Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: kRLh+fO7ebCtxeEe+/F5H+q9/ehkg83YI+cAmbs9wVc=
Subject key identifier: DF:60:F7:16:E5:7F:7E:6F:6F:7A:80:5C:3E:73:E2:86:14:DA:CF:10
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 019FA9757A2CAD7DDA7BB41DB8A72462F87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 0C11
Signing time: Tue 28 Jul 2026 16:01:16 +0000
Manifest this update: Tue 28 Jul 2026 16:01:16 +0000
Manifest next update: Wed 29 Jul 2026 16:01:16 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: n6Y9HTcTem+a+oL60P1e91g9rp/tGrLFOwGnBGa0ArI=)
2: OPFTuLGWkU6mUdnCpgOtMP0wcEc.roa (hash: mYTV++dJNwiiA96b08GGaua3APnQu69gvPcnLc6GiRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:7a:2c:ad:7d:da:7b:b4:1d:b8:a7:24:62:f8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Jul 28 16:01:16 2026 GMT
Not After : Jul 29 16:01:16 2026 GMT
Subject: CN=df60f716e57f7e6f6f7a805c3e73e28614dacf10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:b1:ff:36:43:60:ab:f2:b7:13:39:05:6d:
69:b1:8e:a1:c0:32:28:e6:6d:29:30:ae:3e:ca:3d:
a8:89:66:7b:97:53:12:38:85:bb:26:37:f3:8e:ed:
8a:a4:f7:04:0b:13:f1:21:58:cf:0b:a3:e1:ae:66:
71:4e:55:f9:0b:cd:cd:8d:41:c6:89:9a:99:39:46:
ae:be:00:31:86:24:17:4f:a7:d5:73:fc:26:5f:92:
b7:c1:16:ac:75:9f:1a:a1:46:f0:1d:42:ff:95:6a:
1f:00:c8:85:a7:27:7a:66:d4:37:e7:91:09:70:c4:
ca:e6:42:af:d1:18:98:f7:bb:2d:ff:b3:cf:81:04:
6f:59:c6:87:82:8f:c6:da:8e:3b:3b:41:ae:eb:bc:
93:03:41:20:0b:8a:2e:0e:41:0e:da:d0:f0:44:e4:
03:94:b6:e3:8b:32:2b:c9:98:5f:f3:5a:77:4c:51:
5c:11:02:04:e6:8d:b4:e0:23:b4:42:2b:99:6e:91:
58:87:90:00:74:0d:c6:16:dc:68:6a:72:49:89:40:
a1:c7:9e:2f:80:09:2d:e1:49:80:d0:95:b4:83:a1:
69:36:04:4d:7e:aa:b0:43:03:db:59:20:6b:01:b3:
d4:87:65:ec:57:27:55:84:bc:aa:ff:c4:bb:4a:fd:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:60:F7:16:E5:7F:7E:6F:6F:7A:80:5C:3E:73:E2:86:14:DA:CF:10
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2a:96:7f:7e:80:a3:98:40:58:ea:54:d6:7a:d9:ef:f9:1f:
8a:46:2d:02:84:e4:61:41:22:12:4b:6c:12:7b:17:1e:50:b9:
fe:1a:68:91:9b:fa:ce:3a:d1:95:56:be:5d:c0:71:7e:33:67:
89:d5:c8:c1:7b:14:4e:b5:06:2c:d7:c9:71:93:22:d4:8a:88:
74:0d:4d:e2:0f:03:66:ae:d5:1d:81:9c:8c:73:09:dc:cf:dc:
65:2c:0f:d1:42:dd:95:72:50:d4:ab:4c:f3:75:f8:c7:18:33:
78:c2:e7:55:4e:9c:67:f8:ad:c1:48:3e:db:ea:13:36:24:9f:
31:9e:ac:7c:86:1b:0a:88:80:5f:51:15:74:bd:c8:45:d2:dd:
f0:4a:b0:7d:71:c0:2e:b1:a7:06:41:c4:e2:c3:78:4a:f9:ce:
63:79:ef:cc:68:d9:29:5a:a0:94:e0:8b:96:1c:50:f2:47:c3:
f1:11:5f:6d:56:24:e0:b2:2d:6a:53:a9:1b:1c:e7:05:a4:cf:
c8:e5:6e:ac:d5:b2:74:6b:4a:aa:99:11:c0:bd:b6:2e:55:ef:
4b:f1:56:90:ac:c3:bb:93:06:08:c6:8f:14:0c:81:e7:89:d8:
0c:dd:de:a4:d3:89:74:f5:bd:23:43:22:4d:26:6e:8a:09:3a:
7a:60:7f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:53:22 2026 by rpki-client