Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: +AEyaQl2HKp2qZjRTkjGO4oygeSNtn2Slc31pF68xJg=
Subject key identifier: 91:71:04:FD:8C:02:73:26:93:27:12:13:E4:1C:C1:C6:AF:22:9F:A5
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 019D98500A9F556B970E7FFC607066579F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 1827
Signing time: Thu 16 Apr 2026 22:01:15 +0000
Manifest this update: Thu 16 Apr 2026 22:01:15 +0000
Manifest next update: Fri 17 Apr 2026 22:01:15 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: tvJWbdJ87bMDnok6whBW8a5THnaiSGbvnf9QDfs+zUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:0a:9f:55:6b:97:0e:7f:fc:60:70:66:57:9f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Apr 16 22:01:15 2026 GMT
Not After : Apr 17 22:01:15 2026 GMT
Subject: CN=917104fd8c02732693271213e41cc1c6af229fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:58:ee:cc:3d:1a:bd:3c:1c:14:ea:bb:df:
d2:be:a8:41:90:4d:4f:fa:4c:74:5a:fc:98:3f:8f:
82:8f:3e:5d:27:fa:34:e4:4d:b7:50:b2:06:9f:27:
43:f6:c6:e0:3d:20:14:6d:b4:d7:c2:ea:0c:05:b2:
bd:8c:40:ee:6c:9f:39:d5:b0:97:77:6d:75:64:cf:
17:e0:cb:30:f0:ac:d7:3b:73:31:8c:25:5e:2d:08:
ab:f2:db:e3:62:3c:93:3a:e7:52:ee:e9:95:99:b1:
6d:f7:ec:bb:fd:53:6f:66:36:c8:f0:ef:9a:d7:46:
58:a3:0b:ba:af:5f:a8:fe:62:6b:e2:35:46:9d:0f:
ad:75:12:e8:02:4c:81:ff:dd:38:2e:2a:86:d7:f1:
9f:0e:82:0b:a1:8b:21:19:9e:24:25:8d:34:cb:03:
eb:be:e5:97:64:1c:45:d6:e4:33:62:fc:26:16:20:
f9:fa:ef:8b:56:1d:29:8c:2c:f4:da:73:50:1d:86:
e3:2b:5b:ee:33:f3:0a:f4:fc:77:61:87:47:d5:60:
e0:20:3f:39:73:27:db:1c:1e:f9:44:6e:1d:71:4b:
c7:41:3e:5c:5b:10:6b:aa:d7:08:2a:ed:80:7b:c7:
78:74:20:e2:69:be:19:f6:33:79:08:86:83:83:d9:
2b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:71:04:FD:8C:02:73:26:93:27:12:13:E4:1C:C1:C6:AF:22:9F:A5
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ee:fa:11:2a:66:cb:97:41:5d:41:6b:cc:d5:b5:62:34:38:
2b:6f:17:9d:fb:f2:a5:36:43:05:4f:d5:8b:22:1d:8a:4e:28:
8c:c2:ba:b2:13:9a:cb:54:6f:90:15:17:a4:f6:ca:4f:55:8d:
e7:fa:1c:f1:56:47:4c:e0:d1:d9:8d:ff:93:3f:87:af:1f:12:
f5:a7:44:c9:36:10:5f:d3:18:c0:58:f9:9e:f3:e7:36:d4:2d:
51:35:c4:4b:64:f9:67:86:8d:95:11:b1:c0:6d:08:4a:c3:4f:
15:1d:c3:fe:04:76:b8:aa:33:95:c7:68:13:70:90:dd:05:04:
89:b3:e2:27:a6:9d:ac:f6:74:d7:58:01:d0:34:86:16:c7:5a:
d6:06:87:9d:8e:6a:b2:a2:3c:49:62:ad:69:a3:d4:32:48:94:
45:c1:5b:f3:84:19:71:2c:6e:55:9b:cc:4b:34:21:d9:f0:6c:
10:2d:e0:be:aa:3d:96:b7:aa:b1:a4:0d:29:09:31:ef:92:07:
88:f4:39:85:6f:f9:51:7b:8a:f3:b1:8e:e2:0e:64:38:e8:e0:
1a:9c:dd:f4:ac:4a:f1:f4:57:63:d0:60:68:91:6e:65:db:0a:
60:e6:be:14:d2:27:b6:2b:ac:58:85:8e:c5:68:31:b0:85:89:
69:0a:f1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:14 2026 by rpki-client