Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: GNh6SzYN3hFphEThc3BlWBAMrhlcCw7Nn4S+i+CHh50=
Subject key identifier: B8:29:50:A5:F5:E1:E0:EC:A0:B2:4B:E9:C6:ED:19:2D:F7:9E:13:F4
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 019CAB3435F14631B0AAC8C8A4D6277D2B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 21:00:51 +0000
Manifest this update: Sun 01 Mar 2026 21:00:51 +0000
Manifest next update: Mon 02 Mar 2026 21:00:51 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: PafpuymMwD9luKmM3hx3vw0OLkZJwLgSApgnWEL40gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:35:f1:46:31:b0:aa:c8:c8:a4:d6:27:7d:2b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Mar 1 21:00:51 2026 GMT
Not After : Mar 2 21:00:51 2026 GMT
Subject: CN=b82950a5f5e1e0eca0b24be9c6ed192df79e13f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e8:96:18:46:98:fb:07:46:bd:13:7f:59:50:
94:20:1f:7d:ca:06:13:e3:3d:43:92:c2:d3:93:9b:
02:6e:12:36:79:54:21:ad:71:a4:5f:85:00:9a:33:
31:78:c9:4c:5c:3b:9f:36:db:8d:e1:5d:14:c9:c0:
90:26:52:b0:f6:33:93:cf:f2:85:19:79:b7:db:55:
0f:23:11:6d:4e:6c:64:5a:c5:46:9f:fd:8a:0f:aa:
7b:f5:94:1e:af:3a:a4:81:8e:cb:92:cd:9e:67:a6:
24:17:1e:8e:aa:51:93:24:3c:f8:d7:66:24:ee:fa:
12:ab:bc:ca:b9:78:93:0a:17:d6:e2:3b:89:f6:8d:
00:d8:d0:ca:ac:2b:90:a0:61:5c:e1:45:19:5a:7a:
06:40:87:93:e0:7a:c1:db:80:c1:e3:ae:48:8f:16:
23:aa:32:3a:02:c3:0b:19:a9:ca:b3:38:f4:6f:1e:
33:1f:79:b4:3c:09:33:63:96:d9:7b:3c:f8:af:4a:
29:27:91:e5:0f:67:69:59:8c:f9:60:80:33:ac:db:
b8:9a:39:b3:04:de:88:6d:11:ce:ed:30:12:9e:a1:
dc:7f:6c:92:78:73:69:77:5f:a1:83:bf:89:d7:4c:
71:c4:6c:5b:22:f7:f8:6c:49:0d:ed:c9:16:23:30:
91:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:29:50:A5:F5:E1:E0:EC:A0:B2:4B:E9:C6:ED:19:2D:F7:9E:13:F4
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6f:49:22:6c:30:f8:e2:19:ac:a5:7c:6b:db:b4:39:80:c5:
05:5a:59:9b:99:28:d9:ae:0b:12:54:4d:99:e7:5c:6c:d2:09:
9b:a0:0c:d3:69:54:0e:fe:43:09:ed:af:65:95:9d:2e:bd:47:
38:a3:f6:76:2b:ff:f3:32:4a:ad:32:35:9e:e8:19:32:57:34:
d0:ca:6e:77:5a:e5:f1:84:a2:ae:96:b7:a5:45:88:9d:2e:8b:
7a:74:b4:47:1d:0f:ee:75:3b:0e:ef:b7:28:72:9b:ef:51:dd:
60:37:ac:03:aa:42:dc:11:f3:70:1b:2f:e6:65:c5:cc:41:79:
73:b3:6a:ad:33:f2:f2:69:de:e5:f9:73:17:e1:6f:39:b3:52:
63:fc:6f:0f:b1:43:01:84:ca:ca:68:af:ee:56:1f:76:e3:87:
74:bf:1f:f2:c9:86:df:1c:8d:d9:31:cc:a3:12:5b:9e:c7:b0:
af:c6:7a:9b:7f:4f:d0:de:d7:21:9d:30:ff:3f:75:eb:d6:4b:
43:fe:f7:90:16:83:b6:18:54:d3:f8:f0:73:ff:79:df:50:ba:
9d:08:e9:de:56:9d:5e:46:a4:b1:84:e6:df:f2:fb:f8:49:2c:
e2:51:00:a8:d5:1a:38:e0:03:68:45:c8:3e:bb:56:b3:3e:05:
2c:5f:0f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:02 2026 by rpki-client