Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
File: 4xubYpkE1DhFESeFW1L4guvhYqo.mft (raw, json)
Hash identifier: O9i4GgZUN4BbYLnIckvJAwuS6zAE1dia43Lt1hzQAPE=
Subject key identifier: EE:21:2D:85:BB:32:F3:0F:9E:4F:2B:E1:D4:02:45:A1:4D:02:67:45
Authority key identifier: E3:1B:9B:62:99:04:D4:38:45:11:27:85:5B:52:F8:82:EB:E1:62:AA
Certificate issuer: /CN=e31b9b629904d438451127855b52f882ebe162aa
Certificate serial: 01A0024AF16012C926B4C40EAAB8848571F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
Manifest number: 1332
Signing time: Fri 14 Aug 2026 22:01:00 +0000
Manifest this update: Fri 14 Aug 2026 22:01:00 +0000
Manifest next update: Sat 15 Aug 2026 22:01:00 +0000
Files and hashes: 1: 4xubYpkE1DhFESeFW1L4guvhYqo.crl (hash: GoL4MGcbilsHv7ft7DSzb1wTdp9LhnqJq9kDnA6H8kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:f1:60:12:c9:26:b4:c4:0e:aa:b8:84:85:71:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31b9b629904d438451127855b52f882ebe162aa
Validity
Not Before: Aug 14 22:01:00 2026 GMT
Not After : Aug 15 22:01:00 2026 GMT
Subject: CN=ee212d85bb32f30f9e4f2be1d40245a14d026745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:11:33:32:28:9e:3c:6a:f8:01:2d:6c:40:51:
ad:04:21:ed:63:6f:d8:65:68:7e:f4:92:ec:76:fb:
6f:fd:99:7f:c5:b9:25:76:a1:f9:99:5f:63:07:00:
dd:65:49:b0:99:66:00:ae:8e:75:50:6c:43:94:87:
38:44:9e:f5:1a:55:e8:5e:8e:20:b0:28:50:39:9c:
72:4e:f1:14:ab:f5:9b:d0:6b:c5:cc:12:c1:ff:33:
3c:1a:ae:87:05:b3:73:0d:21:a2:d6:1a:7b:e7:c0:
72:3e:19:17:93:a3:7e:29:7c:3f:98:2e:79:0a:e3:
9c:12:bb:f0:46:5c:f6:b4:7c:33:59:16:ef:fa:48:
d8:fe:c0:e5:4c:f0:fd:db:20:42:d2:c8:75:bb:e4:
91:15:68:1d:b5:4a:ff:90:62:2d:8f:05:85:54:44:
08:55:f8:1b:25:a2:d2:19:4a:86:ef:c3:d1:fa:58:
db:93:4e:41:de:cc:e2:c9:2e:27:21:e8:1a:25:17:
62:08:11:97:99:87:95:d0:8c:98:e0:32:23:3c:fb:
3c:73:f9:55:48:5a:34:26:cd:99:1c:27:18:fd:f6:
0b:8c:ee:56:33:07:31:0c:46:1b:43:68:25:f0:7f:
94:c5:72:27:f9:6e:99:b0:24:71:da:7e:63:ad:df:
3a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:21:2D:85:BB:32:F3:0F:9E:4F:2B:E1:D4:02:45:A1:4D:02:67:45
X509v3 Authority Key Identifier:
keyid:E3:1B:9B:62:99:04:D4:38:45:11:27:85:5B:52:F8:82:EB:E1:62:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:11:7b:d1:bc:a4:7f:22:da:61:e0:81:8d:15:28:f1:53:2b:
7b:01:ca:7f:f6:05:98:88:48:5e:ef:a5:c3:68:60:06:eb:d3:
e1:52:c9:84:d0:9c:d9:5b:da:ca:f8:c9:58:a6:cb:1b:38:91:
e0:2b:ff:ce:58:e5:c3:ee:22:a2:4b:80:3c:0c:6b:5a:a4:1e:
68:b8:8a:eb:c7:5c:6b:c3:11:5f:13:a7:e0:cf:95:7f:2a:cb:
68:e7:35:82:29:9f:bd:82:26:12:57:a7:a7:70:f2:aa:2c:b8:
af:31:8e:b1:c9:02:ce:95:43:62:c2:3a:77:e9:b7:65:43:9e:
8f:0a:cc:31:02:7c:b8:77:fa:ee:a3:d0:78:6f:2b:ce:34:16:
19:5d:c7:84:59:9a:ec:7b:d6:bd:2a:39:5a:db:05:14:c6:14:
ff:f4:4c:65:83:5c:4e:d9:76:8d:64:73:5e:c2:fd:4e:4f:96:
be:42:6a:94:94:9e:83:16:5d:34:96:a0:f7:e8:6f:82:e0:0d:
b2:6f:cd:90:31:50:19:e4:9f:87:f6:a5:41:fb:4e:3a:18:7e:
2c:48:dd:a8:7c:e0:df:33:0d:ef:15:6a:da:5a:c7:84:af:67:
73:e3:2d:b5:33:1f:06:4a:2c:34:62:f6:e4:bd:6c:c6:0f:fe:
60:05:e7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:35 2026 by rpki-client