Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier: uGr0Zq8wK0LWnmfsT+s7vNQE39HMCEnG4dpkhZAbKsE=
Subject key identifier: EF:F4:B9:BD:73:BB:8E:0A:32:16:9C:74:4E:83:08:8A:C9:04:ED:21
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial: 019CAD5A1BD0A48A62B6E4709E7270239B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 07:01:29 +0000
Manifest this update: Mon 02 Mar 2026 07:01:29 +0000
Manifest next update: Tue 03 Mar 2026 07:01:29 +0000
Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: 6utxnSa3usosTwUitFGV2LCAvAsr+nAOdWd4+ZB5AYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:1b:d0:a4:8a:62:b6:e4:70:9e:72:70:23:9b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Validity
Not Before: Mar 2 07:01:29 2026 GMT
Not After : Mar 3 07:01:29 2026 GMT
Subject: CN=eff4b9bd73bb8e0a32169c744e83088ac904ed21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6c:62:6c:04:fc:71:54:67:52:a3:63:a3:73:
43:27:e3:5c:60:d2:c5:17:a3:55:60:c0:5d:b1:1b:
c0:ac:52:53:08:b4:70:6e:66:69:42:1b:02:76:2d:
bd:53:32:d8:03:74:07:77:00:99:ea:48:88:f2:7b:
e2:41:82:57:e1:ad:6f:dc:05:97:47:21:a5:d7:39:
f6:8d:c9:9d:b5:52:91:9c:c8:2f:10:75:0d:3e:c2:
6f:c8:6a:20:8d:17:33:cb:b8:44:66:bb:ab:02:76:
f0:e1:39:80:f5:d5:9b:37:fe:b7:81:11:f5:7b:fe:
9c:24:40:f5:2a:67:4c:02:7b:6b:bc:6f:8e:c1:07:
40:df:af:10:6b:4b:b9:01:55:b0:03:19:68:f1:53:
e4:06:52:98:c0:7a:3f:e2:26:b6:32:66:fd:98:77:
c4:92:ec:2b:24:cd:31:23:1e:68:5a:43:37:32:57:
02:7b:34:de:25:1b:f6:2c:1d:56:6e:20:0a:fd:4c:
3f:cd:c2:b1:5c:8d:db:cd:28:b1:51:0c:0e:1c:ad:
39:09:cc:bf:aa:8c:74:11:7c:79:36:85:db:24:18:
83:59:cc:bf:8d:b6:32:58:79:62:5e:fb:e7:69:b0:
e4:23:3f:7f:78:a5:64:6d:79:da:f2:c0:62:9d:1d:
f2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F4:B9:BD:73:BB:8E:0A:32:16:9C:74:4E:83:08:8A:C9:04:ED:21
X509v3 Authority Key Identifier:
keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:53:31:12:dd:0d:ce:14:3a:63:9b:33:02:4d:b5:20:97:84:
40:93:80:a4:92:7a:a8:47:cd:41:b2:1e:6f:4e:28:24:9b:7e:
c6:22:d3:96:48:00:2b:62:53:4c:c4:0e:0e:a2:0e:5f:d1:04:
72:ef:61:75:1e:12:3c:91:47:24:c4:29:37:2b:36:dc:ab:b8:
c9:52:ba:4f:21:79:80:fd:0f:a6:86:d2:fb:83:15:0c:2d:f0:
eb:ea:fb:13:e2:a1:0c:e0:73:8b:09:2a:5e:ab:55:07:82:cc:
bb:4c:48:97:2a:5d:df:90:84:81:c6:38:77:01:a4:17:84:43:
46:77:14:3d:68:ce:66:31:7c:6e:11:51:53:01:50:4e:70:16:
95:20:ed:2b:ff:c2:c6:30:f3:d3:a3:4f:5b:30:3e:61:70:29:
16:0d:2f:ae:f6:d8:41:97:53:70:35:e2:57:f6:6d:79:c5:7c:
70:6e:f6:a5:5c:e3:43:9e:07:5e:dd:a3:d6:62:37:dc:4d:cf:
61:42:fd:75:bc:85:bf:4b:dd:37:9a:40:31:4c:6a:c2:28:14:
06:b7:9e:da:a0:c1:2e:98:cb:17:0c:eb:6a:2f:98:a3:f6:e2:
55:2a:b6:f8:d3:b3:0f:08:8f:02:4e:46:49:c5:a5:c0:2b:a9:
cf:79:a3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:16 2026 by rpki-client