Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier: l0Nn8vZ/Msx5GBf1zNKJ4n7Zk8IpjkyCDR2iaxU3+Mk=
Subject key identifier: 48:30:60:7D:16:68:27:5E:4C:D6:30:24:82:E8:D4:BA:EF:18:24:6E
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer: /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial: 019F194378BC15ADC6270D8DA3D8A08A9BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 16:01:19 +0000
Manifest this update: Tue 30 Jun 2026 16:01:19 +0000
Manifest next update: Wed 01 Jul 2026 16:01:19 +0000
Files and hashes: 1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: 82RO3ye45z2fDkzUg0iyH+Bo4UxNHgpflsF4RJNLpMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:78:bc:15:ad:c6:27:0d:8d:a3:d8:a0:8a:9b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Validity
Not Before: Jun 30 16:01:19 2026 GMT
Not After : Jul 1 16:01:19 2026 GMT
Subject: CN=4830607d1668275e4cd6302482e8d4baef18246e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:ee:c5:b0:00:40:66:6f:16:fb:63:62:11:
ec:82:8b:ed:f8:ac:5c:8c:61:c5:3e:71:a9:f3:42:
69:30:96:87:5d:92:0d:48:7d:6d:d8:74:47:f8:2f:
3f:cc:5c:48:1a:24:f7:46:7f:b5:e8:ab:ab:4c:7f:
d7:2c:eb:85:ae:ae:7b:52:db:c7:72:7c:2f:8f:43:
d2:22:12:13:47:17:a9:ab:b7:2b:38:cc:ef:27:8d:
1f:3f:1d:82:5e:8d:4b:2c:b3:de:49:79:97:a5:30:
75:39:b4:1d:05:d9:f3:fa:73:56:da:82:3d:17:0a:
11:79:d1:99:87:49:64:99:e8:4e:b0:2a:27:71:ba:
70:4d:76:fe:fa:35:0c:52:b1:eb:85:90:74:dd:a8:
18:47:dd:09:8c:ae:8a:88:07:60:44:8d:26:0c:4f:
45:f7:7d:da:28:f9:d0:ce:ba:2e:8e:7f:1f:f8:7e:
f4:4f:7a:11:63:dc:9c:93:0e:06:b0:ad:2a:0e:4b:
58:fc:83:b8:b4:28:3e:c3:99:b0:d3:45:90:1e:4b:
e0:25:42:10:dc:e2:e5:84:f4:1b:31:c9:41:47:31:
b8:6f:7a:28:75:a2:88:82:a5:17:2d:1c:88:f1:6f:
8a:e6:b0:5c:95:de:56:bf:b2:87:19:6e:5c:3f:16:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:30:60:7D:16:68:27:5E:4C:D6:30:24:82:E8:D4:BA:EF:18:24:6E
X509v3 Authority Key Identifier:
keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:42:c2:ac:ad:ef:51:d8:e2:01:3c:96:9a:d6:0f:f1:22:8a:
ef:f2:e7:8e:06:c6:a5:48:4b:72:2c:85:ab:2b:cd:9e:a5:94:
88:df:4e:29:86:68:38:66:7a:96:61:fa:47:17:99:de:d8:93:
65:d0:74:a1:b2:c0:ef:e3:fd:08:0a:9a:fa:a3:86:3e:f4:ab:
08:3b:b7:14:dd:28:96:93:a4:af:f2:2c:0b:b1:36:a8:5a:e4:
18:e6:c0:f3:1b:11:4a:ec:bb:07:24:3b:f7:ab:59:c7:db:dd:
2f:49:08:33:02:25:5d:a6:23:e8:e2:5b:3f:52:c2:59:ee:2b:
80:74:2e:17:44:6d:75:0c:e3:ec:9f:bb:eb:5d:ae:a3:17:84:
0f:05:80:8a:30:8f:89:e4:8d:a3:3a:9f:98:2b:07:f1:bf:d5:
c8:21:83:be:b1:f7:e9:a5:b9:ac:15:e4:e0:04:5a:8a:5c:2f:
e9:cb:40:94:9b:0d:2e:ea:13:be:d2:fe:73:cc:b0:64:d8:6f:
db:75:ee:4b:42:d9:96:20:ea:c0:d0:98:8d:2a:69:39:99:8d:
3e:6e:95:1c:10:22:e3:2c:9b:16:80:dc:81:c4:15:2c:63:ee:
26:7c:be:27:39:bd:b3:56:5c:7a:67:15:3f:bf:5d:3e:2c:01:
40:4c:21:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:29 2026 by rpki-client