Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
File: 861SH4OIdIPIybDG895f1e1Whck.mft (raw, json)
Hash identifier: gCeC7kikzlRHVyRYVgYaIEEa46ffgzroCvsm8OxCNJk=
Subject key identifier: 77:84:CB:E1:35:90:13:0C:8F:0F:EE:56:E9:2F:84:C0:FE:39:5B:2D
Authority key identifier: F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
Certificate issuer: /CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Certificate serial: 019FA82B7B46EDBE26C30123A77681BD5A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
Manifest number: 0F5C
Signing time: Tue 28 Jul 2026 10:00:49 +0000
Manifest this update: Tue 28 Jul 2026 10:00:49 +0000
Manifest next update: Wed 29 Jul 2026 10:00:49 +0000
Files and hashes: 1: 861SH4OIdIPIybDG895f1e1Whck.crl (hash: h0312TXi2RqTsl/zi2ur10QZFwVkndkF1kBHeSYhZbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:7b:46:ed:be:26:c3:01:23:a7:76:81:bd:5a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Validity
Not Before: Jul 28 10:00:49 2026 GMT
Not After : Jul 29 10:00:49 2026 GMT
Subject: CN=7784cbe13590130c8f0fee56e92f84c0fe395b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:39:81:c1:bb:00:91:e9:b2:e9:56:e6:06:
c9:23:ab:46:f3:06:16:5c:63:f7:80:c6:50:1c:17:
82:27:fb:4e:a9:1b:b0:78:a5:fd:ad:54:85:f1:13:
20:86:5a:3e:b0:da:6b:0d:5a:d4:79:bc:e4:75:c1:
ef:dd:39:f2:f1:aa:2a:e7:fe:f7:d0:22:99:c7:d5:
2c:8b:0b:28:d3:8f:6c:93:3c:a6:42:28:54:ce:89:
33:94:66:77:87:4a:08:c7:42:8c:d5:fb:a3:53:fa:
b0:ea:05:07:7c:dc:5a:72:34:73:ca:55:47:1c:7f:
7b:4e:88:c1:d3:b0:6f:22:45:97:51:ce:c5:f4:8c:
b3:6d:23:8b:a2:a1:7b:43:0c:54:5d:25:10:39:e8:
0f:8d:79:99:63:47:96:fa:d2:57:20:3f:b0:0c:35:
ab:7b:d2:64:d8:79:ce:0b:47:24:f5:49:60:34:83:
a4:88:f1:21:23:9a:b6:e3:a0:a5:16:b6:e1:40:40:
e4:6c:5b:77:c8:07:fa:55:e4:6a:f8:2c:bf:21:c0:
d3:a3:b9:b1:d0:1b:95:54:11:5d:ff:6e:df:23:27:
16:12:24:67:0a:0f:19:69:75:44:60:6a:b5:6f:e4:
55:3c:2b:68:b4:5c:a4:d4:cf:a7:ae:b8:32:bd:88:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:84:CB:E1:35:90:13:0C:8F:0F:EE:56:E9:2F:84:C0:FE:39:5B:2D
X509v3 Authority Key Identifier:
keyid:F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2f:4b:4f:53:ec:49:c3:a4:0d:03:a4:8d:e4:9e:ae:08:82:
f5:4b:14:6d:ec:d0:0f:ea:62:36:d2:31:a7:7a:fa:81:2f:0a:
e0:08:2c:b5:21:73:c0:21:f1:bb:d6:a9:7a:31:35:61:37:2b:
82:03:ee:d3:f6:b9:ac:fd:af:91:5b:42:0a:0c:4b:b4:8a:0f:
ab:8b:a2:62:b3:9a:5c:b8:fd:b9:3c:b6:c6:82:ba:65:9f:f3:
0e:35:5a:6f:e4:98:57:94:7b:41:e2:cd:4c:9d:23:70:a1:dc:
8d:b5:08:a1:f2:86:02:3b:17:8d:b4:ba:8d:7d:e8:3c:43:f1:
8a:72:61:fb:e8:10:cb:86:57:4d:68:73:ac:38:98:4b:17:52:
98:a9:c3:14:55:f9:96:0a:ea:de:4b:5c:b7:b0:da:5f:e5:88:
28:66:04:40:59:4a:39:eb:51:53:da:f6:f2:bd:b0:82:ba:ac:
a4:38:14:33:ca:05:1b:83:93:8e:cb:46:49:dd:e4:f8:3f:f1:
8a:53:00:7b:35:e5:61:b7:c5:60:82:0a:0f:2a:ff:1a:ba:5d:
3a:67:d9:c2:32:9c:d0:b9:b6:33:79:79:3f:b5:30:27:e0:1d:
3f:0d:2f:1b:ab:c7:9d:97:d7:f8:67:38:32:53:fa:25:25:90:
3e:14:56:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:20 2026 by rpki-client