Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
File: 4CzXYQ92Hg7SUq57ufMPHisXtec.mft (raw, json)
Hash identifier: 0ywEXEFfuVPgyCF5sbDZwSUZBlx/yh091DmIX+O23Qw=
Subject key identifier: 8F:4E:50:2B:C2:17:FE:0F:69:B4:0E:90:30:E1:D4:9C:AC:AB:1B:16
Authority key identifier: E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
Certificate issuer: /CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Certificate serial: 019F17C2D575264242655D09C3C232C0E4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
Manifest number: 1618
Signing time: Tue 30 Jun 2026 09:01:12 +0000
Manifest this update: Tue 30 Jun 2026 09:01:12 +0000
Manifest next update: Wed 01 Jul 2026 09:01:12 +0000
Files and hashes: 1: 4CzXYQ92Hg7SUq57ufMPHisXtec.crl (hash: cH9wSMqgK4G+yr12sBI4QXs27mHYlJ8VCv1kT13calc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:d5:75:26:42:42:65:5d:09:c3:c2:32:c0:e4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02cd7610f761e0ed252ae7bb9f30f1e2b17b5e7
Validity
Not Before: Jun 30 09:01:12 2026 GMT
Not After : Jul 1 09:01:12 2026 GMT
Subject: CN=8f4e502bc217fe0f69b40e9030e1d49cacab1b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:7b:26:7a:a5:a3:5b:1c:a3:8f:39:37:c5:
ef:4f:e7:f6:47:48:f0:fa:1c:94:9a:44:43:d3:db:
dc:a5:25:3f:58:4e:36:9e:9f:36:a2:a1:b0:74:28:
b9:88:3c:d9:dc:fb:76:48:85:e7:36:46:0a:7c:43:
d7:ba:f2:49:4a:b9:a8:d7:d1:ae:59:2a:d4:8c:35:
bd:fe:55:11:d4:a1:11:78:57:8b:2e:39:2c:70:a7:
55:44:5e:3e:5b:d5:2d:90:65:0f:64:a5:d5:d9:00:
1a:5d:0b:62:9f:ca:4d:d5:3d:e2:bc:2e:30:63:01:
05:b4:93:6f:4a:4d:61:ce:fb:1d:8d:5e:fc:79:ef:
01:30:5a:2f:b5:c9:9d:78:46:40:b7:f4:57:b6:ce:
e4:34:95:32:d6:3c:a1:89:44:e5:a2:dc:5a:ab:3c:
fb:bb:8a:08:5d:ce:12:fd:95:ae:13:2a:77:56:76:
2d:50:43:dd:df:a7:74:e0:5a:39:d6:58:9b:44:98:
ee:73:b9:26:81:48:9b:a8:19:71:ff:c9:96:a7:58:
db:cf:95:66:04:f9:f8:58:ab:2e:4d:21:94:e9:4d:
43:85:67:00:a9:6f:24:e9:30:c1:50:5c:1d:4c:f5:
70:a9:8f:c2:14:85:e7:00:79:21:e2:d9:35:cd:48:
8b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4E:50:2B:C2:17:FE:0F:69:B4:0E:90:30:E1:D4:9C:AC:AB:1B:16
X509v3 Authority Key Identifier:
keyid:E0:2C:D7:61:0F:76:1E:0E:D2:52:AE:7B:B9:F3:0F:1E:2B:17:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4CzXYQ92Hg7SUq57ufMPHisXtec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bdbee9-5eee-4561-a523-9435159c93eb/1/4CzXYQ92Hg7SUq57ufMPHisXtec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e2:78:03:6f:35:63:b8:97:37:2d:a9:d8:0e:c2:84:fd:02:
30:82:4e:eb:80:af:0b:5d:90:e8:74:a5:40:58:8b:6c:e7:90:
22:23:73:8e:71:5f:2e:70:32:9b:fe:19:59:6a:ca:a6:d8:39:
df:ff:5c:d5:7f:d0:5a:13:ac:f3:6b:99:f9:fe:a2:6d:20:c9:
76:33:ac:df:3e:9b:dd:c3:0f:db:fe:c0:fe:f9:84:c9:01:56:
b5:ab:f2:f0:3b:d1:29:a6:1b:c3:6c:4b:dc:28:8b:e4:53:0a:
e4:24:8f:51:28:28:eb:2a:ff:a0:33:f9:c8:e2:2a:4a:8b:ea:
43:48:80:c0:70:98:0b:14:24:55:d2:28:ef:42:f3:ca:24:41:
7e:14:f7:72:d2:18:93:16:b6:fd:48:38:7c:86:7e:1e:d0:16:
83:f4:58:43:68:19:85:93:0f:d4:80:e6:71:bb:84:ff:d5:57:
04:f7:d5:15:f4:3e:18:76:f1:46:2e:35:e0:85:40:3f:20:3e:
82:d8:51:6c:e6:7c:b2:6d:65:84:0d:3e:cb:d2:95:87:4d:ea:
55:fc:f6:d5:a6:df:ef:ee:88:88:a0:c4:e7:71:27:64:84:4d:
86:e3:57:6c:16:a2:59:77:ba:98:a9:50:f3:c3:10:41:51:77:
af:5e:96:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:46 2026 by rpki-client