Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: yQIxEOLtI6aJF3/yAGZhhihw7A/woYkvmqirZbEJ5cY=
Subject key identifier: 01:4D:F1:EE:29:35:14:AC:CA:C1:1B:DE:33:5E:52:41:41:0A:85:67
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 019FAA87C25B514F676BA2DC7F5A7091D3C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 1967
Signing time: Tue 28 Jul 2026 21:00:51 +0000
Manifest this update: Tue 28 Jul 2026 21:00:51 +0000
Manifest next update: Wed 29 Jul 2026 21:00:51 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: P6hPiklJ9OilEsiIxz4kTOiGJJt6IwYAj3Gu45BIEs4=)
2: Z-KRt-a6fFf_5XtERzEP16Ujm4E.roa (hash: UsGPZBKjWrTYFqihznPKPakXtZqMZXtabA/JlRVq59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:c2:5b:51:4f:67:6b:a2:dc:7f:5a:70:91:d3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Jul 28 21:00:51 2026 GMT
Not After : Jul 29 21:00:51 2026 GMT
Subject: CN=014df1ee293514accac11bde335e5241410a8567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:91:37:c8:ec:f8:22:2b:96:3b:e6:86:9b:
e0:0c:e6:24:3c:4e:30:a9:42:5c:7a:09:67:1c:4b:
44:b7:ce:9a:08:1c:91:4a:05:ab:5b:ae:8e:4d:55:
5c:d0:f6:67:2f:dd:ea:60:61:b1:40:c2:34:c0:58:
2d:86:4d:a7:69:24:fc:70:b7:d0:3e:3d:bc:d4:50:
0c:7e:5d:cc:d2:c1:7a:12:ca:57:81:13:f4:00:ef:
15:6e:2b:5a:1b:43:db:85:e4:0c:be:d0:d1:f9:88:
eb:ea:cf:fd:b7:b9:33:72:be:39:ab:6b:46:b4:f9:
f0:de:0c:bb:9e:be:f9:ec:00:22:2d:7d:27:54:b9:
69:a5:8f:5c:d1:1d:41:f7:4a:64:00:70:ff:94:bc:
b6:48:50:cc:b2:f5:21:45:63:d8:a4:c8:9d:d3:f6:
02:6d:71:e3:f4:c0:61:7d:3a:cc:3c:cb:8d:43:df:
13:0e:4c:98:ce:44:06:ea:64:62:c6:b2:7d:ea:d7:
e8:f4:c3:ac:8d:aa:ae:5d:7c:22:86:5d:18:1c:20:
d6:fe:5b:60:c8:e1:49:3b:ab:95:d6:a9:f3:75:9a:
ed:7b:73:57:9d:23:13:f5:8a:2d:fa:dc:d4:3e:e6:
6f:ff:2f:18:45:67:83:8f:a5:d2:eb:00:2a:fc:e1:
77:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4D:F1:EE:29:35:14:AC:CA:C1:1B:DE:33:5E:52:41:41:0A:85:67
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8b:ff:a2:b9:2e:2c:9a:1d:d8:dd:23:39:12:50:5a:db:9a:
37:25:66:ab:56:b3:66:25:fd:c5:d1:8f:e2:5e:a1:94:30:94:
79:8f:4d:61:a5:b3:42:9c:df:39:d0:32:b1:59:f2:a4:82:1f:
e9:45:2a:b5:31:d7:bb:68:ac:8f:4c:e4:2b:64:bc:b5:7f:3a:
f0:01:82:4e:ae:61:67:07:6d:40:f3:6d:03:df:93:2c:9c:dc:
17:ec:24:6d:cf:6b:0c:fb:9a:a9:c4:9b:b1:7d:37:63:39:df:
1c:70:3d:93:ea:d7:05:78:3d:d3:7b:04:9c:2f:42:9a:9c:df:
04:6a:f8:14:05:9b:5e:e4:d0:b3:b3:e8:a6:e4:4c:cc:54:43:
40:5d:04:12:f8:77:af:7f:2c:8e:a8:fe:f4:9a:e9:41:02:c7:
dd:7e:eb:79:2f:00:b2:82:f2:9e:5e:8d:32:e5:9b:8b:65:0a:
59:2c:b5:fb:55:de:6b:31:61:e6:46:6f:80:65:28:f2:6b:2a:
90:d4:b3:72:19:a2:e2:f2:f3:b4:e5:66:90:d2:df:01:01:fe:
a9:94:5c:71:c2:c6:33:d3:4d:22:2a:1a:cc:5f:0f:e3:2a:37:
58:bc:2d:33:65:9f:e5:89:d6:d7:27:ea:a3:d7:c3:26:1c:f7:
11:81:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:30:08 2026 by rpki-client