Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
File: g4fa4eZQhWzIVx5GLr2evrZccDg.mft (raw, json)
Hash identifier: +cWMaZ6RgYij7nvRhl7mm7DyqA86DIkSVaKidrPt6Ak=
Subject key identifier: 86:F6:D9:2F:2C:04:D1:40:85:06:7D:8A:BF:7A:0E:55:03:CE:40:BA
Authority key identifier: 83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
Certificate issuer: /CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Certificate serial: 019FA03AFC3EDAC71DCF43EF56C284C73ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
Manifest number: 19CB
Signing time: Sun 26 Jul 2026 21:00:47 +0000
Manifest this update: Sun 26 Jul 2026 21:00:47 +0000
Manifest next update: Mon 27 Jul 2026 21:00:47 +0000
Files and hashes: 1: g4fa4eZQhWzIVx5GLr2evrZccDg.crl (hash: CszrSVDsAxCFc2wL9rC9PRa2O4UZF9Q7mkZUol9z8rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:fc:3e:da:c7:1d:cf:43:ef:56:c2:84:c7:3a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Validity
Not Before: Jul 26 21:00:47 2026 GMT
Not After : Jul 27 21:00:47 2026 GMT
Subject: CN=86f6d92f2c04d14085067d8abf7a0e5503ce40ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:5d:48:a0:b1:f5:86:15:4e:9d:11:7d:1d:
af:f3:f2:fe:48:10:6a:e7:cf:99:92:19:e1:f4:7b:
6f:3f:29:b6:f3:77:35:1d:24:43:9b:8f:67:04:10:
07:34:c8:47:84:4e:16:73:15:db:b4:a8:59:b6:ce:
10:d7:1e:7f:9f:9c:b5:d1:1c:f9:23:5e:00:84:1c:
4c:41:fa:db:a4:2c:7b:44:57:da:39:e0:29:6d:3a:
81:a2:fc:e4:26:c0:f2:0b:b8:cb:80:17:55:12:c0:
64:6b:03:38:92:8d:cc:ed:c9:31:55:a6:dd:1b:05:
c4:29:1e:d2:36:02:ea:49:00:21:ba:0e:65:bb:b1:
75:a2:ac:b3:b3:53:de:f7:7e:3e:a3:58:14:0f:f4:
d0:84:0c:78:16:78:df:d9:ee:9c:1f:b4:33:37:04:
ee:31:5d:63:e4:d7:1a:0d:a2:08:01:1e:c8:bf:9c:
95:b3:79:b7:23:4b:ae:57:9d:67:2b:7e:5b:85:b0:
72:42:fa:46:a9:1c:bb:da:91:af:c5:99:91:42:c5:
3c:97:f1:83:7e:0f:6c:72:15:0a:1c:6a:fb:1a:7d:
06:6b:55:6c:77:dc:c2:1b:a2:4c:96:57:df:4f:ae:
57:77:f6:5f:2e:3b:17:ac:02:63:ce:db:22:28:f3:
b6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F6:D9:2F:2C:04:D1:40:85:06:7D:8A:BF:7A:0E:55:03:CE:40:BA
X509v3 Authority Key Identifier:
keyid:83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:45:c2:db:81:7c:28:fb:bf:e1:dd:c3:cf:9f:e2:ec:d3:22:
ea:05:60:14:5b:94:ca:0c:45:e3:ba:42:d1:a0:ac:92:be:2a:
8d:80:54:62:15:22:6b:59:0d:6b:94:2b:8d:b8:66:fa:e3:06:
47:98:13:5b:18:03:46:b5:47:7d:b9:b3:02:77:f4:22:dc:e5:
b8:10:6c:89:5e:86:e1:b0:3c:b9:d2:8f:ac:61:ab:5f:88:3a:
18:8f:33:34:c2:68:58:75:97:f2:8b:ba:ff:1b:6a:db:1d:1d:
c6:c8:bd:c2:0e:bb:72:c2:75:f1:1f:46:85:0a:5e:86:8d:01:
24:d5:8e:4e:b8:e3:04:5b:9a:ef:c4:48:85:1f:ef:8a:a3:be:
d4:b3:9d:96:18:9e:3a:af:d1:bd:20:30:51:25:b3:0e:1c:08:
c0:82:89:3d:31:8b:b1:38:f9:67:5d:b0:a8:78:a2:1c:9f:a5:
08:0d:c9:8d:cc:df:9c:58:63:ed:d8:d7:de:85:39:15:8c:32:
17:52:4e:18:52:32:66:c9:2b:a7:9d:31:60:f2:80:20:6e:b8:
58:b4:7b:60:f3:79:b9:f8:a3:60:00:d6:8c:05:93:85:c7:f8:
e7:45:1d:58:22:55:5a:b8:a7:e5:20:5f:99:2f:9d:e1:6a:fd:
3b:f0:bb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:47:43 2026 by rpki-client