Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier: F2+bUFvTviE8wuVL6xTdGsCpPdkLjFfO/BHKfesNcsk=
Subject key identifier: EC:04:38:13:05:D2:3A:76:9F:BE:43:B4:9B:17:92:32:06:BA:63:75
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial: 01A00100DF7C6CBF30A807ECF45A9009089C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 16:00:29 +0000
Manifest this update: Fri 14 Aug 2026 16:00:29 +0000
Manifest next update: Sat 15 Aug 2026 16:00:29 +0000
Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: pIBsoKlxkMPzQ68Co5P09TO0rNnfB8ZWSbPY63XJi5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:df:7c:6c:bf:30:a8:07:ec:f4:5a:90:09:08:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Validity
Not Before: Aug 14 16:00:29 2026 GMT
Not After : Aug 15 16:00:29 2026 GMT
Subject: CN=ec04381305d23a769fbe43b49b17923206ba6375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:9d:5d:6c:34:7c:5a:52:be:63:a0:74:84:
b9:56:92:19:42:82:57:94:ab:b6:1a:98:ac:e1:59:
80:33:3f:bc:35:96:4e:b1:28:cf:50:6b:c4:77:a8:
20:ad:88:3c:af:47:e6:a0:68:7f:e9:05:7f:8c:e9:
00:80:5a:a7:02:2f:74:e3:b7:fe:5a:ea:4e:d6:19:
7f:06:9f:6b:98:c3:39:2c:23:ce:22:f4:e5:f4:cd:
87:02:81:2d:72:96:42:25:53:8c:07:8c:c4:84:c0:
80:db:71:bf:4d:42:43:02:e5:9b:13:07:67:69:54:
3a:bb:b2:b9:3e:a0:7a:57:c8:f4:1b:a4:2a:dd:b6:
90:44:d8:aa:f2:cb:0d:8e:0b:f4:6b:bc:a3:92:5c:
3b:9e:24:1d:1c:72:ff:d3:b7:b7:82:1d:5d:e7:f0:
ef:f4:f0:1a:d7:0f:07:04:2f:8b:d6:60:bf:84:ce:
71:8a:d9:97:e4:a4:15:01:2c:a7:90:2d:cb:93:8f:
ac:0f:90:e1:a4:9f:88:ca:6b:cd:46:72:bc:37:0d:
85:61:7b:07:b9:dc:f7:1c:84:83:7d:5d:3c:8d:66:
bf:28:51:24:32:4b:2d:d8:52:93:90:24:7f:7d:b9:
3b:33:69:8f:e8:8e:97:c4:c9:b1:5f:60:91:12:42:
a5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:04:38:13:05:D2:3A:76:9F:BE:43:B4:9B:17:92:32:06:BA:63:75
X509v3 Authority Key Identifier:
keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:e9:49:8b:aa:30:d8:c7:39:14:8c:67:74:b9:45:86:0a:85:
51:20:54:8c:37:82:ce:7f:c8:e2:4e:7b:7d:3c:03:00:d6:f8:
d3:63:84:47:f2:da:02:5d:c1:d4:19:0c:06:de:5b:cd:d9:90:
92:36:a3:46:99:01:27:7d:ec:3a:f7:fb:c9:38:ed:0d:2a:af:
fe:02:79:ed:9c:d0:8a:8c:90:f7:66:66:4c:51:6e:82:b8:9f:
13:5f:49:23:92:6c:ae:8f:83:cd:16:f2:e5:6c:80:95:7b:b7:
91:d9:07:70:e5:8c:b5:2d:b4:62:4f:7b:09:88:1e:e7:47:93:
29:30:a7:a7:7e:df:8e:e9:76:77:f7:99:e4:85:76:a0:61:75:
7c:e3:36:67:21:04:70:98:56:74:0b:b0:ba:ff:77:e3:87:50:
a3:f4:97:46:aa:0f:61:e2:10:1b:c3:98:ad:2f:a6:db:16:22:
a9:b8:26:b0:59:97:95:27:f6:05:9b:0d:f1:ae:8c:25:93:95:
ea:1d:7b:96:2c:7b:ba:a1:15:34:f8:d7:ed:04:87:0a:0d:98:
06:04:ca:71:1c:c6:1c:f9:cd:fd:e4:1f:32:9b:d4:90:b6:b0:
84:6d:da:4d:34:6f:fb:e8:33:44:25:b6:ce:da:d3:0b:d5:a4:
6d:74:4f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:44 2026 by rpki-client