Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
File: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json)
Hash identifier: WtmtpA848VyZGEDckUUd9Y84Q+C2UErhVAEPWE+z9FQ=
Subject key identifier: F5:9C:6F:DD:E2:DF:FE:6F:98:09:90:9D:16:E4:6B:19:29:7C:09:DF
Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
Certificate issuer: /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Certificate serial: 019D3909BC58C637972C454840A45B27BF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
Manifest number: 178A
Signing time: Sun 29 Mar 2026 10:00:32 +0000
Manifest this update: Sun 29 Mar 2026 10:00:32 +0000
Manifest next update: Mon 30 Mar 2026 10:00:32 +0000
Files and hashes: 1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: T3lMR3kjzCNkrypB8eldH0mz6+VBf8orI/X09/94dpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:bc:58:c6:37:97:2c:45:48:40:a4:5b:27:bf:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Validity
Not Before: Mar 29 10:00:32 2026 GMT
Not After : Mar 30 10:00:32 2026 GMT
Subject: CN=f59c6fdde2dffe6f9809909d16e46b19297c09df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:fa:74:0b:ef:3d:70:a5:aa:9f:31:6b:c0:
ab:ee:d8:a5:fd:94:cb:c8:a6:fe:c3:a3:6d:63:5a:
64:9f:4b:7f:65:db:22:4d:0e:64:9b:78:9f:7d:0a:
b8:9f:d0:1e:77:8e:4a:d6:bf:ab:70:4c:c1:f4:02:
bc:be:9e:c8:38:bf:6d:7f:aa:f2:8c:1b:8a:76:71:
20:5e:05:38:b3:ee:60:d2:74:20:4d:20:47:c0:d1:
dd:86:83:e4:d7:7c:f0:47:30:b8:41:c7:b3:4f:69:
51:94:86:cd:e5:28:34:89:aa:18:ca:0b:e6:bc:dc:
3e:7b:bd:73:18:8f:f5:78:bf:08:2c:b0:9d:77:c4:
7f:9c:a3:6c:02:b6:97:34:3e:48:ed:38:05:89:2a:
fb:fe:eb:e6:25:0f:9f:26:4e:7b:5b:03:9b:ee:34:
f5:55:02:da:cb:ed:3d:e9:7e:2a:5a:cf:8b:8c:fd:
cf:83:9c:c8:d5:19:e9:6b:94:1f:e2:e9:f8:d3:63:
34:ec:42:5f:7c:6b:f2:87:7e:91:25:f9:e6:12:40:
dd:1e:5c:42:6f:21:d1:33:1e:8f:3c:60:b6:8d:43:
8a:c5:d5:05:e2:e9:b1:9e:af:f4:a5:34:9a:2b:cc:
14:b1:f4:61:1e:b1:39:36:4c:b9:09:b5:93:d6:98:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9C:6F:DD:E2:DF:FE:6F:98:09:90:9D:16:E4:6B:19:29:7C:09:DF
X509v3 Authority Key Identifier:
keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5e:f0:a4:0f:5c:ee:f1:80:de:c7:c8:da:69:43:92:77:6f:
d7:43:b4:aa:50:67:22:ac:48:d7:be:2e:fe:88:6a:7b:77:b3:
a7:13:65:e1:6e:14:3d:52:5c:de:a4:3a:28:c2:42:17:f7:b8:
93:d0:27:c1:55:d9:a7:4b:d4:45:f3:0b:5f:e3:44:0d:5b:bf:
d5:15:88:48:bf:d5:9d:ff:f8:42:ed:c3:c2:92:3b:4d:9f:b1:
fc:82:ca:0e:44:82:a4:25:bd:e7:46:0b:2e:46:f5:b2:13:76:
7b:22:14:9d:d9:14:1e:4d:b0:8f:8d:d7:ce:21:b2:73:0b:c8:
39:db:3a:36:68:01:e9:2d:86:e0:4f:df:96:f0:47:00:37:c1:
ff:fa:85:cf:59:5e:11:84:1c:0d:ed:49:d5:17:ec:c9:4b:74:
3a:dc:40:96:49:17:9e:9e:03:4b:7c:7b:02:92:7c:d1:28:d1:
52:91:17:22:bb:b9:ec:1b:5a:1e:b7:f6:28:84:be:69:9a:68:
57:ed:0a:1e:b2:9a:06:58:cb:77:23:94:c3:eb:1f:0c:a0:fe:
57:d3:26:b1:c8:67:42:10:5c:5f:03:7a:75:63:cc:d2:68:33:
23:6b:60:b0:ed:7c:f7:9c:2b:b2:56:54:e0:70:0e:9f:c9:2f:
b7:33:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:52:23 2026 by rpki-client