Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier: dd1ok44KLTQLOmO6fTu/0MukGqukAFeBAELdR6PrH3M=
Subject key identifier: 98:E7:2A:34:6B:B5:54:D8:41:86:0D:89:0F:4B:D1:EE:AF:25:EF:B1
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer: /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial: 019FA82B12A6DBEFA286E42981E75A076A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number: 19CE
Signing time: Tue 28 Jul 2026 10:00:22 +0000
Manifest this update: Tue 28 Jul 2026 10:00:22 +0000
Manifest next update: Wed 29 Jul 2026 10:00:22 +0000
Files and hashes: 1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: 5SFfW025+ztIQx2pdh/s0u2bvcfF2hXxZdLXIu0bDB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:12:a6:db:ef:a2:86:e4:29:81:e7:5a:07:6a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Validity
Not Before: Jul 28 10:00:22 2026 GMT
Not After : Jul 29 10:00:22 2026 GMT
Subject: CN=98e72a346bb554d841860d890f4bd1eeaf25efb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b8:5f:19:54:68:94:42:4a:d9:70:5d:0d:dd:
a0:be:72:75:a9:17:33:70:4e:12:03:d4:7d:a7:4f:
88:3e:a1:fc:a9:da:8d:0d:51:a8:ce:c1:37:b2:6d:
3b:c9:3a:0a:f2:31:13:d1:1a:30:12:4c:b6:91:db:
77:0d:3c:0b:92:6b:ea:1f:ff:cb:4f:4b:06:01:f4:
ec:e6:0f:60:66:f5:ae:f8:97:6c:da:6c:5b:58:25:
68:75:e9:a6:57:85:35:a6:2e:43:b5:4a:a1:8a:ee:
a8:6f:3c:41:18:18:98:a2:76:df:7d:45:ec:f8:27:
8d:a7:b1:79:70:36:7f:f3:07:a6:23:55:96:a8:5a:
8c:71:3d:78:cc:f5:3c:43:f0:82:6b:24:13:68:19:
09:38:42:ac:90:e6:90:98:72:d4:c4:25:32:35:be:
e0:44:b0:b4:55:de:48:3a:29:0c:72:e4:ed:dc:89:
e0:b9:8d:d8:4e:83:39:98:b9:2e:24:fa:43:e7:56:
7c:0a:19:a5:98:50:4b:0e:d8:d7:25:46:c5:69:a8:
95:e5:9d:36:69:e8:06:cd:7a:8f:83:64:7f:2e:b7:
e8:0a:81:ea:fd:b5:ac:ad:dd:a7:39:e8:e9:12:52:
be:06:5b:56:70:ba:d9:97:17:6c:cc:61:da:89:82:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E7:2A:34:6B:B5:54:D8:41:86:0D:89:0F:4B:D1:EE:AF:25:EF:B1
X509v3 Authority Key Identifier:
keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:06:7c:63:d1:0d:d4:1d:a7:4c:d2:c7:bd:bd:f6:34:f0:43:
29:bc:32:4b:9c:b2:ee:84:7c:79:a8:f6:ca:34:7a:22:f8:f4:
1e:14:5d:b9:45:31:68:9a:5a:32:92:61:8d:69:4b:4d:92:9e:
d4:bd:f8:f5:8a:b4:e3:8a:a2:c0:37:83:38:4c:5c:42:2a:ae:
60:69:f9:db:4a:63:1a:ec:01:24:ee:52:f2:c5:ed:3e:f1:24:
6c:4d:08:ee:08:df:d7:0d:9c:cd:fc:15:31:9f:07:55:70:8a:
6d:36:06:75:5b:34:ce:a2:a5:87:8c:ea:a7:9f:ad:45:a7:33:
10:0f:fe:e7:19:7e:06:ba:32:a9:17:ed:94:83:b0:59:5d:61:
3a:21:84:6c:de:c2:8e:a7:84:12:7f:3e:7d:72:c0:d8:7d:07:
3d:3f:a5:cb:a5:86:f8:42:24:d4:9e:b3:7b:e0:13:5b:d1:15:
5a:0c:a7:86:2b:08:87:72:23:f5:06:8b:6a:19:70:72:3b:ae:
ef:d9:76:af:4c:68:23:a4:d4:39:67:71:28:01:f6:8f:88:be:
c3:6d:5a:80:1c:f8:7d:58:f1:59:1e:10:f6:f3:43:b7:73:67:
04:5a:ac:1a:d5:83:47:33:38:f2:1f:6a:36:7a:1c:5d:a7:f1:
c4:9c:b0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:42 2026 by rpki-client