Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
File: 4rWwjcQz-On3dyfLUfa6JL3V85o.mft (raw, json)
Hash identifier: AWR/Ofq5XDTaQ+2pa1iHnK3T3hcL5cpbe6re8P8YT04=
Subject key identifier: 1C:CA:D7:C7:5A:D1:25:9A:CE:42:21:64:16:50:7C:E6:F2:02:07:7E
Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Certificate issuer: /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Certificate serial: 019FAB640C77641E87B60B3502C8D5F2EEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
Manifest number: 09EE
Signing time: Wed 29 Jul 2026 01:01:28 +0000
Manifest this update: Wed 29 Jul 2026 01:01:28 +0000
Manifest next update: Thu 30 Jul 2026 01:01:28 +0000
Files and hashes: 1: 4rWwjcQz-On3dyfLUfa6JL3V85o.crl (hash: LWz/DjhbRUdkiOvvIz6W9IAFPSZnCplTeTsqr7BxqzA=)
2: BxZPTQDdLKKz_KzmvAmu63Br_30.roa (hash: RJzmMfXa1i3UOXt5apo9yzIAminXwO5ap7oBJzJBEJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:64:0c:77:64:1e:87:b6:0b:35:02:c8:d5:f2:ee:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Validity
Not Before: Jul 29 01:01:28 2026 GMT
Not After : Jul 30 01:01:28 2026 GMT
Subject: CN=1ccad7c75ad1259ace42216416507ce6f202077e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:63:b5:fc:cb:e1:c9:fb:bf:d9:20:15:04:
bb:b9:c6:e5:cf:ab:9d:7e:d9:9c:3c:74:9c:4a:62:
9d:d2:e4:52:37:62:6c:04:66:4a:5f:1a:5b:8e:2d:
15:82:dc:ed:19:4e:fe:6a:17:c9:66:7b:0d:58:0f:
e2:28:00:5d:14:c5:90:eb:6f:5c:d6:e9:26:15:5f:
06:8f:5d:b0:01:58:57:64:3f:26:8c:12:ee:92:88:
6f:b4:ac:8e:8f:f2:eb:9b:c8:89:24:35:67:34:f6:
4a:8b:5a:73:dc:00:eb:2a:2e:f3:e9:16:bd:21:c4:
e3:19:36:5a:3f:13:2f:30:53:78:aa:27:de:93:20:
09:03:25:10:bc:b9:1f:bb:d8:38:48:d1:c8:f6:4d:
bd:5c:77:fb:b8:69:4f:e7:66:14:ef:6b:1f:3e:74:
dd:03:1c:fa:53:d3:f3:a6:f6:44:65:54:6f:75:06:
2d:d3:29:f6:95:c5:ec:b5:47:e1:8f:16:4b:d5:39:
00:81:38:2a:27:9a:d0:61:8e:24:c1:aa:b5:e1:48:
3e:87:20:8b:5f:92:65:ee:10:59:1a:c3:97:1a:bd:
29:ab:da:70:8f:7d:61:64:9f:a5:43:85:b7:10:43:
7b:82:54:c3:ec:cd:6a:88:cc:20:65:04:6b:a2:d9:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CA:D7:C7:5A:D1:25:9A:CE:42:21:64:16:50:7C:E6:F2:02:07:7E
X509v3 Authority Key Identifier:
keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1d:a1:48:8d:52:cc:0f:71:8f:7a:b7:3d:07:c8:41:fa:59:
6b:8f:e4:3b:7d:d1:55:27:b8:53:b3:de:36:eb:de:38:d9:bb:
83:d9:b7:44:68:6e:dd:71:f1:a8:cf:8e:cc:c1:9f:49:52:20:
cd:b9:db:5e:1f:40:63:78:aa:10:50:9d:e6:de:99:91:65:64:
7d:52:a3:bf:3a:74:03:bf:e2:97:48:1f:dd:62:01:e9:2f:b7:
43:77:c3:36:c6:38:66:e2:1b:2a:8d:b6:26:b1:18:3e:8a:09:
68:fa:bf:60:dc:00:cf:40:d0:10:5a:37:1d:9d:8e:3b:8d:75:
94:7c:f6:f6:c3:af:9b:f2:ad:dd:a2:c8:1e:28:24:a2:23:2e:
3c:1f:72:e0:61:27:eb:76:5e:d4:0a:77:d2:b6:94:95:98:f2:
39:34:aa:ae:74:35:2d:3e:3c:76:23:bd:2e:d4:c0:20:ab:aa:
55:ad:d8:6a:fb:1c:0b:a7:30:be:18:75:8c:f4:e9:0c:df:00:
c0:ed:f3:49:b6:be:5b:28:ab:0b:0a:61:e2:08:14:b9:0f:b7:
94:9b:e0:d9:b1:c3:2c:54:5f:e9:70:03:52:6f:58:dc:75:70:
9a:c8:7a:33:90:ea:cd:92:26:9d:59:10:3a:a6:cc:71:3e:3e:
82:7c:82:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:39:01 2026 by rpki-client