Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
File: 41wFcLO3dz0eEYgufdLGJVN-sJw.mft (raw, json)
Hash identifier: 26VfqHHA50v8xu8iwe1rMuN2V5A2ALWGBYyRexIPqFo=
Subject key identifier: B8:A6:98:53:ED:08:75:C2:C0:F6:A3:0F:4E:1F:B6:8F:CF:C8:CA:9B
Authority key identifier: E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
Certificate issuer: /CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Certificate serial: 019FAA19CEB89F548D6E51B3D3A166F271AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
Manifest number: 170B
Signing time: Tue 28 Jul 2026 19:00:45 +0000
Manifest this update: Tue 28 Jul 2026 19:00:45 +0000
Manifest next update: Wed 29 Jul 2026 19:00:45 +0000
Files and hashes: 1: 41wFcLO3dz0eEYgufdLGJVN-sJw.crl (hash: iCV6mbW1EuqzQGDdtieEYa7alAJxy39hXP2J7BLaksg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:ce:b8:9f:54:8d:6e:51:b3:d3:a1:66:f2:71:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Validity
Not Before: Jul 28 19:00:45 2026 GMT
Not After : Jul 29 19:00:45 2026 GMT
Subject: CN=b8a69853ed0875c2c0f6a30f4e1fb68fcfc8ca9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:48:f5:68:04:ac:2d:4e:3b:9c:a1:89:e8:
60:13:bf:30:5e:e0:e5:9f:ec:3a:12:ef:f3:a2:50:
5d:dd:f0:48:ce:6f:e1:7a:60:f8:7e:01:0d:62:1a:
41:50:8e:16:d3:94:55:5a:3e:0c:88:88:d6:65:d0:
c7:4b:b0:2b:a5:7b:65:a8:0c:9b:1e:59:58:d2:9f:
b5:59:3e:2b:eb:7f:d3:b6:b8:e4:c3:c3:67:cf:8b:
7a:ed:56:c2:e2:5f:cc:06:1b:55:e2:c2:10:12:d6:
34:a0:9c:f1:90:fc:a3:d0:b1:4b:ee:a2:90:54:55:
99:a5:fa:f2:04:29:e8:bd:91:a8:26:8c:b9:f6:15:
17:5a:c4:51:88:87:04:e7:e3:8e:e5:99:69:36:ba:
0b:db:5f:e6:1d:f7:81:0f:0d:17:94:68:09:f0:df:
3a:cb:e2:45:68:7f:01:f6:58:88:0d:b3:36:16:df:
51:79:73:b8:c7:7f:d8:63:28:78:df:56:96:0a:f6:
af:48:42:6e:4c:e8:73:ea:91:c9:2f:96:88:13:56:
65:f8:41:ab:3c:80:29:bd:9c:b4:26:c7:85:6f:46:
b1:d9:4c:16:94:bf:da:55:64:18:4d:c4:d7:ac:ee:
86:37:df:94:9b:0d:44:3b:84:73:c1:27:63:87:5c:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A6:98:53:ED:08:75:C2:C0:F6:A3:0F:4E:1F:B6:8F:CF:C8:CA:9B
X509v3 Authority Key Identifier:
keyid:E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:29:37:43:e7:3f:44:00:0e:cc:7e:35:6f:a2:55:ec:6d:bb:
ef:71:72:af:7d:42:cb:4a:cf:93:2f:a1:bb:45:34:dc:aa:93:
c5:00:df:ba:00:90:f5:b2:d2:7d:fb:fd:cd:6a:6f:ce:68:d8:
03:6c:0c:18:b7:01:85:eb:ba:b9:13:06:50:16:71:8f:10:4d:
85:91:f5:24:8f:62:cf:de:9c:f3:54:f5:f9:fb:7b:86:57:85:
0e:bc:21:3d:aa:36:40:8d:be:49:52:36:2f:d3:e9:ec:ab:5e:
88:55:6c:33:cf:b8:64:a3:73:35:fa:b5:cb:14:52:1e:88:cd:
66:d1:4c:ed:31:4c:88:c1:57:12:fd:e7:fc:83:05:5b:93:28:
fc:11:3f:e0:de:f8:f2:61:12:3a:ae:b7:e9:9d:a4:f2:ab:1f:
15:3b:2f:52:90:b2:a9:6c:c8:e2:75:ba:c7:1f:da:a2:43:0a:
a6:6c:d7:48:ca:12:53:c2:d4:40:96:15:b1:07:0a:eb:6b:5d:
4f:15:28:db:16:72:f9:83:ed:8b:e0:ff:d3:eb:00:89:3f:e6:
14:29:ed:64:70:b9:c9:2e:68:05:5e:97:11:49:49:ad:b2:17:
0d:1a:89:2e:7e:8a:70:46:70:21:11:c4:d3:71:74:9c:7d:b4:
0f:6d:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:27:40 2026 by rpki-client