Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: UV3zaAaBXqHM7054JOnoGlan69YLwoB8nHmhiRSoXCQ=
Subject key identifier: E5:D5:D1:E1:B6:D2:67:97:83:6A:CA:44:36:5A:DD:38:71:55:F5:35
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 01A0C5577182B0A482C358AFADCAC250CF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 19CC
Signing time: Mon 21 Sep 2026 19:00:37 +0000
Manifest this update: Mon 21 Sep 2026 19:00:37 +0000
Manifest next update: Tue 22 Sep 2026 19:00:37 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: K3ywVf4o2naKyLryJChcmWUM0rEzWsMKJ8oiFznx+mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:71:82:b0:a4:82:c3:58:af:ad:ca:c2:50:cf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Sep 21 19:00:37 2026 GMT
Not After : Sep 22 19:00:37 2026 GMT
Subject: CN=e5d5d1e1b6d26797836aca44365add387155f535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:b8:3f:de:51:3c:da:8a:eb:ec:6a:c0:f0:
20:4e:4f:a5:88:30:3c:f9:37:2c:1a:ff:c9:87:29:
e7:cc:a4:12:6a:08:6e:aa:96:c3:94:b4:94:8b:db:
11:ce:1f:81:6d:d5:3c:f8:21:2c:05:62:c0:b2:b1:
70:5c:93:39:67:05:ca:23:ce:7c:34:64:51:8a:ed:
c5:bd:12:8f:e6:13:a4:fc:0b:64:3f:42:ce:e5:1c:
27:9b:b4:79:65:76:37:e7:5b:7d:46:50:be:32:b4:
a8:aa:32:e9:0b:38:c9:fe:67:6e:d5:d6:26:3a:22:
f2:6d:cb:0b:d1:6a:0c:f2:36:d7:c8:ed:a4:73:1d:
16:45:0d:47:67:fb:a1:e9:6c:e2:5f:cf:3e:ef:a8:
49:eb:be:62:fa:45:cc:9e:2e:c5:2b:40:36:ef:e9:
5c:02:da:4b:8f:4e:fc:84:d5:87:e5:c2:e7:d6:53:
0f:bf:98:71:af:3e:ba:23:40:f9:ad:09:2b:b2:26:
5c:a0:74:c9:c5:41:c9:af:8b:55:55:11:f3:af:04:
b4:29:79:c6:d0:10:78:11:e2:29:4d:3e:e3:2c:b7:
4b:ae:62:6c:52:35:1e:ea:2a:b2:bf:97:8b:9e:52:
67:f0:b6:04:51:38:af:e0:7c:d2:b6:17:eb:5c:28:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D5:D1:E1:B6:D2:67:97:83:6A:CA:44:36:5A:DD:38:71:55:F5:35
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1e:87:a2:7b:b3:ff:0b:ac:df:45:e1:78:71:4e:5b:c5:22:
ae:f6:08:85:05:87:c1:4c:58:10:53:42:d7:47:5c:4e:09:94:
ec:45:e4:bf:8e:b5:62:40:92:7d:15:c8:15:73:9b:87:ae:f7:
5a:25:eb:e2:51:1c:2a:44:32:87:84:f9:7b:1b:8a:8e:12:11:
f9:33:e5:d1:16:2f:f8:86:48:cd:89:9f:44:67:bf:4f:83:2c:
fc:22:87:e6:8f:6c:e8:71:1d:e0:cb:cb:20:d0:a8:20:fa:89:
f4:ac:82:58:f7:e0:4b:78:da:a7:9a:7d:27:00:6f:ea:77:84:
38:f0:af:22:b5:ae:2c:cd:bd:ac:b1:56:96:85:af:8f:8a:8a:
8d:f9:81:b6:45:83:a5:56:60:cf:57:52:f1:ab:b0:d2:5d:fe:
e1:b1:91:7d:8c:d1:91:6a:90:dd:09:36:cb:55:42:0c:8a:d5:
ef:db:a9:ad:7d:c4:92:e2:b3:6b:5a:6a:eb:ac:ec:de:11:4e:
98:d9:dd:1b:2d:87:6b:a6:fd:09:93:de:6d:b9:0a:ba:84:26:
09:2e:b9:f2:eb:14:7a:d8:bf:07:f6:d8:9d:ea:0b:37:88:6f:
1a:b3:7c:ee:ce:ff:7d:f1:4b:77:32:46:d8:91:f4:ef:64:9f:
49:b6:0c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:37:41 2026 by rpki-client