Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: qgw4ewMVvx59DPBgwxIyJZJlnQQ1shF531qXRdooz1Y=
Subject key identifier: 9A:48:33:8B:DC:47:F9:C8:56:74:51:30:70:9C:6A:D1:A0:D2:81:B8
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 019D3A1C41FCD83977F05C0713F8CAC1F095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 15:00:23 +0000
Manifest this update: Sun 29 Mar 2026 15:00:23 +0000
Manifest next update: Mon 30 Mar 2026 15:00:23 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: weHIFwBVO4NHggD0X0iOfN+p4RbjUaXxWFm9umu+P48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:41:fc:d8:39:77:f0:5c:07:13:f8:ca:c1:f0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Mar 29 15:00:23 2026 GMT
Not After : Mar 30 15:00:23 2026 GMT
Subject: CN=9a48338bdc47f9c856745130709c6ad1a0d281b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:35:67:24:07:97:b1:72:b5:36:10:bf:2a:
b5:05:8f:b4:e7:19:ff:c8:58:a4:b4:45:3b:ab:4a:
16:74:74:f7:5b:a6:59:42:50:2f:6f:09:19:3d:7c:
f9:9e:85:af:53:6d:a2:a9:a3:cf:63:f3:e0:d3:e3:
7f:75:28:d4:22:8a:71:82:ea:2f:c5:de:96:18:33:
44:ae:71:61:17:22:32:d6:31:b2:9a:22:05:21:f0:
1c:6c:40:6c:d8:48:7d:4c:b8:53:45:aa:07:54:91:
00:5d:df:00:a8:25:ca:da:c3:37:b6:0f:95:c5:96:
29:a4:b1:aa:10:77:40:8c:21:45:cb:c8:49:06:59:
e3:16:69:e4:19:93:44:52:4c:6f:8b:b2:4d:bc:67:
96:51:2a:56:50:19:41:04:61:69:f0:bd:eb:a0:0a:
42:23:da:9c:76:ea:f7:a9:ee:a7:ed:c3:95:20:ed:
ce:59:38:81:39:c8:34:c2:e1:19:38:30:ff:ed:d4:
43:ff:12:a4:85:a9:91:33:5a:be:d2:9b:d1:b5:a5:
b1:af:be:6b:ad:c5:d2:b6:e0:c1:c5:68:88:77:d6:
7b:f2:28:63:67:8c:b2:65:79:ec:a4:15:04:73:7b:
1d:50:74:af:3d:8f:9a:5b:8a:53:76:bd:82:ff:5e:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:48:33:8B:DC:47:F9:C8:56:74:51:30:70:9C:6A:D1:A0:D2:81:B8
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c2:d6:c5:9c:3d:10:40:f7:55:f6:e5:de:e2:23:2d:c7:e7:
66:66:da:92:81:46:db:d9:4e:ac:73:c1:07:f7:03:a2:02:5e:
c4:d9:c1:ca:a7:fc:60:0d:c7:aa:1e:1b:87:a0:f6:6a:fd:75:
83:5e:af:1f:cb:b9:7a:83:25:4a:b2:7e:dc:51:3d:c4:4d:9d:
0d:44:23:50:b9:1d:5a:fe:77:f2:ce:20:80:9e:71:ab:48:45:
e7:c6:56:94:17:83:71:c3:b8:a6:28:df:23:0b:81:61:df:32:
6f:17:ce:bf:c3:27:2a:29:9b:ef:ea:52:d9:a6:98:ff:69:da:
6d:c7:75:ab:b1:a0:0f:c6:26:17:55:3f:94:d7:8f:ec:40:db:
93:78:7e:93:a3:fb:bf:49:6a:09:71:6e:06:ad:d9:10:19:59:
0e:69:26:b2:8f:4d:ac:c8:b5:9b:7a:c7:ad:7e:d4:a6:34:eb:
2f:3d:9f:64:a3:b0:a3:7b:76:95:f8:bb:6d:d4:d8:7a:13:8b:
6c:64:9c:ea:d7:55:2b:52:2e:54:66:1d:2c:a9:e0:3a:ab:4a:
ca:22:15:f9:1f:77:8a:89:44:84:9e:b4:8d:bb:83:50:d1:2e:
97:e2:4c:aa:cf:52:3f:e2:fd:4a:0a:eb:3e:c3:97:2b:b0:52:
b8:fe:88:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:59 2026 by rpki-client