Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
File: 4auG-AxLsqxW5B7HokauKWnY01g.mft (raw, json)
Hash identifier: 5wjskETEyg3eKmH7jZ2CeHq5aZyOIONP8XXVXi54YBQ=
Subject key identifier: 4C:9E:BD:49:7C:69:60:F4:B9:87:BF:54:93:53:B7:8D:10:1D:E4:B2
Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Certificate serial: 019FA93DCA6FE326CFD548D27C0CA9EB61A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
Manifest number: 099C
Signing time: Tue 28 Jul 2026 15:00:26 +0000
Manifest this update: Tue 28 Jul 2026 15:00:26 +0000
Manifest next update: Wed 29 Jul 2026 15:00:26 +0000
Files and hashes: 1: 4auG-AxLsqxW5B7HokauKWnY01g.crl (hash: TMUU8rsCY4UWjBQvLSuyn3k2bgrtFvmDLnZuZtlVovQ=)
2: KNOVXoGQsdCxPsZM3zKJ6uFmptI.roa (hash: UiYbuT4DjmIashb94arKXLuitUGRN2TvoEQlDnO6RSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:ca:6f:e3:26:cf:d5:48:d2:7c:0c:a9:eb:61:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Validity
Not Before: Jul 28 15:00:26 2026 GMT
Not After : Jul 29 15:00:26 2026 GMT
Subject: CN=4c9ebd497c6960f4b987bf549353b78d101de4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a7:8b:33:d6:22:f8:33:7d:61:71:f5:61:03:
93:bf:86:a9:56:61:05:5f:e6:c7:6e:ef:9d:43:60:
40:c3:7f:50:57:a9:a3:92:59:80:1f:52:0f:62:ee:
5a:dd:1e:8a:d0:d3:fd:66:62:3f:6c:c2:56:63:c9:
e9:94:ef:14:60:40:d3:e5:43:13:de:35:57:e1:69:
52:e1:0c:02:05:45:cc:94:5b:65:71:ab:68:60:50:
10:da:23:6d:e7:30:2f:b1:4b:7b:8c:90:6b:40:b4:
87:b3:02:a1:1b:16:6f:30:03:61:7f:0a:10:5b:f5:
30:11:e5:29:18:0b:e0:ac:44:11:1b:60:f0:93:c1:
51:83:43:cb:c7:83:36:3f:05:7c:d6:7f:c1:98:8f:
de:48:25:b3:81:84:47:4d:54:46:d1:d7:93:b1:11:
e9:f2:c1:24:9e:be:9c:37:37:cf:5a:f4:e1:d8:23:
43:b4:cf:a7:45:2b:b6:99:86:cc:ad:b3:1a:63:92:
58:51:06:99:6a:f9:73:6d:ba:72:e0:e9:e7:ae:73:
c7:11:31:3b:b0:a9:73:d1:f1:d1:37:5c:82:09:21:
b1:b6:c7:90:2b:59:8d:93:15:23:c6:b1:a0:da:a7:
71:b3:3e:c3:e4:36:96:8a:79:a2:8f:88:98:8d:d0:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9E:BD:49:7C:69:60:F4:B9:87:BF:54:93:53:B7:8D:10:1D:E4:B2
X509v3 Authority Key Identifier:
keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:04:cc:59:cf:36:3f:36:8d:c9:b4:b6:a1:0f:0f:1d:51:4a:
ed:26:b6:88:80:52:bb:06:b9:4f:f1:3f:3c:a1:77:12:47:19:
4d:70:79:c2:c5:76:b8:8f:89:29:ce:16:27:89:a3:33:41:a0:
e4:e0:89:ce:f0:81:30:5c:da:56:ea:a5:69:23:6e:0c:72:fb:
69:ae:8f:a8:2d:47:b3:00:60:1f:3a:9b:fb:28:d2:ea:57:e2:
ae:f0:e3:e2:82:d7:bc:7f:77:4f:03:10:c3:ed:ee:0b:87:4f:
96:75:e2:60:2a:fa:8d:81:e5:20:9a:42:89:4f:87:c5:4a:c6:
33:48:c4:c3:59:7a:61:bb:f7:54:f1:b9:be:55:d6:1c:d9:e2:
28:19:ba:f5:2b:7b:bd:9b:71:9e:cd:30:ac:63:0a:c7:3a:39:
cb:45:8e:51:de:a0:ac:60:0d:2c:3e:a0:f3:65:3c:c5:a9:07:
25:db:6b:9f:10:e3:97:5e:a4:2f:34:be:bf:4f:fc:a3:92:8d:
44:7f:ed:15:90:d9:e5:ed:8b:6b:25:0b:f1:22:6b:45:57:14:
ee:c1:26:e4:9d:9e:9f:05:f5:7d:1b:ec:39:af:40:f7:7e:4c:
9e:ed:65:fb:b3:ab:3f:54:c0:f3:0c:71:aa:4d:d4:f8:ba:68:
f8:ed:1d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:43 2026 by rpki-client