Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
File: i4-7JMKLohFyEvDTJzo8KkwnzBI.mft (raw, json)
Hash identifier: tk4I1VDjUaCyg3NdRqrnD00PFzwhlegiweM63XoKQgI=
Subject key identifier: 8C:39:F8:B5:9E:EF:81:77:E2:65:CA:0E:17:FC:65:52:9F:2D:A1:0D
Authority key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
Certificate issuer: /CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Certificate serial: 019FD1958F92F51EA766C8A4D34FC049879E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
Manifest number: 0F64
Signing time: Wed 05 Aug 2026 11:01:07 +0000
Manifest this update: Wed 05 Aug 2026 11:01:07 +0000
Manifest next update: Thu 06 Aug 2026 11:01:07 +0000
Files and hashes: 1: i4-7JMKLohFyEvDTJzo8KkwnzBI.crl (hash: PD7MlFeTpJr83pMDWfBu4O+C61gzsDXUAdHZfrumI30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:95:8f:92:f5:1e:a7:66:c8:a4:d3:4f:c0:49:87:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Validity
Not Before: Aug 5 11:01:07 2026 GMT
Not After : Aug 6 11:01:07 2026 GMT
Subject: CN=8c39f8b59eef8177e265ca0e17fc65529f2da10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1e:7a:53:5c:26:5e:e9:1b:4d:6a:75:a8:76:
ac:05:73:9d:70:c7:9f:a8:fa:00:71:80:ec:e8:6b:
8c:51:de:66:f2:e8:c5:a4:b6:b1:ee:57:d3:9c:a9:
6b:bd:4e:5a:16:73:54:24:b0:6c:23:82:c8:cc:e9:
d3:45:d1:ec:84:b4:6f:65:6d:70:2b:f1:c4:19:86:
e2:cc:8b:a4:7d:be:9e:80:c7:6f:d3:e1:7f:29:17:
b8:77:be:99:7c:96:35:fb:b1:33:90:e6:f6:b5:b8:
24:35:c0:da:dc:7e:df:57:7b:2c:e8:0f:b3:1c:f3:
39:4e:c3:00:94:c0:84:ea:f7:b8:ca:fa:9c:93:e7:
31:1c:bb:14:2e:c4:d4:b2:04:84:59:91:3c:e4:3f:
d5:8f:1c:e7:5a:79:ea:4c:95:4d:47:1f:07:4b:12:
6e:d7:e5:ab:18:b8:c9:9a:6f:72:22:81:a8:2f:d5:
b6:25:ce:51:da:4f:34:1c:28:3b:df:5a:f8:49:ac:
f3:80:9f:2c:48:f6:85:e3:b2:0c:51:a5:da:d1:35:
53:9b:04:46:91:ba:23:1c:98:33:d1:50:99:d9:06:
29:28:99:db:84:af:6f:5e:fc:1e:32:35:f6:b0:6d:
ed:0a:b3:50:56:f4:8a:9c:39:51:a2:51:fd:78:de:
e0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:39:F8:B5:9E:EF:81:77:E2:65:CA:0E:17:FC:65:52:9F:2D:A1:0D
X509v3 Authority Key Identifier:
keyid:8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:62:79:84:95:d0:a5:34:7d:86:f9:45:94:cb:be:03:f0:e2:
12:27:ef:fa:52:11:8e:8a:02:6c:3f:01:90:a0:32:f2:9a:1f:
f3:d5:8b:24:78:1f:91:d4:ba:17:18:e1:11:6b:49:27:ac:85:
f7:a8:94:89:87:74:7f:fe:58:10:d3:4a:7c:36:f8:c5:45:6d:
f1:62:fe:8d:86:0e:0f:78:e9:6a:47:c8:20:ca:bf:d9:3d:4c:
16:32:b9:e8:7f:c8:10:24:8a:19:14:78:8b:a9:b0:19:5c:ca:
3f:88:6d:ae:98:5e:85:b2:35:4e:af:fe:23:fd:57:21:ec:5a:
6a:08:fb:0d:d4:05:fc:d3:51:95:52:94:57:cc:7c:6a:68:44:
c6:27:e4:31:4e:5d:06:66:ea:eb:e7:06:64:2f:95:ef:4c:17:
e0:5a:7e:31:8a:5b:d7:30:85:78:4a:0f:5b:27:c0:49:e6:0b:
ba:75:9f:82:7d:54:36:bc:da:fc:60:14:25:68:88:ac:6a:ec:
99:c5:3f:e6:71:41:60:dd:8b:32:19:a9:c9:63:de:76:59:c2:
2d:a5:49:f5:c4:ff:83:75:0a:a4:72:90:07:c0:93:25:be:ab:
03:50:f4:0f:23:87:e2:7e:58:50:e8:53:42:c1:b8:cd:11:f1:
6f:78:43:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 20:10:37 2026 by rpki-client