Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: vZgi1pW3tui9l2ZrDeEuMSewAvcmPIjOEc9vIRtPVeU=
Subject key identifier: FC:6E:49:98:C5:89:84:97:DA:54:1C:83:B2:37:38:A9:F0:82:DA:19
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 019D37C125C338C2F6D6D18D55865D5B2893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 17F5
Signing time: Sun 29 Mar 2026 04:01:38 +0000
Manifest this update: Sun 29 Mar 2026 04:01:38 +0000
Manifest next update: Mon 30 Mar 2026 04:01:38 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: cOUNnjMVVcU3QOdIKy0dCvCQIT0tL8PgXTYbmjQCxwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:25:c3:38:c2:f6:d6:d1:8d:55:86:5d:5b:28:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Mar 29 04:01:38 2026 GMT
Not After : Mar 30 04:01:38 2026 GMT
Subject: CN=fc6e4998c5898497da541c83b23738a9f082da19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:ab:2f:c8:31:7f:ea:83:00:10:29:ad:60:
e6:d1:a3:46:f9:ef:10:17:3f:d0:68:a2:02:fc:07:
07:80:b5:b9:03:81:e8:a1:ca:80:a9:da:1d:fc:21:
42:2f:e6:2e:71:d1:6b:fb:32:48:a9:41:f1:1c:fa:
e4:58:51:6b:78:57:24:ac:3d:59:eb:09:81:07:e2:
2a:7d:10:1b:3c:43:2d:37:49:7c:b7:b4:3b:44:0c:
77:52:b0:e8:7b:c5:58:c5:54:44:98:04:ce:c1:f6:
71:87:d6:a2:14:9d:72:c2:86:6a:6e:7e:2e:27:7c:
85:80:1b:27:f5:7f:b4:fa:81:89:8a:09:2b:65:8d:
53:f9:d1:1f:0d:6c:90:ec:ca:05:70:bf:6e:6d:37:
f2:da:2b:24:ae:93:fa:3d:d9:98:0f:81:28:25:96:
0c:c4:58:e7:16:b2:e3:5d:65:c8:d6:81:1f:26:bb:
33:bc:36:15:71:a5:a5:72:f9:c5:bd:b3:ff:a2:05:
66:18:f7:dd:97:65:51:c1:34:eb:f3:e2:a6:f6:2b:
9a:67:0f:2c:80:60:75:ba:1d:36:3c:d8:5b:2d:5e:
90:ac:0e:f8:1d:ae:dc:43:2c:e1:13:95:1e:7f:27:
25:90:0e:b4:42:a2:61:a3:d2:3a:e2:55:91:d1:b5:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6E:49:98:C5:89:84:97:DA:54:1C:83:B2:37:38:A9:F0:82:DA:19
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:82:28:20:0d:87:a8:e1:f7:32:8c:08:02:50:ed:f5:24:02:
16:a7:fd:d1:64:50:1e:4d:24:96:f1:a9:55:77:9a:7c:cc:ca:
94:a3:6f:cc:54:20:10:65:80:e5:9d:01:3d:b8:53:0d:af:2a:
51:23:6d:0c:b4:46:8e:b2:00:6a:69:47:da:a1:72:5a:b5:7b:
25:ab:27:9c:40:4a:63:44:52:e5:f4:b0:33:16:b7:a3:52:0a:
91:d6:ac:63:42:37:31:a9:a9:d1:8c:8a:90:70:bf:46:de:93:
48:4e:55:56:a0:18:a9:4a:6b:86:a5:58:34:67:83:73:9f:50:
45:0c:dc:0c:26:51:88:0d:ec:33:b1:11:cd:e2:ba:1e:58:33:
ff:45:41:04:45:07:75:10:aa:ca:29:f9:13:fd:35:63:2d:78:
35:1f:65:cf:47:8f:b4:ab:1e:8e:d4:49:3d:87:fa:82:90:37:
8a:72:35:c9:17:90:89:91:e8:81:4a:24:7b:df:32:ae:5f:f9:
6d:67:2f:94:2b:99:d5:50:2e:25:66:2f:f2:fb:98:33:45:c7:
32:c4:3c:ed:93:1b:1b:a9:09:08:8c:04:8b:ab:84:41:b7:ba:
8d:aa:08:11:cf:11:7f:88:13:92:79:12:f5:08:93:64:ac:5e:
68:8a:70:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wSXDOML21tGNVYZdWyiTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMmVjNzRkYTU0OTM2YmVmNDJmZTI2MDU5N2RkNmQyMWRj
Y2VkZmMwHhcNMjYwMzI5MDQwMTM4WhcNMjYwMzMwMDQwMTM4WjAzMTEwLwYDVQQD
EyhmYzZlNDk5OGM1ODk4NDk3ZGE1NDFjODNiMjM3MzhhOWYwODJkYTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxomrL8gxf+qDABAprWDm0aNG+e8Q
Fz/QaKIC/AcHgLW5A4HoocqAqdod/CFCL+YucdFr+zJIqUHxHPrkWFFreFckrD1Z
6wmBB+IqfRAbPEMtN0l8t7Q7RAx3UrDoe8VYxVREmATOwfZxh9aiFJ1ywoZqbn4u
J3yFgBsn9X+0+oGJigkrZY1T+dEfDWyQ7MoFcL9ubTfy2iskrpP6PdmYD4EoJZYM
xFjnFrLjXWXI1oEfJrszvDYVcaWlcvnFvbP/ogVmGPfdl2VRwTTr8+Km9iuaZw8s
gGB1uh02PNhbLV6QrA74Ha7cQyzhE5UefyclkA60QqJho9I64lWR0bWS8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxuSZjFiYSX2lQcg7I3OKnwgtoZMB8GA1UdIwQY
MBaAFOAux02lSTa+9C/iYFl91tIdzO38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTIt
MDFiOGIwZjRiMDE5LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTItMDFiOGIwZjRiMDE5
LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4IoIA2H
qOH3MowIAlDt9SQCFqf90WRQHk0klvGpVXeafMzKlKNvzFQgEGWA5Z0BPbhTDa8q
USNtDLRGjrIAamlH2qFyWrV7JasnnEBKY0RS5fSwMxa3o1IKkdasY0I3Mamp0YyK
kHC/Rt6TSE5VVqAYqUprhqVYNGeDc59QRQzcDCZRiA3sM7ERzeK6Hlgz/0VBBEUH
dRCqyin5E/01Yy14NR9lz0ePtKsejtRJPYf6gpA3inI1yReQiZHogUoke98yrl/5
bWcvlCuZ1VAuJWYv8vuYM0XHMsQ87ZMbG6kJCIwEi6uEQbe6jaoIEc8Rf4gTknkS
9QiTZKxeaIpwSQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:16 2026 by rpki-client