Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: YzPweMvT3OhBH1WiXjxcJkdICm091GUoMy/BuQUAIOg=
Subject key identifier: B8:B5:8E:B0:F6:6A:D9:6A:EB:E2:58:2D:07:4D:2B:F3:55:36:49:B4
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 019FA9E2B2B33CA8B56323C8C1E1AC786462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 18:00:34 +0000
Manifest this update: Tue 28 Jul 2026 18:00:34 +0000
Manifest next update: Wed 29 Jul 2026 18:00:34 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: cVyaptnfsFJk1FrR83hX/hRSsSMlZYsoHVzAWwUO66s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:b2:b3:3c:a8:b5:63:23:c8:c1:e1:ac:78:64:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Jul 28 18:00:34 2026 GMT
Not After : Jul 29 18:00:34 2026 GMT
Subject: CN=b8b58eb0f66ad96aebe2582d074d2bf3553649b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:1d:20:af:e3:e5:6d:d3:3f:f4:c4:eb:07:
0a:5b:fd:31:7a:41:b0:68:0f:d6:33:cb:b3:68:ca:
5c:0b:f3:f2:f1:37:6c:97:d6:f7:7a:6e:39:c0:d7:
2f:17:da:0e:37:f8:6a:18:a3:57:77:65:89:de:f3:
53:e2:1c:06:40:f4:18:cf:74:ea:95:d0:1a:95:d9:
d9:f2:7e:3f:0c:00:b5:8e:34:ed:22:6d:05:4f:f5:
43:ed:98:db:9b:67:5b:59:52:8f:aa:92:1f:1d:5e:
03:57:ee:ff:d1:47:68:01:2e:22:b1:39:e3:9b:64:
32:43:c3:9c:84:0a:6f:14:b2:93:87:09:3f:d4:e5:
b7:66:51:c5:42:8a:f9:03:ad:55:ca:3d:48:89:e3:
3e:eb:47:19:85:23:9e:b6:a7:64:51:cb:00:e0:50:
c0:1d:ee:26:86:5c:bd:9a:60:6a:2f:d0:db:18:00:
0f:bc:26:84:52:56:c0:1c:47:84:73:d6:52:ef:d6:
2a:09:dd:09:c3:7c:2e:ed:10:ce:ea:f9:8e:f0:3b:
d8:21:ae:64:a8:50:b9:59:68:05:06:37:7f:2c:b5:
e5:cf:7e:fb:3c:34:40:88:04:60:8c:21:ca:78:4e:
38:04:c7:c9:1b:21:73:bf:5e:38:0c:5d:09:2e:63:
5f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B5:8E:B0:F6:6A:D9:6A:EB:E2:58:2D:07:4D:2B:F3:55:36:49:B4
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:23:e9:dd:9e:30:b1:51:b9:09:87:e9:5d:15:00:3a:e0:f9:
9b:ef:f8:10:81:84:cf:12:f5:69:d0:59:74:b3:d7:51:58:ee:
03:1e:ad:8a:38:a3:ba:57:77:11:17:a5:47:02:a7:03:af:5c:
87:dd:7f:61:e8:8b:f0:38:95:1f:3a:89:8c:c9:d4:af:0e:13:
13:de:76:3e:2b:4e:41:03:50:ca:86:d0:ab:5d:9e:68:e6:5b:
79:65:18:73:c0:da:2e:5e:6c:d5:e3:2b:e5:d5:64:73:e0:99:
9c:86:6b:70:ad:bb:43:80:85:d8:f1:fc:f5:61:34:73:3d:76:
10:e1:1d:a2:67:f6:4a:8c:b9:cb:8a:b8:cf:16:12:69:f1:53:
09:bd:88:78:cf:33:7a:f0:3f:40:59:d6:9d:ab:23:3b:44:86:
11:95:bf:1e:a8:15:f0:3a:ba:4d:2c:72:86:2f:1e:2e:36:bd:
ac:05:1f:e9:18:99:b1:1d:53:4c:ee:9b:66:4d:39:c3:10:9b:
3a:d9:a5:36:47:98:f7:c9:51:d0:16:9e:9b:e3:9b:83:31:fa:
17:3c:bd:28:e3:d4:3a:ee:d5:2b:98:55:30:13:69:cb:53:e7:
75:df:9b:4f:5d:0e:15:7c:7d:a7:77:d5:fc:2e:28:46:6f:2d:
42:2b:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:42:05 2026 by rpki-client