:8b:08:da:5c:d8:8d:92:b0:20:
e9:7c:f0:53:9d:c4:0c:82:ae:31:f4:be:ed:d0:4a:
b1:f0:0f:fc:31:17:3e:11:06:30:99:77:00:6e:27:
bb:c3:b5:46:4e:b7:09:68:de:ba:01:46:12:c0:07:
09:9a:53:ea:75:bc:30:fd:32:66:b2:45:1d:56:c9:
37:b4:9e:6c:36:5f:5c:bc:49:db:5b:e4:11:87:de:
a9:77:d1:a1:98:09:97:9d:33:ae:4e:0c:1c:ce:10:
47:2f:a4:d9:d6:0d:71:7a:d2:ca:1e:b5:c6:06:de:
28:c0:49:9e:20:dd:5a:6d:c9:ca:e7:79:0f:ba:8c:
fd:c7:d1:11:7c:84:aa:0b:bf:65:0a:42:9c:4d:54:
73:2c:54:b1:4d:97:25:27:06:e3:d6:3f:f5:7b:35:
64:d7:c4:57:37:67:ff:67:ce:4e:38:b9:97:b4:3c:
44:d5:17:e4:22:5b:0a:86:27:f6:4c:91:81:cd:73:
82:cb:b5:ad:84:5f:1f:6e:28:5e:ac:b0:eb:a4:95:
22:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7B:48:CE:C7:B5:AA:23:E7:A6:ED:AA:B8:AB:3D:AE:0E:7D:A0:94
X509v3 Authority Key Identifier:
keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bd:40:67:bc:2e:00:e2:5c:af:91:12:31:46:95:51:72:9d:
59:6a:e0:43:6f:94:2f:1e:f3:c8:2b:e4:12:a3:f9:e0:0a:67:
4a:95:27:1f:50:57:1f:32:16:cb:73:4b:31:8a:f1:a0:30:0e:
cd:4a:9c:6b:41:92:1d:41:db:06:78:3b:60:d1:f9:bd:7b:31:
04:93:5e:b4:1c:32:f1:9a:27:55:ce:84:9d:1d:38:88:5c:79:
6e:0f:ee:ab:8a:ee:a6:29:51:d2:5f:3a:57:a7:32:47:6a:e6:
33:01:ab:84:29:5c:c4:e2:26:2f:ac:59:32:cb:5a:62:d3:50:
df:04:4d:b1:49:9a:e5:20:ca:9c:a8:df:13:8d:18:78:23:ba:
8f:c2:aa:c9:43:13:88:d1:80:e4:4b:30:37:fd:e7:99:5d:96:
62:3f:9e:80:a1:dc:69:be:6b:44:00:89:67:da:8d:aa:11:ff:
a1:ca:45:62:29:3d:5a:90:52:5c:a8:dc:11:d3:e5:af:56:78:
c8:23:69:6d:e5:df:67:98:e9:1c:06:9a:d2:52:13:3e:2c:b1:
cf:60:d7:b2:46:f0:95:91:0a:d4:83:e6:73:cc:fa:d9:ea:0e:
15:73:69:d1:1a:bf:54:02:a2:bc:df:03:87:7b:67:48:f3:ef:
d0:c7:80:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:40:30 2026 by rpki-client