
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File: 4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier: TNei7dBrVma1EuEXRlewi0DGgCqPP6adbaasAzSnALE=
Subject key identifier: F1:B6:E6:EB:B8:9A:C5:8E:CE:B4:12:3C:9F:3E:F4:62:66:A7:C8:CD
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 019FA9E2E5050FD6DFD61693809D92BE71D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 18:00:46 +0000
Manifest this update: Tue 28 Jul 2026 18:00:46 +0000
Manifest next update: Wed 29 Jul 2026 18:00:46 +0000
Files and hashes: 1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: jyluFtZqJ5QAi6C7N+QpPWSXBaKZqzXGtiXj6IjXD0k=)
2: Dv6DzYWC8QD9B_MZto_ESNK4j6k.roa (hash: punip1kHRpKApQYHrsUHwLPlb8qszTQ5w8o2U1ESN+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:e5:05:0f:d6:df:d6:16:93:80:9d:92:be:71:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Jul 28 18:00:46 2026 GMT
Not After : Jul 29 18:00:46 2026 GMT
Subject: CN=f1b6e6ebb89ac58eceb4123c9f3ef46266a7c8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:59:26:e8:20:00:d4:ef:f6:c6:a2:2d:c3:
9b:a5:08:94:0b:ae:0b:6c:62:b1:0b:8c:0f:57:d9:
4a:66:96:05:af:a4:d6:5a:fb:cb:61:3b:70:4b:06:
0e:8f:67:2e:49:a1:3a:52:99:73:59:3f:4b:22:78:
a6:be:81:f3:3d:07:f7:0e:a9:ff:a9:04:97:34:98:
f0:b2:7a:b8:00:1f:46:47:28:09:38:31:77:02:c2:
ba:82:9c:2b:29:67:b1:75:eb:1b:1a:d2:f1:04:e1:
8c:2e:ff:26:41:89:34:e9:9e:f2:14:8e:c3:e2:31:
24:e4:78:b9:8a:1b:f3:51:00:04:bb:91:1a:e7:91:
8a:0e:14:f9:95:e7:9b:a5:da:7a:58:7d:52:82:47:
fe:c8:bf:8e:21:88:d5:3f:4d:c4:c4:17:f0:51:a5:
07:f6:b6:1a:07:fa:0d:65:1a:12:0c:5d:10:b6:22:
16:e0:b0:8e:80:67:77:85:50:bc:aa:82:f7:42:7c:
d9:3e:34:19:25:72:74:51:e8:27:8e:d5:85:b6:b7:
a5:5f:c8:72:bb:8e:78:a8:76:09:cb:cf:dd:0a:80:
31:74:44:f8:74:fc:0a:c0:ac:da:bd:ca:88:b9:14:
67:36:7a:62:0b:97:0c:55:ea:3e:91:b4:b3:e1:e0:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B6:E6:EB:B8:9A:C5:8E:CE:B4:12:3C:9F:3E:F4:62:66:A7:C8:CD
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e1:bb:0c:ae:41:7a:8b:eb:3d:4c:10:d0:de:6d:87:60:40:
29:94:b7:3e:14:25:f5:db:f2:99:e0:2f:7d:b0:3d:1a:b3:bf:
86:53:6e:a5:6e:54:6c:c8:89:50:d8:1f:38:eb:01:a9:bb:24:
69:45:ff:04:fc:36:60:6c:d6:6c:0d:1f:ed:6f:fa:5f:cb:ac:
a2:f7:d1:ec:50:e5:cb:d1:4d:b1:9c:2a:dc:47:10:2b:36:9c:
c7:e4:d2:dc:3c:62:18:b7:9c:12:63:af:db:51:97:4b:bc:bd:
37:b9:40:9a:b0:d4:20:f8:70:b2:58:b8:7e:20:88:ca:3a:28:
d3:eb:44:c3:b8:28:37:3a:aa:d1:b7:bb:0f:14:77:01:8b:23:
fd:bf:4d:bd:24:85:c4:23:9a:40:c5:64:21:d2:4f:52:81:53:
85:ae:23:9b:ec:d5:6a:dc:b3:1d:bd:6c:ae:8c:6f:64:ba:ee:
9a:17:10:01:1d:83:11:a9:90:3c:69:4e:ab:8b:23:8d:0d:99:
2a:f1:9a:40:d1:31:d3:00:77:5f:4c:26:14:5c:b8:60:8c:2e:
1c:e2:d9:0f:d9:9b:4d:d3:64:11:07:05:0d:05:1e:0b:b3:1d:
f4:60:12:48:e7:4d:48:d0:de:30:de:d0:71:db:20:2e:f0:30:
91:7a:e4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:53:48 2026 by rpki-client