Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: w9WUqVX8KwcBAy1FcvNw9dQYClKlFOquRKKZqrKW4gA=
Subject key identifier: D3:86:43:AC:F5:05:1E:9D:1A:27:DD:11:65:04:93:3A:75:57:1F:8C
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 01A000CA43E0E5925AF70ED64A7E840E2730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 19FC
Signing time: Fri 14 Aug 2026 15:00:50 +0000
Manifest this update: Fri 14 Aug 2026 15:00:50 +0000
Manifest next update: Sat 15 Aug 2026 15:00:50 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: OskqvPlnDfs5fmIpM25v2yLKG6IGDpsi5YDOQVBbbrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:43:e0:e5:92:5a:f7:0e:d6:4a:7e:84:0e:27:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Aug 14 15:00:50 2026 GMT
Not After : Aug 15 15:00:50 2026 GMT
Subject: CN=d38643acf5051e9d1a27dd116504933a75571f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:47:d5:62:c6:5f:7e:fb:77:f6:68:34:71:
9f:af:0e:29:67:8b:ff:80:32:e2:68:d4:29:d3:e3:
19:23:95:59:50:eb:3e:29:45:73:7e:f3:04:9d:76:
14:da:40:4d:78:6b:17:cc:ae:02:dd:d2:8c:66:0a:
1c:41:d8:2a:4b:a2:2e:28:f2:1a:18:8b:6d:8e:d7:
0f:b6:21:87:2e:0a:fb:d7:e0:07:d1:6b:6f:dc:fe:
2c:5c:36:c6:0e:77:e2:0f:36:1e:cf:ba:bb:39:82:
b7:61:84:50:10:a8:9b:44:21:2a:84:d4:37:63:bc:
1f:58:16:1d:e4:ed:aa:50:45:4b:18:66:4a:9f:08:
67:fa:22:88:d2:80:ac:01:ea:92:3b:ab:c6:e7:e6:
d8:4c:63:60:2c:95:9e:eb:33:93:36:d5:fc:a1:7c:
ae:56:10:cf:de:f6:43:fe:21:fb:0a:e7:f0:9d:87:
44:2b:f0:10:e5:3d:b9:50:10:9b:b5:a1:db:8d:a7:
c8:dc:51:d5:f9:59:26:4e:4a:b7:79:89:fa:c0:75:
04:2f:7b:99:e0:bb:b3:45:b5:04:28:88:25:51:4c:
9b:ea:d6:12:29:93:60:ff:84:c7:6e:e6:da:df:3f:
7b:8f:a3:4d:84:87:1a:a4:8d:a2:f7:e7:bf:11:0d:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:86:43:AC:F5:05:1E:9D:1A:27:DD:11:65:04:93:3A:75:57:1F:8C
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:c3:8e:a7:1d:ca:7c:32:1a:5f:12:d0:64:2e:8d:30:0c:d2:
3b:af:cc:4e:1a:92:96:5c:66:6a:02:74:d8:f0:5e:73:8c:b1:
d4:95:32:05:8a:62:7d:d2:3a:f1:2b:a4:82:e4:8f:39:f0:b2:
f8:b6:ca:e5:3d:8f:1e:a1:90:21:0e:06:21:39:1c:d7:78:8d:
92:ee:42:64:da:19:af:f6:98:b8:a0:f5:e3:92:30:69:e7:ad:
37:c5:a9:57:e7:78:4b:0e:67:c0:05:a3:8d:34:78:97:ca:72:
5e:a1:7d:7d:d1:fe:4c:b3:03:91:2c:75:d4:f5:e8:bb:5e:3b:
d2:32:0e:b4:77:0f:80:6e:63:52:7e:63:6d:20:7b:73:b3:ba:
40:f5:27:63:37:92:73:e5:de:85:aa:5e:31:f9:47:20:9d:b0:
cb:6b:0c:54:fb:5a:1d:a6:09:79:fd:84:2a:eb:80:98:78:ae:
a7:ce:cf:5c:7d:5f:56:1a:b1:b5:c2:9b:61:95:95:8b:db:1d:
ba:ff:ba:d1:4d:bd:fc:c2:f3:c1:4c:67:c7:c5:25:aa:71:ff:
94:e8:01:9b:32:10:ab:4e:c4:37:e4:12:c2:64:75:ff:46:24:
76:4d:92:12:b6:42:b2:8b:34:f4:1f:46:1f:7d:13:74:46:27:
91:98:ce:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:12 2026 by rpki-client