Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier: CKIwp5dF7bUTFSrrQmScoRLUF9/NtkmM8FbmUybTbWI=
Subject key identifier: C7:37:CC:D9:CD:EF:55:CE:AE:A3:11:9D:D7:CF:CE:29:1E:61:C2:3E
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial: 019D386559A76B1D7C0CB8688FB30C3CBD7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:00:59 +0000
Manifest this update: Sun 29 Mar 2026 07:00:59 +0000
Manifest next update: Mon 30 Mar 2026 07:00:59 +0000
Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: uvVDmZE/9Aa6FIxVgsFPOOXTVKzlb3yNSOz0wM83eTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:59:a7:6b:1d:7c:0c:b8:68:8f:b3:0c:3c:bd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Validity
Not Before: Mar 29 07:00:59 2026 GMT
Not After : Mar 30 07:00:59 2026 GMT
Subject: CN=c737ccd9cdef55ceaea3119dd7cfce291e61c23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:8c:65:71:b9:ec:78:2e:93:cd:7c:80:82:
d4:a4:c8:3f:03:2b:f0:d3:d3:da:fd:c5:42:4a:e7:
76:ad:31:d4:c9:5d:8d:b4:a3:37:0b:89:65:1f:29:
d0:ec:58:5a:86:55:e8:2f:3a:03:51:9d:64:31:30:
00:96:b4:bf:07:8a:55:b4:2b:65:56:bd:dd:30:62:
62:57:22:84:ac:56:83:b6:38:a2:fa:c8:2e:aa:fb:
98:ea:9c:ba:d9:5a:11:55:6d:f4:63:fc:38:d8:88:
08:e3:7f:e7:ea:81:4c:c8:94:01:e0:d7:b0:95:2e:
90:ce:c4:dc:66:d5:bd:1c:5e:7f:a9:4a:30:a0:c7:
53:c2:34:28:36:2f:25:6f:15:2c:67:53:4e:41:fe:
b0:66:ec:10:3c:fa:fb:e1:48:4a:31:93:d5:4a:92:
77:ce:f0:e5:3e:09:3d:91:04:67:ab:d6:9b:1f:d5:
23:13:ca:94:d7:f3:77:c3:de:8d:82:f3:ef:09:e4:
3b:85:cf:01:3c:c2:a2:12:4f:14:ea:2b:aa:a9:bb:
22:8f:2f:e5:df:40:18:7d:6b:2f:97:50:7f:1e:c3:
5a:5e:3e:81:bc:d3:b5:8e:6b:43:14:0c:0a:2a:a2:
db:34:f2:99:bf:b1:53:6f:e2:40:76:75:48:6b:97:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:37:CC:D9:CD:EF:55:CE:AE:A3:11:9D:D7:CF:CE:29:1E:61:C2:3E
X509v3 Authority Key Identifier:
keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:24:a7:92:c7:aa:58:56:2a:99:c3:6b:29:ec:5c:46:d9:28:
b3:fd:05:28:8c:02:e9:6e:aa:4a:e8:8e:73:0e:02:73:0c:18:
66:d9:67:e9:df:9b:9b:4e:6b:2c:f1:52:05:00:30:a2:c6:4b:
b5:4b:c9:c4:9e:77:a0:f3:0c:6b:b5:3c:23:b6:bc:5f:de:49:
b9:4b:13:e2:77:81:63:b9:55:c6:c1:ba:e3:b8:99:53:ee:a5:
74:85:29:78:a1:68:77:53:8e:9d:37:b3:54:d1:40:ea:eb:4c:
34:3f:b8:ef:2b:5f:c3:5a:53:4e:79:31:e1:3e:01:6f:37:85:
d5:14:dd:9d:f5:bc:f5:ec:1c:55:e5:2e:cc:2e:85:2d:f2:50:
cd:e2:2d:20:13:0a:b0:a7:1a:f4:5f:d9:77:72:7d:47:5b:d3:
c7:3e:c4:ba:74:a5:6f:b1:cf:85:e8:91:0c:bb:9c:4c:e5:f4:
f2:ed:82:83:c0:57:bb:c0:f3:66:60:5b:78:6f:c1:96:80:40:
57:66:19:4c:a8:72:fb:6d:c8:ae:70:31:c8:49:5a:45:ea:f6:
cf:32:47:2a:5c:22:64:47:0b:35:1d:db:65:7d:da:4c:45:b0:
7c:ea:2a:a2:b3:8a:4c:66:d9:b9:6a:8e:dc:7d:23:6c:e8:19:
ea:da:6d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:31 2026 by rpki-client