Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: 2+hkjup2ncKNSBlqSQov6Gd83OhwroZiNMiPgdDBC3A=
Subject key identifier: 4E:3A:8A:15:38:09:18:03:A3:67:AD:1C:4C:0D:26:0B:2A:F9:2E:4C
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 01A00101143626B4047CCCD742A796492A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 18D2
Signing time: Fri 14 Aug 2026 16:00:42 +0000
Manifest this update: Fri 14 Aug 2026 16:00:42 +0000
Manifest next update: Sat 15 Aug 2026 16:00:42 +0000
Files and hashes: 1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: v8AMmH3dwX2KH9ShA2bGTUVVvG++rCrXvkt1E5cxovk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:14:36:26:b4:04:7c:cc:d7:42:a7:96:49:2a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Aug 14 16:00:42 2026 GMT
Not After : Aug 15 16:00:42 2026 GMT
Subject: CN=4e3a8a1538091803a367ad1c4c0d260b2af92e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:0a:1f:d3:dd:3c:a5:1f:98:b0:72:ca:69:
0a:41:7c:be:50:4c:59:f4:7b:38:84:ba:72:44:5c:
e3:bd:42:a6:ea:9b:a0:c7:24:47:30:29:b9:cf:2f:
4a:0e:76:f4:67:40:44:32:a4:97:55:62:55:02:aa:
cd:f8:74:e3:a0:eb:be:e1:33:65:53:10:fd:d5:9c:
9d:d8:7e:e0:0a:e8:f8:7d:6f:66:7a:22:17:bc:01:
09:c3:aa:e3:00:e2:c2:b2:bc:36:87:3a:67:c5:30:
97:62:aa:31:b2:c6:bd:08:41:e3:95:df:3d:25:4b:
a0:bb:8b:35:d7:50:3e:d2:31:ef:9a:30:71:d9:61:
46:6c:1c:62:6c:2c:8f:58:99:20:38:56:6e:6f:87:
c0:8d:64:c3:be:3f:6c:41:42:1e:17:9c:ec:0e:49:
36:89:7a:0b:df:aa:cf:71:e6:59:8f:b3:d0:e8:3e:
fb:d9:9d:50:d3:66:40:a0:e6:c8:21:fb:b3:51:fa:
58:26:e8:1b:db:64:c1:1e:e5:61:b9:9c:f4:75:80:
27:a3:36:01:95:04:ef:4d:ae:e8:4d:f5:d7:cd:03:
19:84:57:f5:df:62:a7:8c:59:12:73:ba:54:e8:95:
64:f4:f5:aa:ec:b9:34:e6:d4:10:67:91:18:b9:81:
ea:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3A:8A:15:38:09:18:03:A3:67:AD:1C:4C:0D:26:0B:2A:F9:2E:4C
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:05:15:e7:6f:84:31:77:eb:42:e7:cc:87:db:d5:24:f2:8c:
56:31:9a:ae:b3:45:3e:1c:4b:cd:3d:44:87:80:9f:6d:03:71:
16:09:d2:67:b2:f6:f6:dc:41:6b:f8:65:91:6f:a4:b9:90:3c:
f5:95:92:37:b8:e9:9b:42:83:59:95:66:01:b1:72:64:bc:61:
13:35:0d:64:01:3a:77:bf:25:4a:8e:d5:d1:de:9d:83:6f:86:
29:ea:03:1b:e6:65:04:32:0e:df:3a:19:48:e6:2d:a7:e7:cd:
b2:27:56:a6:00:3e:82:cf:25:05:49:44:6e:93:5c:13:80:a9:
81:00:ff:cf:ed:62:51:a5:1d:6e:00:b7:fa:8e:a7:02:4b:1d:
1b:09:ac:07:43:fb:74:87:e2:4a:93:88:01:d8:f9:b0:eb:86:
5f:94:92:5c:e3:81:c8:21:55:46:7d:6c:96:19:8c:86:13:cd:
42:b0:1b:16:7b:11:6f:78:38:98:47:4b:0c:7c:b7:3a:26:b8:
b5:27:64:41:3b:1c:0f:23:e5:4f:6e:33:f3:90:07:fc:39:ff:
c3:e7:ef:2c:ee:a2:b8:33:7d:be:44:c3:a6:8a:28:1c:d8:3c:
8d:94:94:fd:1b:3c:77:80:ca:d0:4f:a0:76:54:42:7e:cf:0b:
6d:52:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:57 2026 by rpki-client