Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: 8aQCZqXAoApVN78SyIqHiJtzL1uS77w7Hz2/MSbXzOk=
Subject key identifier: 20:A6:52:36:B2:F3:D9:09:69:45:00:01:84:E7:C6:C7:B3:BF:41:AD
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 01A00025A0F64E08802C4D18956FE48029BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 1328
Signing time: Fri 14 Aug 2026 12:01:01 +0000
Manifest this update: Fri 14 Aug 2026 12:01:01 +0000
Manifest next update: Sat 15 Aug 2026 12:01:01 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: IXRbHiu4xY4TyhHA5l/T9nTRBOxq7wYZb6VD5SfZodA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:a0:f6:4e:08:80:2c:4d:18:95:6f:e4:80:29:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Aug 14 12:01:01 2026 GMT
Not After : Aug 15 12:01:01 2026 GMT
Subject: CN=20a65236b2f3d9096945000184e7c6c7b3bf41ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:29:ef:73:cc:fa:3e:9c:8a:a7:1c:69:0d:
87:00:f0:a4:53:d8:cb:3e:f2:c7:d2:74:aa:9d:27:
3f:25:bf:fc:71:c5:92:f5:b2:88:93:ae:0d:eb:27:
73:47:16:a0:c5:96:27:af:09:02:b9:fe:84:e2:50:
ef:f3:8f:1b:49:f1:ad:74:bb:0b:e5:1f:4f:49:cd:
9b:f2:5a:82:4d:2e:d4:e6:8a:c5:64:07:9d:eb:6a:
58:66:79:37:ff:75:9f:21:1d:8b:cf:3d:73:44:dc:
e4:6e:d8:9f:88:43:95:26:cd:b7:fa:4e:e1:5e:c4:
a8:d5:ce:63:1d:13:bd:8f:f5:de:92:42:4d:4c:c9:
15:77:df:33:26:87:a0:16:5e:c1:22:62:31:84:bb:
42:0a:a7:84:f7:75:f0:d9:4e:0a:45:b1:ea:0d:37:
25:d5:eb:aa:b2:16:b3:25:96:95:c9:a6:b7:0c:33:
ef:dc:51:b7:5f:b9:0c:9e:3c:8e:4a:59:39:8d:38:
eb:74:7b:90:49:9a:3e:63:f6:e1:31:5a:6c:08:e2:
28:67:33:2b:01:af:c3:53:8a:bc:2a:9e:10:eb:d0:
0b:41:1a:b3:94:47:60:22:3e:c0:29:c8:b5:09:aa:
a5:b6:1a:9c:e7:8f:8d:64:7c:8a:4d:b9:fb:af:3b:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A6:52:36:B2:F3:D9:09:69:45:00:01:84:E7:C6:C7:B3:BF:41:AD
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:05:5d:74:47:08:5d:81:e3:1d:df:6e:eb:ca:33:20:b3:87:
86:fa:ce:5d:a8:0a:fd:62:38:81:7f:19:12:74:68:4b:34:fd:
f8:1c:04:36:39:15:b6:1a:af:9a:be:45:b5:71:7d:b2:1f:e2:
2c:f7:9a:48:2c:51:20:0a:59:f5:13:6c:5a:9a:70:00:e6:19:
e3:a4:7c:a8:1a:cf:56:f5:03:1d:8b:a7:f4:8a:07:32:5e:71:
a1:0e:8d:18:71:d1:a0:b1:54:0e:62:2e:c7:e2:4b:9d:48:31:
5f:7a:ef:d2:15:91:91:32:e6:31:44:1b:bf:da:fe:d4:bc:c9:
59:ff:89:6f:07:a0:82:96:da:5b:2a:f6:fd:34:61:aa:77:e5:
55:f3:65:35:30:cc:d9:4e:68:2d:c4:12:32:7d:62:f6:c7:74:
7d:6c:76:fb:ee:98:fe:0d:c5:53:1d:e3:21:6f:d3:fc:ee:f6:
48:d0:25:5a:9b:74:24:0c:18:1a:b8:ab:99:e1:6a:71:99:a1:
3b:c6:3c:7f:e5:fd:01:a8:cd:59:52:94:39:56:84:55:1d:6d:
66:1e:15:62:54:3e:0f:58:72:41:f8:96:d0:5e:6a:ce:05:89:
36:7b:1b:00:d0:36:71:c2:26:de:51:80:9d:71:ef:37:1d:d6:
ef:0c:a7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:23:39 2026 by rpki-client