Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
File: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft (raw, json)
Hash identifier: DNqlPjd1rLr1lUm2ohkE7Rq91VaZFe5Glb/O0Uwx6Ew=
Subject key identifier: BC:CA:D2:28:FC:DA:97:33:0D:FD:F0:94:DA:D9:3A:DB:DE:81:8E:16
Authority key identifier: E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4
Certificate issuer: /CN=e0b867131100c15de890110063e638a5f02367c4
Certificate serial: 01A001DD5D8B8E0B4233164E6A5FDDF4B40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 20:01:19 +0000
Manifest this update: Fri 14 Aug 2026 20:01:19 +0000
Manifest next update: Sat 15 Aug 2026 20:01:19 +0000
Files and hashes: 1: 4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl (hash: YjTD/hcDsPYr0WKPRxUr3vR6JDuIjdMlYzdT6UB7NBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:5d:8b:8e:0b:42:33:16:4e:6a:5f:dd:f4:b4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b867131100c15de890110063e638a5f02367c4
Validity
Not Before: Aug 14 20:01:19 2026 GMT
Not After : Aug 15 20:01:19 2026 GMT
Subject: CN=bccad228fcda97330dfdf094dad93adbde818e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:72:ce:ff:c0:2e:71:2b:59:4d:1a:1c:c9:9f:
2f:fe:a4:3e:57:7a:58:f9:8e:8c:f3:ee:c4:a8:a2:
4a:11:d8:0f:38:65:83:c8:e4:cf:30:79:be:9b:d0:
52:ec:41:58:8d:14:88:86:ba:9a:38:a4:f0:fa:da:
68:50:e3:4a:85:c9:1f:b7:e0:c3:51:d6:83:6c:6e:
6d:8b:cd:6f:79:26:88:42:66:83:2b:89:e8:75:14:
65:48:66:90:ce:2a:92:0f:b4:95:8b:ff:8d:88:3f:
58:76:db:83:06:c4:81:48:9f:c6:5c:4c:68:e7:dd:
6d:d9:2c:80:22:0c:9e:a5:31:46:78:ae:e2:e3:88:
aa:ef:06:77:fa:0a:f1:b8:36:eb:40:39:4e:51:73:
46:37:1a:fc:30:58:b1:a8:c6:ea:e4:00:d3:38:00:
2e:6c:de:6a:f1:57:ed:99:0f:ac:cb:ce:88:cd:26:
ca:4b:08:00:97:68:ee:fe:91:d0:53:d6:3b:56:2b:
d1:dd:e1:4d:b2:b8:8d:0c:f0:7c:b3:97:51:d6:87:
8e:5e:cd:99:73:10:c1:18:10:ea:fb:a2:a0:f2:f8:
96:79:d7:51:6b:d5:32:10:3a:1a:ca:af:05:4e:31:
13:6f:bb:16:04:d3:26:97:e3:a4:8d:b0:9d:18:bf:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CA:D2:28:FC:DA:97:33:0D:FD:F0:94:DA:D9:3A:DB:DE:81:8E:16
X509v3 Authority Key Identifier:
keyid:E0:B8:67:13:11:00:C1:5D:E8:90:11:00:63:E6:38:A5:F0:23:67:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eee521-25fa-4006-9531-1e044814518f/1/4LhnExEAwV3okBEAY-Y4pfAjZ8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:45:49:00:a3:08:6c:cf:0e:2a:21:f4:c8:1e:55:7c:57:82:
