Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier: pGYI2vlvDp/G9bze/6U4AmHqyYdAI+uxmKv/kQEQdfQ=
Subject key identifier: 90:D8:E5:D3:3F:DE:BA:62:06:EC:1D:4A:07:FE:64:FA:1B:59:92:24
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial: 019D38D29573EA458E5527D26B9F3294640E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number: 0F74
Signing time: Sun 29 Mar 2026 09:00:17 +0000
Manifest this update: Sun 29 Mar 2026 09:00:17 +0000
Manifest next update: Mon 30 Mar 2026 09:00:17 +0000
Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: 7CDBXa0Lx7RaTNS/lqaUJNmGLvbQytxyFc8V4SJYZkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:95:73:ea:45:8e:55:27:d2:6b:9f:32:94:64:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Validity
Not Before: Mar 29 09:00:17 2026 GMT
Not After : Mar 30 09:00:17 2026 GMT
Subject: CN=90d8e5d33fdeba6206ec1d4a07fe64fa1b599224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:af:f8:27:e0:2c:92:96:08:eb:44:c0:ac:
55:c1:0e:f2:d9:4c:cb:68:30:f1:ff:2c:ec:fd:d6:
8e:f5:8a:73:a6:57:f0:4a:d3:b8:d2:fd:f5:f3:5e:
a4:47:4b:31:38:c0:ff:d3:fb:f8:46:3e:ca:f5:28:
75:22:aa:ca:e5:4f:93:ca:f9:78:57:eb:26:69:b2:
9e:eb:0a:0e:4d:3d:d0:d2:92:97:c8:aa:93:67:e0:
23:56:eb:a7:65:5c:f0:92:2f:e2:60:03:bf:62:20:
34:13:49:9e:e6:a6:92:53:db:72:c8:58:02:3c:17:
65:59:ef:49:74:71:30:fc:4f:dd:55:98:1f:6b:a6:
a4:bc:a8:90:ca:5a:0e:f4:77:f2:e7:84:de:b1:30:
f9:7b:3d:42:26:1d:19:10:c8:ba:3e:49:8c:09:97:
4b:59:8b:94:93:cb:c9:70:de:95:ae:4e:30:e2:4b:
9c:a6:4f:6c:e9:71:0f:d0:b7:24:41:d8:17:9c:be:
0a:00:2d:e0:88:9e:6a:05:38:04:ca:1c:b0:20:ce:
11:b5:12:07:43:dc:da:85:40:1f:cf:75:ea:73:d2:
ad:b8:11:6d:87:bc:f6:58:56:5e:04:17:c7:b7:00:
77:5a:5d:2b:2a:75:de:ed:7d:62:2c:a1:7a:0a:53:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D8:E5:D3:3F:DE:BA:62:06:EC:1D:4A:07:FE:64:FA:1B:59:92:24
X509v3 Authority Key Identifier:
keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:71:0a:a4:50:db:5c:7f:2b:02:e6:a7:c4:86:d0:67:f4:2e:
82:71:ad:f7:ac:b9:2a:2e:71:30:2e:d7:ab:97:7a:41:95:4b:
38:55:ac:f2:08:09:67:c8:69:59:c8:08:d0:57:10:2b:4a:3e:
43:db:6f:a6:71:94:04:b5:53:82:d5:1d:32:15:c0:c0:9b:1d:
a2:b0:a9:f7:b2:31:78:bb:0b:8f:71:f2:47:11:46:7b:81:80:
83:69:bc:d0:09:e7:5d:6b:7c:00:f2:af:d4:ae:da:6b:be:03:
75:e5:6d:9f:2e:8a:46:0e:3a:31:dc:9a:e8:53:bd:4b:fb:c8:
2a:03:f8:16:28:b7:c3:c5:9d:15:71:56:1d:2d:48:da:7c:ae:
20:00:72:6f:0f:ba:8b:08:ac:43:c3:a3:b3:2a:55:d1:ed:7f:
75:f0:46:59:c0:90:59:9d:81:b5:0d:13:da:03:6c:ea:39:8d:
04:59:a0:ed:8d:9f:30:d4:a0:f8:14:11:1a:83:80:fa:34:18:
7d:c3:9f:5c:0f:45:4f:fa:fd:2e:b0:88:e9:84:8c:a3:18:6f:
d6:83:cd:59:13:eb:1e:ba:55:60:2a:24:25:c7:71:7c:d2:9f:
36:8c:be:7e:73:03:30:d2:16:78:73:9c:be:36:6d:79:41:39:
1e:1d:6b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:17 2026 by rpki-client