Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: yske4upmavPBU3Uc3sd3xsvKHJ5935B4UR+/lVy7k5g=
Subject key identifier: 8A:31:07:4B:67:70:D8:82:6E:FC:9B:99:89:D6:B1:0D:81:C5:1C:51
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 019E30E0E5A47B06D2B9F32B9B028AC1364C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 1876
Signing time: Sat 16 May 2026 13:01:45 +0000
Manifest this update: Sat 16 May 2026 13:01:45 +0000
Manifest next update: Sun 17 May 2026 13:01:45 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: T+Mtf8/RvNvrme3zIBUCgxYdIGZ5lEe3uHDVRmP6fC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:e5:a4:7b:06:d2:b9:f3:2b:9b:02:8a:c1:36:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: May 16 13:01:45 2026 GMT
Not After : May 17 13:01:45 2026 GMT
Subject: CN=8a31074b6770d8826efc9b9989d6b10d81c51c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:19:fb:50:6e:9e:0d:24:67:4f:99:b0:f4:
ab:66:f7:91:7d:b9:70:00:a5:2c:6d:b6:f3:7a:71:
2a:7f:9f:f7:f3:01:fc:c6:ec:7e:51:07:7e:d6:c7:
ed:77:69:36:5c:14:ef:9a:9b:c5:8c:fa:f1:5b:d2:
99:4f:13:98:71:de:e7:77:7d:d9:5e:9e:1c:37:c2:
aa:f8:8a:b6:60:42:ea:b9:b1:54:59:bf:7a:5f:16:
90:9b:cb:0a:03:ef:28:ac:78:87:a7:03:08:e1:d3:
81:28:a9:94:ea:3a:d6:e4:f9:2b:1b:e5:4a:0a:1b:
6b:c4:15:37:10:70:11:40:a0:c7:8c:62:08:ef:c5:
6f:a3:38:47:86:37:5d:db:85:ed:90:e3:e9:7b:8a:
ca:23:f4:1f:a0:f8:3d:51:ae:3b:a7:9c:57:9c:af:
5d:d8:e4:cb:fd:b5:1c:b2:6a:5b:6b:99:18:37:9c:
f0:de:c4:ef:c4:73:76:1a:5e:f2:7c:73:c4:e1:f3:
6f:eb:4f:5e:e4:7e:77:fc:7c:5c:f0:0e:cc:1e:b7:
48:3c:ad:94:be:ab:7c:e5:16:01:75:5c:7c:54:93:
0c:39:1b:2e:94:ed:bc:e6:70:10:e9:c3:87:c3:12:
52:c6:2d:2f:7e:c5:37:51:7f:02:51:9f:84:a1:89:
67:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:31:07:4B:67:70:D8:82:6E:FC:9B:99:89:D6:B1:0D:81:C5:1C:51
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e2:42:9c:39:1d:e0:31:37:46:fc:4e:96:9d:8c:53:ee:b9:
b4:a5:6c:d0:23:49:e0:bd:a1:a3:5e:10:10:72:4f:07:82:98:
09:a3:1d:9d:99:01:83:9f:5e:99:ce:eb:87:9c:12:e4:17:89:
16:12:85:2c:24:fc:4e:80:06:9f:fc:06:e5:52:7f:40:9c:8a:
b1:e4:b6:b8:94:9e:05:f7:56:76:96:15:f9:93:5b:c7:ab:03:
7e:ae:f3:38:03:4f:24:e4:5b:8b:c6:37:76:8d:43:3e:f9:ce:
6d:82:a5:15:2a:1e:a1:45:bd:1d:d4:81:21:f0:1e:1a:24:a6:
e3:e3:ac:30:17:75:6d:86:ef:54:bf:9c:d5:92:8e:91:80:f5:
00:ad:3b:81:60:91:be:2d:bb:0e:fe:38:91:2f:de:6f:b1:89:
92:19:82:cc:26:a7:b2:5d:a3:69:11:a7:29:e0:58:a4:80:b2:
a8:13:c2:f9:83:d3:d7:c8:f0:d4:47:6f:13:d2:12:aa:0a:a0:
1c:d7:07:12:b6:7f:ff:90:d6:2e:e7:6d:81:03:57:95:75:c6:
95:1a:ce:e1:c7:c9:5d:6a:81:6b:d3:35:a5:48:ce:61:2f:f0:
8d:e0:e8:46:49:1b:ed:0d:f7:f2:c0:3e:66:59:89:49:e7:02:
56:58:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:51 2026 by rpki-client