Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
File: J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft (raw, json)
Hash identifier: 6wDhoBIpDiDLcRcZr4agMdHmyJ8pJKIZUNmFhg1e00w=
Subject key identifier: CB:3D:7C:9F:A2:00:8D:11:F7:53:2F:47:19:8E:81:CC:D7:EA:97:3E
Authority key identifier: 27:81:00:BF:DC:37:BC:79:92:41:F8:37:60:C9:AD:11:53:44:D8:B0
Certificate issuer: /CN=278100bfdc37bc799241f83760c9ad115344d8b0
Certificate serial: 019FAA87E50D78ABE75742103DD774942B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:00 +0000
Manifest this update: Tue 28 Jul 2026 21:01:00 +0000
Manifest next update: Wed 29 Jul 2026 21:01:00 +0000
Files and hashes: 1: 85mSZls-XHlgJOvWmgk-VtOFBkA.roa (hash: FPNYFDWtHSvEK1gnIwxleo9g0+U1nGpA9pdz6kB33Sg=)
2: J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl (hash: 90WfhtRmXabQtOSHsktNUwG5lNyAw4JlQP8eGmCHgLY=)
3: kbQFQOWzDlX0E1V08cvnijkeOTY.roa (hash: ZvoM8j+qNFn5EDYwxPR3kym37UjIAoq+nL3E4fERgJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:e5:0d:78:ab:e7:57:42:10:3d:d7:74:94:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278100bfdc37bc799241f83760c9ad115344d8b0
Validity
Not Before: Jul 28 21:01:00 2026 GMT
Not After : Jul 29 21:01:00 2026 GMT
Subject: CN=cb3d7c9fa2008d11f7532f47198e81ccd7ea973e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:d1:fb:b8:80:c7:74:4a:99:c2:2e:9a:a9:
a8:6f:72:34:39:cf:fe:f4:ee:40:d6:cd:55:96:7a:
5e:8d:4f:b3:1c:b6:6f:8e:e8:2b:48:b3:50:bd:6b:
a6:2e:45:53:d6:24:39:ca:8c:86:2b:61:a6:45:e6:
ee:cc:cd:a0:cf:79:2d:b9:7d:23:93:af:47:85:58:
26:87:eb:d2:6b:2c:c9:74:a5:21:c7:96:eb:e4:85:
cb:fb:6b:24:54:0d:0d:38:13:75:25:d1:71:0b:60:
c0:92:8b:ba:dd:fc:26:24:dc:ad:76:2c:ee:c5:c7:
0e:dc:96:0b:9c:fa:f3:81:f8:e1:f7:5d:49:c4:c7:
01:b3:72:4c:30:ec:c8:ed:11:a9:71:cf:f9:85:2a:
ba:dd:6f:f3:00:0d:8d:14:5b:63:da:c9:cf:73:91:
e3:48:08:e0:28:31:b0:71:ed:3b:16:da:60:3f:52:
ab:fd:10:7c:15:b6:45:ca:17:c7:1f:b8:d5:a2:f7:
99:3c:7c:5f:06:18:a9:28:c5:e1:e0:7b:73:8e:fd:
2f:de:a9:a8:2d:22:7e:8b:96:24:23:ce:cb:68:7c:
23:50:da:cd:1b:1d:4b:e4:13:42:d7:dc:a2:27:1d:
34:73:a9:ed:77:2e:85:56:ca:6f:e0:62:54:1e:3b:
c0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3D:7C:9F:A2:00:8D:11:F7:53:2F:47:19:8E:81:CC:D7:EA:97:3E
X509v3 Authority Key Identifier:
keyid:27:81:00:BF:DC:37:BC:79:92:41:F8:37:60:C9:AD:11:53:44:D8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4EAv9w3vHmSQfg3YMmtEVNE2LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/J4EAv9w3vHmSQfg3YMmtEVNE2LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2d:06:3f:e9:9a:06:f3:d8:cb:9a:d1:9e:7c:24:a3:fd:d6:
dc:f6:64:56:92:a8:63:cb:08:82:ca:d1:8f:b9:10:96:ae:f3:
ba:e2:b0:c7:12:15:f9:be:73:cc:5a:fa:f6:7e:29:65:f1:1d:
3e:9a:fc:1a:5e:40:63:62:a6:e9:99:5c:3f:29:2c:29:9b:ea:
d8:57:f2:ea:95:91:8d:1d:07:ec:29:70:e0:91:cd:75:6d:6e:
eb:2d:9e:bb:d5:a5:92:96:11:5f:a2:ab:01:46:56:9d:15:a2:
43:6d:e2:71:31:1d:74:f8:c1:4a:92:c1:23:88:4a:5d:5e:6b:
aa:c8:71:3d:2a:e0:7a:0e:cd:15:48:98:51:55:d3:ae:95:a0:
b6:fd:a7:a6:2e:e8:b2:88:a0:cd:7a:50:a6:1e:d5:f7:29:08:
38:64:4f:d0:14:07:6f:9d:31:a7:6f:63:18:42:d3:9d:9d:68:
f7:50:35:45:3a:49:ab:64:a3:b9:12:77:f8:b1:94:10:be:3f:
31:7c:05:4c:e6:27:8f:d5:e4:63:cd:f2:b6:7a:e1:3d:27:3e:
71:25:93:00:6b:20:ed:6e:ab:6a:4c:ac:8e:8a:ee:ea:91:8d:
67:b5:13:cd:14:13:57:fb:d9:3f:89:16:84:61:73:c4:bc:9a:
1d:0b:e6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:45 2026 by rpki-client