Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: Pd2sOwAsnXxibEJXU7ZR/l/okUPLMHKRsd137BVDfkw=
Subject key identifier: C2:CB:97:8E:C8:53:35:39:C9:32:6F:EC:4F:32:67:C0:AD:82:2D:4E
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 019CAAC60D5FAF4E2F0745249114EDCD17A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 17AC
Signing time: Sun 01 Mar 2026 19:00:32 +0000
Manifest this update: Sun 01 Mar 2026 19:00:32 +0000
Manifest next update: Mon 02 Mar 2026 19:00:32 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: 9dPmRq8ysAWChGRhmUPigOslZxtdnlTT2Tvb8ZIeWok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:0d:5f:af:4e:2f:07:45:24:91:14:ed:cd:17:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Mar 1 19:00:32 2026 GMT
Not After : Mar 2 19:00:32 2026 GMT
Subject: CN=c2cb978ec8533539c9326fec4f3267c0ad822d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:f9:80:15:99:3f:65:d5:5b:94:f3:be:2f:
42:f0:77:9f:97:f0:8a:97:e0:dc:a7:2b:d6:18:60:
86:4f:d3:c5:8e:af:f0:73:c4:a2:1a:fb:bb:eb:93:
04:fc:3f:20:32:8f:52:4d:01:0b:aa:a5:5c:97:8e:
92:8c:50:83:69:c9:20:7c:af:55:b0:24:08:1c:91:
61:4e:34:99:92:2a:7f:be:05:db:1f:c1:e3:c5:35:
63:aa:1c:a2:72:10:37:53:80:0c:6b:fe:10:bc:63:
ed:c5:b1:ce:80:ba:07:c5:3d:86:9f:f8:e7:da:3a:
44:4c:0f:4f:01:16:34:82:9a:69:59:38:29:b8:77:
75:fa:25:c3:da:0a:13:2a:09:03:e3:d4:83:68:07:
2a:13:1b:c9:1b:fc:fe:3f:d7:93:23:3c:fb:85:83:
73:6f:87:3d:19:2d:dd:33:51:61:62:82:d2:ea:c3:
10:23:73:39:4d:d5:b7:63:cc:6c:4e:3a:91:c4:98:
b9:27:57:1e:b2:f5:32:34:77:05:ca:06:84:e9:4d:
7c:e8:a2:5e:bd:a6:53:d9:dc:c9:ee:83:b6:fd:8c:
ab:a1:da:87:fe:61:e0:b5:e2:8f:0f:61:af:8e:cf:
0c:c7:3e:7f:55:8d:37:a6:b4:bb:dc:0f:d0:58:62:
19:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CB:97:8E:C8:53:35:39:C9:32:6F:EC:4F:32:67:C0:AD:82:2D:4E
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:56:4c:50:ed:fb:b2:f1:e2:ae:29:e0:0c:c4:70:45:a8:ba:
2f:a7:82:ed:e7:26:0d:90:c5:fd:25:d9:a5:24:16:79:ad:68:
93:4c:94:f0:dd:53:5d:fe:10:e8:1c:fd:81:46:de:e7:32:8e:
55:40:32:ca:f4:c3:86:82:6f:09:36:5f:b7:57:5f:33:d9:6f:
79:08:06:de:54:89:33:c4:1f:ee:9d:af:20:79:d5:e2:f8:88:
0f:e6:1e:72:0e:9c:24:d2:8f:e9:e6:22:7f:59:6c:4e:f4:07:
34:fa:09:a9:e9:2f:c0:9c:57:1d:6f:22:76:3d:87:7d:3b:0f:
25:3d:f3:87:b3:8a:c7:c7:ac:5a:69:8b:41:fb:a5:f2:71:14:
10:76:56:c6:4e:60:91:63:70:09:92:dc:1d:0a:9e:74:3f:e8:
71:90:4c:80:49:24:8b:52:47:b9:2d:d9:ad:2d:d4:c1:4f:06:
6a:74:40:0f:73:51:ca:e1:62:07:46:d2:ec:26:99:c8:98:fa:
da:31:aa:05:7e:69:70:68:ff:72:93:91:24:a1:c6:df:cb:02:
48:88:b8:14:ce:c8:a6:8a:eb:c1:17:34:60:a1:3f:89:da:17:
28:c1:32:e0:8b:6f:f9:0c:b6:11:2c:19:ff:3a:43:a8:37:44:
49:25:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:40 2026 by rpki-client