Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: ZoBWMswy9dkEqY0vDwC5QAItfFyER5C3wv9tcf4KnJY=
Subject key identifier: E4:11:B0:31:0B:FA:25:7D:CF:F6:DA:BA:73:AA:78:D9:25:9F:FD:A2
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 019FA9AC110CED585DEF376199AB50D3E622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 17:00:53 +0000
Manifest this update: Tue 28 Jul 2026 17:00:53 +0000
Manifest next update: Wed 29 Jul 2026 17:00:53 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: 5Ay9y2Ku5RhpT4m8zepG5cQXlvb++yembeY5watSdX0=)
2: KUodnXGsFwyNehqN551Z9d54ZJM.roa (hash: 6vmbRe0Gw7jdU6fIKbRaOK9xmSJJHl1pGRS+mY2Td7Y=)
3: RxQknk-i6X3uYtHklAq4xTvLElU.roa (hash: e3Fk8UZszFvxL51DyoJ+zqnCymh1Yk5n+ob0FV7BX9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:11:0c:ed:58:5d:ef:37:61:99:ab:50:d3:e6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Jul 28 17:00:53 2026 GMT
Not After : Jul 29 17:00:53 2026 GMT
Subject: CN=e411b0310bfa257dcff6daba73aa78d9259ffda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:d4:89:a8:7f:71:64:3a:b9:da:b7:97:ba:
26:a0:92:a0:fc:77:ba:26:c4:24:16:5f:60:00:d9:
c7:2c:0e:90:47:cf:f4:f3:4c:31:a9:88:b4:1b:fe:
b6:07:2e:c7:d0:b3:ee:48:48:36:6a:03:ef:2a:90:
54:fe:c3:de:f4:83:7e:11:94:7e:0e:82:d3:80:ca:
67:cc:3a:76:7b:1f:2c:24:0c:76:eb:ea:bb:89:37:
0f:a4:9d:5e:7b:14:44:af:7c:f4:a9:70:de:45:02:
10:75:6b:b0:28:85:ff:a5:7d:f3:e9:e7:a9:69:36:
72:81:f4:4b:17:dd:20:1a:61:c4:10:2a:ba:40:a1:
2a:05:5b:06:03:f0:6a:35:5a:40:ee:44:77:f1:af:
ac:ae:02:a0:a9:37:56:5d:a7:4f:c1:ac:5a:00:34:
da:3a:ac:71:c3:31:d8:b7:b0:cd:a2:2d:8b:f7:cd:
4b:ab:86:3d:02:1a:9c:99:18:4f:e3:9e:ae:f9:3a:
4f:2e:c3:71:7c:db:70:c7:33:a5:09:ad:c0:32:95:
14:57:dc:a2:2f:b4:22:79:bf:cf:67:0b:2c:1d:9b:
97:ab:bb:ec:be:4a:4c:b2:31:04:ab:f6:06:44:6e:
77:8b:61:3b:d1:76:1f:9e:91:e5:da:92:a7:8e:ea:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:11:B0:31:0B:FA:25:7D:CF:F6:DA:BA:73:AA:78:D9:25:9F:FD:A2
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:90:8f:44:95:37:b3:34:b8:1a:d0:f7:cf:e7:42:cd:fe:cb:
9f:e5:5c:14:d1:aa:a7:ba:cc:46:c3:f2:5d:52:7f:2a:86:fb:
7e:ce:a1:66:a1:34:73:06:2a:7e:17:f6:28:2b:b2:84:a8:c1:
51:aa:30:6e:db:0f:29:4a:66:97:ad:0e:4a:07:7b:74:18:ab:
fb:01:52:10:ba:cc:bd:5e:69:67:10:7d:c3:04:44:28:7a:13:
bb:68:3c:b3:6b:b2:18:34:ee:08:9d:8f:94:37:a9:ba:a2:36:
82:c6:2e:33:a1:51:42:58:d9:1f:c6:5c:e7:ca:1e:54:e8:ea:
78:01:99:56:7f:3d:98:11:b8:1f:01:b3:27:e0:ae:11:52:22:
a0:70:a2:99:02:0a:82:01:18:e8:22:6d:92:5d:bf:54:ba:d2:
5e:bf:94:59:14:dc:ac:c5:6a:29:f9:85:30:2a:8f:4b:07:82:
40:f9:40:50:83:2d:b9:7a:f0:35:53:5f:a5:da:aa:71:e4:30:
cd:36:4b:af:21:99:a9:60:a5:37:c1:73:5a:30:ee:d3:2d:21:
d1:3f:cf:ad:fc:aa:42:50:30:94:90:a8:af:46:c6:14:b5:62:
41:52:3b:b6:5f:f5:40:f8:13:9c:22:d3:c8:e8:b8:49:cb:e2:
7d:57:ce:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:36:03 2026 by rpki-client