Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
File: 4Xa6TSueAPu_jsQzEekblUqqU24.mft (raw, json)
Hash identifier: guHcXks5LO4HUfgq9JxOiy25hlI3c6eWmJIhoM1flSM=
Subject key identifier: FF:C5:17:19:2A:80:50:C9:14:9B:81:03:F9:28:29:5F:39:44:0F:0B
Authority key identifier: E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E
Certificate issuer: /CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
Certificate serial: 019D9A3E81A33C756959366BCAC222722428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
Manifest number: 0821
Signing time: Fri 17 Apr 2026 07:01:20 +0000
Manifest this update: Fri 17 Apr 2026 07:01:20 +0000
Manifest next update: Sat 18 Apr 2026 07:01:20 +0000
Files and hashes: 1: 4Xa6TSueAPu_jsQzEekblUqqU24.crl (hash: 28OCKM3g5ZtgPht7MZcdzlJK7Tv4odyuYmfhbXMyOwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:81:a3:3c:75:69:59:36:6b:ca:c2:22:72:24:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
Validity
Not Before: Apr 17 07:01:20 2026 GMT
Not After : Apr 18 07:01:20 2026 GMT
Subject: CN=ffc517192a8050c9149b8103f928295f39440f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ed:1f:e2:16:f7:aa:fa:ce:f1:bb:87:58:36:
cc:49:5a:bf:45:f3:55:2f:79:1e:cc:ef:dd:78:3a:
63:6a:fd:e3:cc:b7:06:9c:d7:f2:46:55:cd:66:03:
5e:df:5d:64:ae:78:ed:fd:27:ca:4d:f9:8d:2f:4b:
c7:a9:2a:5e:97:73:6a:50:7e:62:5a:ea:3b:c2:aa:
74:6d:20:55:5d:f8:b5:dd:d3:0a:01:b8:c4:3a:fa:
a1:a9:39:9b:cb:12:b4:f9:66:c1:aa:f5:ce:7f:6d:
bb:ea:17:18:20:b6:c3:a7:7f:db:21:95:3b:83:f6:
c4:aa:16:f6:33:ff:76:0c:ba:db:f7:76:71:06:20:
34:02:a2:50:86:8a:bf:b7:86:a0:1e:1a:27:6f:8b:
66:20:56:95:b5:9d:2e:2f:43:a2:26:ee:14:0a:91:
af:dd:ae:1a:8b:59:37:50:79:15:ad:0a:1b:66:7d:
e4:3a:09:8f:cc:ae:6e:c7:9e:fa:9b:75:47:c9:05:
31:15:8d:43:29:17:34:7c:52:bf:07:fb:d0:eb:fd:
61:2d:47:cb:0c:f8:c1:4c:23:b0:32:62:dc:30:8d:
c0:99:99:78:ea:e3:ca:83:7d:f9:35:59:26:31:36:
5d:f2:81:25:17:b6:e5:d1:b0:ff:fb:af:54:ab:4d:
f1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C5:17:19:2A:80:50:C9:14:9B:81:03:F9:28:29:5F:39:44:0F:0B
X509v3 Authority Key Identifier:
keyid:E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4b:60:d9:1e:5d:c2:2b:b9:71:44:e2:22:f9:4e:93:b0:2f:
96:d5:52:d6:d0:29:4c:24:a6:d4:3c:1a:6f:2e:4d:a1:43:3d:
fa:2a:40:bb:31:84:09:df:7e:d2:8d:ad:da:63:7b:57:a5:97:
d9:46:2e:78:de:5c:b8:86:63:1d:5b:4c:d4:dc:a4:c4:98:5b:
17:aa:db:75:89:22:bf:06:a1:56:11:f0:11:81:0a:ee:7d:e2:
7f:96:f3:20:5a:f0:7a:e4:8e:02:a8:e4:cf:b2:b0:97:2f:07:
72:d7:0c:36:a8:ca:68:e3:17:75:d2:32:12:d8:31:3c:27:f2:
5f:4a:fe:dd:13:c7:90:35:6d:2f:77:22:99:94:02:2f:80:3a:
72:8d:02:ab:80:fb:b5:a4:38:76:45:a6:a8:86:7a:82:2e:63:
f8:ea:f4:ca:ca:c7:a2:fa:6f:70:2d:43:8e:e5:d5:d3:96:06:
65:19:65:ef:ff:6d:df:64:0c:36:b5:28:ba:41:b0:e1:55:66:
ee:75:c4:09:75:ce:a8:2b:17:7f:88:aa:ef:a2:d2:82:8e:e1:
94:c6:c7:de:49:6a:53:01:ac:19:0f:37:f2:1a:59:0c:27:3b:
7d:cc:ee:ab:b4:87:fe:84:62:bd:34:cf:7a:79:47:c0:fe:53:
73:ba:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:26 2026 by rpki-client