Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
File: g4fa4eZQhWzIVx5GLr2evrZccDg.mft (raw, json)
Hash identifier: P83t91DwNpQsXc9Kq4He8A9MJhnw037PCuFC+byAQyM=
Subject key identifier: 0C:21:CF:CF:03:44:8D:D5:BB:2D:FA:72:67:6C:D6:1B:A3:96:03:15
Authority key identifier: 83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
Certificate issuer: /CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Certificate serial: 019EB87C910F625B0C5619EE9548928C4C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
Manifest number: 1953
Signing time: Thu 11 Jun 2026 21:00:31 +0000
Manifest this update: Thu 11 Jun 2026 21:00:31 +0000
Manifest next update: Fri 12 Jun 2026 21:00:31 +0000
Files and hashes: 1: g4fa4eZQhWzIVx5GLr2evrZccDg.crl (hash: rIwwTaY9u/f4JOPZeWZw48bXvuKXWASwVBH56h0qdME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:91:0f:62:5b:0c:56:19:ee:95:48:92:8c:4c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Validity
Not Before: Jun 11 21:00:31 2026 GMT
Not After : Jun 12 21:00:31 2026 GMT
Subject: CN=0c21cfcf03448dd5bb2dfa72676cd61ba3960315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:b0:ab:b7:31:8c:39:5e:b6:c9:30:5e:e6:
8e:5a:98:76:f3:46:d4:62:f4:db:ae:19:9b:88:8a:
79:e5:d1:cf:61:57:e7:39:3a:b6:b1:4e:33:db:65:
d7:1d:2b:09:bc:e7:6b:8f:27:f3:a4:85:67:81:81:
99:4b:8b:ac:01:c7:55:a0:26:17:58:04:91:4f:20:
58:4c:ee:28:0a:82:af:27:32:2c:63:d0:d6:b9:5f:
97:0e:92:90:21:df:21:33:1f:be:58:0a:6e:40:cc:
81:47:82:8e:9a:ae:c5:77:eb:d8:5e:b3:d8:18:bb:
4f:f8:06:9b:11:64:fd:11:2f:4c:36:94:4c:5f:4f:
5c:a0:da:1e:db:7e:75:27:40:26:0d:64:02:ce:8a:
74:f8:4b:22:f4:06:21:ac:65:ca:c7:13:5c:cc:17:
47:7f:c7:ee:27:fc:1d:93:f2:96:9e:cb:da:2a:7c:
57:3c:b0:89:3e:b8:ef:f2:0f:aa:49:df:25:cd:47:
bf:8a:50:94:ee:24:69:3f:6e:c8:91:be:89:17:ad:
bc:4e:89:84:e8:46:ee:f8:71:5e:79:bd:96:9f:11:
f3:3f:0f:83:da:4a:b0:b9:66:bf:c6:71:4f:83:3f:
af:88:c3:62:47:1f:53:af:bb:d7:fa:70:78:4c:5a:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:21:CF:CF:03:44:8D:D5:BB:2D:FA:72:67:6C:D6:1B:A3:96:03:15
X509v3 Authority Key Identifier:
keyid:83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5f:05:fc:9e:b6:23:76:93:19:b8:b1:d4:9c:4f:87:0d:f2:
1a:c3:cc:19:61:b3:fa:cd:14:48:1c:be:9f:7a:d7:54:4e:80:
8f:d6:0c:ac:94:9f:ce:b7:6c:73:73:3b:bd:eb:f1:c3:67:48:
ea:be:39:a5:e6:6e:c4:67:65:d5:e6:c7:7b:89:cd:42:87:c0:
de:93:9b:52:48:51:45:34:2f:47:ad:1a:ea:a8:8a:37:27:f6:
aa:73:a8:0b:6c:93:78:b4:da:53:39:05:ee:a1:bd:47:75:b1:
6b:c7:b4:d4:2d:b8:47:50:88:fd:af:c1:73:e4:d0:5b:17:23:
85:b3:29:74:b0:96:8b:cb:4b:9c:81:28:7a:b7:58:c3:dd:4f:
bc:6a:92:2e:27:25:0b:50:a2:58:3d:a4:ef:b8:e1:2c:80:16:
4b:ab:1e:ba:3f:39:1d:13:7e:75:31:ed:e6:03:ce:e5:11:fa:
80:6f:30:54:16:39:1f:c8:44:65:a1:22:43:2d:68:40:ec:e1:
e0:f1:56:df:9d:2b:d7:6a:02:eb:43:b6:01:e3:71:a4:a1:7a:
19:76:96:6e:7f:8e:e6:b9:25:31:71:59:6b:46:ed:26:4a:5b:
b6:49:c1:db:e7:9b:65:51:cf:80:50:d3:47:81:2f:9e:f7:e1:
db:cf:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:14:40 2026 by rpki-client