Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: i08AOaAq3ddoPnv6BbGLquxaItqoIRZmyH2d8lTiMp8=
Subject key identifier: 5C:FA:CC:60:B6:D2:59:94:A5:51:2F:D5:C0:12:FD:F8:65:1B:DC:44
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 019F190C54DA72F470E30C4F4DA9609FA67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 15:01:06 +0000
Manifest this update: Tue 30 Jun 2026 15:01:06 +0000
Manifest next update: Wed 01 Jul 2026 15:01:06 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: XJM7f5lAFMM+Ve/+Dffps25V+ZnVZOU2pRCfvPgm39Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:54:da:72:f4:70:e3:0c:4f:4d:a9:60:9f:a6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Jun 30 15:01:06 2026 GMT
Not After : Jul 1 15:01:06 2026 GMT
Subject: CN=5cfacc60b6d25994a5512fd5c012fdf8651bdc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:09:b1:0e:21:36:d6:72:39:45:b2:04:3a:
9a:27:dd:1f:55:12:0d:40:02:12:90:9e:3e:e4:37:
d7:19:37:da:6f:2c:63:37:e1:da:80:9d:89:ac:c6:
36:03:be:18:82:39:e5:d0:a3:ac:6c:57:6f:6b:9f:
3f:07:e1:cb:af:a4:85:01:f4:a1:4f:70:21:91:b8:
65:be:32:21:78:36:59:3e:fe:73:10:cb:91:fe:54:
cb:d9:77:83:99:93:ca:cc:21:e9:a6:81:f0:3d:7e:
00:ad:fc:92:33:dd:24:c5:07:2e:c5:fe:0c:b1:29:
c1:1a:c8:9b:65:2c:7c:58:73:9b:f3:b8:b0:67:2b:
aa:ba:a3:88:7f:3f:e3:6a:58:aa:f5:5a:81:5e:f6:
44:2a:8b:45:13:83:b3:1f:3d:14:9d:6f:5d:35:4a:
7b:ca:d6:b4:2b:4d:53:9f:2a:43:83:10:35:bb:92:
da:9b:72:1c:f2:a9:4e:a7:f9:bb:ae:d9:91:15:ac:
85:b7:51:fa:2e:ba:7f:1b:12:17:b4:b2:78:d0:d7:
99:5c:f6:91:53:ac:df:5d:22:31:45:cc:e9:f6:53:
c6:20:32:dc:6f:bd:7d:db:cb:3e:e4:cc:ba:d9:f2:
e8:59:1a:24:c3:f0:1c:b2:4d:7a:fc:e6:96:db:fa:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FA:CC:60:B6:D2:59:94:A5:51:2F:D5:C0:12:FD:F8:65:1B:DC:44
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d0:50:a0:f8:92:2c:c2:47:19:c2:8d:fe:28:b8:e7:96:c3:
dd:f7:2e:6c:20:f3:01:be:c0:b7:66:9a:77:2d:ed:99:bf:ed:
be:6a:3d:31:cc:d9:ed:f1:63:b2:f2:f2:42:d1:bf:33:d2:13:
34:66:ed:7e:a2:ab:14:36:1b:83:cc:46:a0:96:12:d4:ca:14:
fa:09:e8:63:26:01:02:14:5e:c7:e8:f5:73:cd:18:9e:d3:c2:
89:72:da:a0:c7:d1:f7:81:10:2c:45:d5:49:d3:3d:80:80:99:
55:79:22:ea:34:85:78:43:d1:cb:ab:58:78:31:b5:fa:99:80:
9e:8a:b7:71:af:15:ad:a3:1f:a9:43:eb:03:2a:fa:f3:bf:76:
81:05:d5:cc:e3:cb:90:10:c6:24:3e:49:9b:80:0a:b4:34:eb:
21:5b:80:39:70:45:17:9e:cc:4c:05:87:00:c8:fb:8c:95:38:
b4:84:18:13:14:0b:97:aa:0c:14:e2:42:2c:73:97:d1:01:59:
a7:67:9d:d0:91:33:7a:f8:0a:98:05:27:9f:e5:e3:22:48:6d:
88:14:cf:0e:9a:23:bb:7a:ff:01:07:ee:72:52:04:2c:25:fa:
05:b0:76:25:dd:2e:cf:b3:81:88:44:13:0f:3b:99:2d:c6:5e:
c0:51:0e:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDFTacvRw4wxPTalgn6Z7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjVjNjQwYjRhYTE0YjI2MTE5MjkzZGM2MTNkYzYzNjZh
NTY3ZjYwHhcNMjYwNjMwMTUwMTA2WhcNMjYwNzAxMTUwMTA2WjAzMTEwLwYDVQQD
Eyg1Y2ZhY2M2MGI2ZDI1OTk0YTU1MTJmZDVjMDEyZmRmODY1MWJkYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNcJsQ4hNtZyOUWyBDqaJ90fVRIN
QAISkJ4+5DfXGTfabyxjN+HagJ2JrMY2A74Ygjnl0KOsbFdva58/B+HLr6SFAfSh
T3AhkbhlvjIheDZZPv5zEMuR/lTL2XeDmZPKzCHppoHwPX4ArfySM90kxQcuxf4M
sSnBGsibZSx8WHOb87iwZyuquqOIfz/jaliq9VqBXvZEKotFE4OzHz0UnW9dNUp7
yta0K01TnypDgxA1u5Lam3Ic8qlOp/m7rtmRFayFt1H6Lrp/GxIXtLJ40NeZXPaR
U6zfXSIxRczp9lPGIDLcb71928s+5My62fLoWRokw/Acsk16/OaW2/qTWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFz6zGC20lmUpVEv1cAS/fhlG9xEMB8GA1UdIwQY
MBaAFOH1xkC0qhSyYRkpPcYT3GNmpWf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEt
ODk4YjI3Y2JmYzQ3LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEtODk4YjI3Y2JmYzQ3
LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNBQoPiS
LMJHGcKN/ii455bD3fcubCDzAb7At2aady3tmb/tvmo9MczZ7fFjsvLyQtG/M9IT
NGbtfqKrFDYbg8xGoJYS1MoU+gnoYyYBAhRex+j1c80YntPCiXLaoMfR94EQLEXV
SdM9gICZVXki6jSFeEPRy6tYeDG1+pmAnoq3ca8VraMfqUPrAyr68792gQXVzOPL
kBDGJD5Jm4AKtDTrIVuAOXBFF57MTAWHAMj7jJU4tIQYExQLl6oMFOJCLHOX0QFZ
p2ed0JEzevgKmAUnn+XjIkhtiBTPDpoju3r/AQfuclIELCX6BbB2Jd0uz7OBiEQT
DzuZLcZewFEOew==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:45 2026 by rpki-client