Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier: NPAwVmwBiv37X4zGLoOTUI6zyDROPADFc+wwsq6N8WM=
Subject key identifier: 76:9D:5E:BB:92:60:B4:62:AC:41:55:DA:35:98:6C:F5:32:51:6C:A6
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial: 019FA82B9A7B016A4264A5259BCDF7FB6D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number: 0BE1
Signing time: Tue 28 Jul 2026 10:00:57 +0000
Manifest this update: Tue 28 Jul 2026 10:00:57 +0000
Manifest next update: Wed 29 Jul 2026 10:00:57 +0000
Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: +Nqnz1S2xuOdU1fuGwJoQDVqfLOAhrQE7TxUPijuGhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:9a:7b:01:6a:42:64:a5:25:9b:cd:f7:fb:6d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Validity
Not Before: Jul 28 10:00:57 2026 GMT
Not After : Jul 29 10:00:57 2026 GMT
Subject: CN=769d5ebb9260b462ac4155da35986cf532516ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:93:2a:fc:a3:bd:80:71:68:ef:3b:35:6b:
1e:dd:34:f9:c4:16:4d:8f:35:88:c4:ec:b4:3a:6a:
75:45:1e:3e:25:c7:7e:b0:f4:b8:90:4a:4b:c6:56:
dd:7a:f6:51:33:9d:55:15:85:d2:b5:36:cb:1a:a8:
3c:91:74:03:2e:e6:07:7d:80:44:02:f7:e2:17:68:
5f:c3:b1:b1:af:0a:24:db:e5:65:da:56:16:1c:e3:
89:a6:25:fc:1d:a1:e8:b2:fc:28:10:73:ea:de:a7:
38:5e:be:df:58:57:cb:9c:79:8b:22:bf:a6:e4:5d:
7d:f6:07:ed:7e:3e:4e:8f:b0:0f:44:e7:58:26:ef:
75:58:b7:f4:a5:38:28:6e:77:ce:c5:19:48:7e:db:
a7:54:42:2a:d3:8a:54:88:a0:45:36:ca:85:0d:1e:
08:a7:36:aa:26:3d:80:d1:26:35:fc:26:3e:f7:95:
20:85:55:1f:2a:ac:29:bd:bd:3c:20:46:51:27:90:
33:d7:2b:05:9c:1e:0b:89:9f:62:6a:dc:42:77:b1:
1c:36:d6:8c:a1:41:7c:7e:b2:03:00:c2:aa:46:57:
c6:1d:e6:e4:76:c7:20:f8:4b:df:11:f0:58:48:e1:
f0:70:14:2a:f7:7d:ec:db:0c:7c:1f:26:4d:b6:2b:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9D:5E:BB:92:60:B4:62:AC:41:55:DA:35:98:6C:F5:32:51:6C:A6
X509v3 Authority Key Identifier:
keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6a:f8:75:4c:6c:f2:2d:35:1d:28:54:9b:9e:a0:d9:a7:bb:
95:7d:e4:85:31:fe:a0:4c:e8:53:62:ab:26:ab:5c:4b:5f:bc:
b2:da:ee:e4:02:3f:20:3f:31:de:4d:8c:36:fe:33:94:ff:d8:
3a:90:3d:00:53:fb:76:44:71:4a:7d:0e:f5:57:13:a4:81:d9:
ff:4b:6c:e9:a5:0a:ce:24:d8:dd:28:2e:de:e7:5f:e1:e9:2e:
1b:d4:e0:00:84:d2:44:4d:db:33:08:23:85:20:8a:8d:9e:56:
1f:f6:1d:4a:fd:6c:de:2c:5d:84:43:ab:24:e8:17:bb:ec:87:
76:a9:99:99:80:4d:44:fb:65:4f:42:e1:cb:ae:6d:65:df:a7:
8a:30:08:f7:9c:fc:7e:fb:fa:0c:0c:31:fb:98:ef:71:c2:4b:
ef:23:e2:cb:c2:3b:b9:11:37:56:06:3f:94:4b:b0:65:0d:63:
9a:2e:89:4f:da:36:d2:a5:ed:b2:35:88:58:bc:a9:04:da:91:
a7:32:ce:7f:0e:a1:54:1b:a2:8f:ae:56:f9:d8:44:be:56:b3:
bc:71:38:a7:18:90:89:c1:5c:80:93:50:21:ea:40:69:43:bf:
a5:ca:e5:d9:13:f5:46:9a:94:51:25:df:31:68:77:ec:d2:9b:
93:1e:d6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:58 2026 by rpki-client