Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
File: 4tccU1qnoKzpP62r22WD-ISmxiY.mft (raw, json)
Hash identifier: teVNgsetgWoLxTn2Zr7K3OxERHQhT6s0w16QooK/e8s=
Subject key identifier: 1C:E6:FC:5F:30:8B:49:9D:3B:CC:51:56:FD:C9:6C:0C:AA:FC:31:B5
Authority key identifier: E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
Certificate issuer: /CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Certificate serial: 019FA82B8240A957D54E877F7F8D97BA0C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
Manifest number: 0AAB
Signing time: Tue 28 Jul 2026 10:00:51 +0000
Manifest this update: Tue 28 Jul 2026 10:00:51 +0000
Manifest next update: Wed 29 Jul 2026 10:00:51 +0000
Files and hashes: 1: 4tccU1qnoKzpP62r22WD-ISmxiY.crl (hash: 1hrWkTUOXmSFt6HbQRqIvsRPA6FoXhDfLCyK4/3TeBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:82:40:a9:57:d5:4e:87:7f:7f:8d:97:ba:0c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Validity
Not Before: Jul 28 10:00:51 2026 GMT
Not After : Jul 29 10:00:51 2026 GMT
Subject: CN=1ce6fc5f308b499d3bcc5156fdc96c0caafc31b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:6e:37:16:93:c4:92:5b:db:4f:73:37:cd:
0c:38:62:76:db:58:2a:e7:8e:92:f7:55:a8:15:3a:
31:b4:9f:20:3e:b7:ae:58:d5:33:65:c0:46:38:39:
e8:45:7f:de:ca:2d:72:35:1c:f0:0d:50:3f:7d:6c:
26:06:91:f8:79:c9:3d:e6:46:01:34:8d:81:e3:11:
f9:60:5a:13:2e:a5:a8:23:5b:c2:de:0a:92:e9:1d:
7f:7e:04:51:e3:43:de:57:9a:bc:0a:77:2b:92:04:
6f:60:7a:63:e9:c5:86:67:a4:c8:a8:ee:e6:d0:d9:
3c:8e:b3:d8:12:76:e4:7a:c2:eb:5d:5f:a6:a3:2b:
d4:c6:93:e7:cd:59:8e:b4:6b:71:ce:8b:b1:a1:d2:
87:de:42:e8:7d:70:1a:05:9b:7b:28:d9:d7:3e:b4:
15:86:d0:21:26:12:2e:8c:8a:ae:c1:63:0e:66:05:
39:3c:27:21:20:04:6e:57:fc:99:1c:a2:96:23:9f:
c8:ad:cc:6b:0c:7b:0b:33:50:d4:75:b6:49:57:64:
ef:fc:24:ae:16:2e:57:90:7a:09:c7:59:f3:bc:2c:
40:92:24:97:f8:f0:74:1f:4d:87:f4:29:77:1b:a4:
f9:de:71:bb:ea:f3:d4:3d:d1:c8:80:06:2c:4d:98:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E6:FC:5F:30:8B:49:9D:3B:CC:51:56:FD:C9:6C:0C:AA:FC:31:B5
X509v3 Authority Key Identifier:
keyid:E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fe:9a:e9:67:5f:0e:da:ba:17:85:d2:1d:f9:43:d5:39:d3:
61:b1:5c:66:e0:7f:94:e1:03:25:df:03:ed:97:50:7b:00:b9:
7e:7e:45:8e:a9:21:c5:c2:c6:f4:5d:3d:bd:63:cc:80:76:dd:
cf:f2:7b:94:44:78:4e:6e:41:7d:69:df:67:fe:2a:25:1d:35:
5e:fe:eb:5c:dc:83:41:11:57:fb:4e:e6:19:cf:70:d9:c9:24:
7b:fe:8c:b4:ef:12:01:02:37:45:80:e7:e6:0f:00:2e:07:fa:
b0:2c:67:ff:17:4b:2e:ca:67:52:f1:6f:45:31:4a:52:79:dc:
32:1f:f0:6a:af:bb:29:90:c4:9e:0b:1a:84:cf:f4:fe:cc:8c:
a5:1d:8b:e3:e1:7b:9c:d1:16:94:7e:77:e8:fd:ef:d7:c1:44:
2c:18:e5:a6:c3:e3:60:0f:ca:fb:6b:2b:a3:45:fd:5b:c4:6b:
46:0a:3f:6a:d2:8d:25:ab:3c:38:74:22:a2:4d:9b:09:fc:51:
6c:3b:06:73:4e:bc:12:56:1f:51:10:76:b5:71:51:20:36:da:
32:58:db:fc:3f:80:67:c0:34:be:2f:ce:6e:7c:41:be:19:ab:
53:21:f2:bb:79:74:28:3f:33:90:66:32:6d:f5:a9:e7:2f:5f:
f9:26:fe:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:51:37 2026 by rpki-client