70:bc:fc:03:09:d0:06:4d:3c:1a:ef:2b:6f:79:b9:9f:3a:65:
ba:33:18:b5:ea:6e:9a:4a:d1:db:f4:aa:d3:da:3c:8c:3b:6f:
da:e1:24:c8:34:24:87:43:2e:e2:35:c1:90:42:ac:a6:3e:ae:
7d:e1:53:56:b6:78:0e:88:4b:4b:92:e2:ce:f2:20:9f:22:2b:
c5:dc:26:5d:6b:7e:fd:57:83:cb:58:1c:a3:3c:b8:8b:d7:f4:
08:9d:aa:ad:bf:69:23:a0:01:4d:4c:40:5c:99:84:4b:b7:63:
46:42:8b:9b:02:0d:60:b2:5b:a8:a1:5b:63:3c:d2:52:21:3f:
b6:96:96:78:15:c1:02:aa:29:a2:66:60:c8:f6:80:bc:e8:7c:
2e:4d:34:f2:09:99:62:73:dc:5e:a0:cf:42:33:a0:88:4b:d3:
e3:d4:2b:e5:4a:12:0e:47:2e:f1:2f:2b:cc:87:96:6b:7e:c8:
1e:ea:50:b2:30:9e:f4:4e:9a:31:33:ec:54:30:39:25:fe:f5:
d3:37:31:4d:0c:14:36:cc:98:77:49:86:b8:c4:55:3b:85:9a:
01:9d:1d:a9:9d:d0:62:4f:b1:a6:73:79:6d:20:83:90:46:b6:
0a:3e:57:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3V2LjgtCMxZOal/d9LQOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYjg2NzEzMTEwMGMxNWRlODkwMTEwMDYzZTYzOGE1ZjAy
MzY3YzQwHhcNMjYwODE0MjAwMTE5WhcNMjYwODE1MjAwMTE5WjAzMTEwLwYDVQQD
EyhiY2NhZDIyOGZjZGE5NzMzMGRmZGYwOTRkYWQ5M2FkYmRlODE4ZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HLO/8AucStZTRocyZ8v/qQ+V3pY
+Y6M8+7EqKJKEdgPOGWDyOTPMHm+m9BS7EFYjRSIhrqaOKTw+tpoUONKhckft+DD
UdaDbG5ti81veSaIQmaDK4nodRRlSGaQziqSD7SVi/+NiD9YdtuDBsSBSJ/GXExo
591t2SyAIgyepTFGeK7i44iq7wZ3+grxuDbrQDlOUXNGNxr8MFixqMbq5ADTOAAu
bN5q8VftmQ+sy86IzSbKSwgAl2ju/pHQU9Y7VivR3eFNsriNDPB8s5dR1oeOXs2Z
cxDBGBDq+6Kg8viWeddRa9UyEDoayq8FTjETb7sWBNMml+OkjbCdGL80ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzK0ij82pczDf3wlNrZOtvegY4WMB8GA1UdIwQY
MBaAFOC4ZxMRAMFd6JARAGPmOKXwI2fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNExobkV4RUF3VjNva0JFQVktWTRwZkFqWjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lZWU1MjEtMjVmYS00MDA2LTk1MzEt
MWUwNDQ4MTQ1MThmLzEvNExobkV4RUF3VjNva0JFQVktWTRwZkFqWjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lZWU1MjEtMjVmYS00MDA2LTk1MzEtMWUwNDQ4MTQ1MThm
LzEvNExobkV4RUF3VjNva0JFQVktWTRwZkFqWjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0VJAKMI
bM8OKiH0yB5VfFeCcLz8AwnQBk08Gu8rb3m5nzplujMYtepumkrR2/Sq09o8jDtv
2uEkyDQkh0Mu4jXBkEKspj6ufeFTVrZ4DohLS5LizvIgnyIrxdwmXWt+/VeDy1gc
ozy4i9f0CJ2qrb9pI6ABTUxAXJmES7djRkKLmwINYLJbqKFbYzzSUiE/tpaWeBXB
AqopomZgyPaAvOh8Lk008gmZYnPcXqDPQjOgiEvT49Qr5UoSDkcu8S8rzIeWa37I
HupQsjCe9E6aMTPsVDA5Jf710zcxTQwUNsyYd0mGuMRVO4WaAZ0dqZ3QYk+xpnN5
bSCDkEa2Cj5Xcw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:03 2026 by rpki-client