Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier: 9pS1jH2/EV328MtFcyP0nlac7WrWAB9jd7ylWkI3kxk=
Subject key identifier: 2D:F4:B3:EF:6C:92:46:8D:18:B3:FA:8A:A0:FF:3A:1C:71:2C:D1:42
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial: 019E30052A89F0FC429B6DF1A6C7E03339F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number: 0FF4
Signing time: Sat 16 May 2026 09:01:45 +0000
Manifest this update: Sat 16 May 2026 09:01:45 +0000
Manifest next update: Sun 17 May 2026 09:01:45 +0000
Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: awggoMJjeUAWhFg49yFjclS9O+R/ycCb1wYemxDalgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:2a:89:f0:fc:42:9b:6d:f1:a6:c7:e0:33:39:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Validity
Not Before: May 16 09:01:45 2026 GMT
Not After : May 17 09:01:45 2026 GMT
Subject: CN=2df4b3ef6c92468d18b3fa8aa0ff3a1c712cd142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:48:d9:c7:04:d9:9e:cb:b2:2b:da:35:4e:
01:07:67:0e:46:7a:6e:dd:99:87:eb:fe:89:a7:a7:
70:bd:f4:4b:c1:61:54:b2:6a:05:a3:d9:cc:06:4c:
f9:e3:ce:d3:86:6b:9f:6d:1d:88:5f:9f:2a:b4:f7:
0a:9c:cb:c1:b4:53:14:6e:3d:de:d0:8e:97:90:92:
fb:ad:dc:85:d8:5b:71:69:ed:06:b5:90:40:68:d5:
10:59:f9:af:b6:4e:08:bc:f1:6c:96:d8:31:35:7d:
af:a9:d9:7a:ea:3a:cd:5d:35:e8:4b:7e:d5:03:36:
b6:80:00:c0:6a:a1:0e:1c:e2:67:e7:43:4a:a5:78:
2e:72:a2:f6:79:d8:4f:7f:33:9c:3b:01:e3:a9:39:
ab:c7:e2:1d:3b:20:ef:85:32:89:9d:3d:9b:89:b0:
a4:b0:ac:75:6f:03:41:93:13:11:c4:0c:9a:f8:ce:
c9:68:d1:ca:04:61:0c:61:8f:ff:5d:5e:76:b3:4d:
3c:5c:f5:54:c3:cb:9b:69:59:3c:5e:40:1d:74:eb:
53:66:56:0b:7c:27:d0:2b:5f:e2:e7:27:a2:d9:4c:
18:a1:cb:d0:91:be:50:a4:75:ce:a5:fc:4b:d0:62:
db:40:6f:49:7b:6f:b3:41:73:94:21:a3:4d:f5:65:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F4:B3:EF:6C:92:46:8D:18:B3:FA:8A:A0:FF:3A:1C:71:2C:D1:42
X509v3 Authority Key Identifier:
keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:29:77:16:d9:86:55:61:30:a0:f9:09:27:ab:0f:49:ab:5d:
ef:b9:2b:b8:ad:16:59:c8:f3:b7:cd:26:83:2a:c1:f0:66:ae:
d5:24:9e:20:ad:2f:35:a2:44:87:5b:d2:8f:c2:b5:47:ad:ee:
fe:f2:44:27:82:a7:de:b2:5b:7c:56:f9:3e:ef:16:b2:1b:e3:
8d:d2:7d:33:0a:9b:7e:49:6f:21:95:5f:3c:48:a1:73:f1:8e:
eb:03:dd:4e:99:b3:44:df:fb:aa:fc:2e:36:98:9b:33:2c:9d:
41:85:79:5c:b4:98:ca:f7:a9:e1:5f:a4:07:be:46:71:30:e2:
2e:86:aa:e2:16:d4:4a:e7:19:0d:24:9c:58:95:26:0a:87:c4:
dc:7a:91:79:27:ca:22:f9:19:3d:2e:58:b3:9d:45:fe:68:44:
23:0e:39:eb:b9:cd:fd:e4:11:98:77:27:43:ba:e3:15:5a:cc:
60:06:c8:eb:18:09:03:6d:b8:6d:57:e7:7d:bc:13:cd:3b:04:
5e:f5:57:ef:8d:65:cf:83:c0:8f:52:d1:cb:52:7f:1f:77:87:
26:3b:a2:e0:b1:57:32:a2:4a:57:d7:c2:bb:cb:95:a3:7c:3d:
ce:55:b6:78:49:a1:45:24:df:ea:eb:3e:e7:2f:51:4e:2b:64:
53:80:d1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:06 2026 by rpki-client